Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          VRxVuGmN0d3Ln2bOgxdT04UULHq39r5LlAlrZA+oRpg=
Subject key identifier:   75:40:C6:F4:F8:C9:B6:6E:78:57:05:69:4A:A3:5F:9C:D0:19:93:CA
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0BD3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0BD1
Signing time:             Sat 23 Aug 2025 01:10:22 +0000
Manifest this update:     Sat 23 Aug 2025 01:10:22 +0000
Manifest next update:     Mon 25 Aug 2025 01:10:22 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: KfFqbDqcfdDvlzCk1nwyv/y8+yObmBtC3H8d92dHQKI=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3027 (0xbd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Aug 23 01:10:22 2025 GMT
            Not After : Aug 25 01:10:22 2025 GMT
        Subject: CN=68a914fe-a8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:45:2d:22:c1:85:c9:8a:db:1d:a7:d8:71:db:
                    54:e4:05:ee:f5:81:cc:b9:44:dc:80:2f:b8:58:a4:
                    75:cb:8a:b3:52:04:e7:10:ee:67:31:e8:f9:c4:ed:
                    29:f0:fb:89:0a:af:b1:27:aa:0f:c2:e4:aa:6c:98:
                    1c:37:48:ba:c3:18:2c:10:d0:02:1c:09:49:17:83:
                    fe:bb:e7:9d:7c:13:c8:72:89:11:ae:b4:41:12:09:
                    e0:1e:b1:ec:0a:86:8d:a4:9d:b7:99:8a:b3:a7:57:
                    73:38:2d:9e:23:40:63:2c:8b:7f:21:b6:70:e0:25:
                    e3:d7:e3:80:07:03:cd:44:2f:ce:49:c6:11:75:ef:
                    35:4d:8d:0c:57:79:61:92:9b:49:04:ef:19:cd:d9:
                    9d:d4:3d:3e:b7:68:ee:de:8b:a7:83:e4:99:26:03:
                    36:05:1b:7e:6f:5d:22:80:7a:95:4a:7a:3d:a5:f4:
                    0a:4e:32:7d:6e:5b:c5:a5:8d:fc:ab:2e:e3:07:78:
                    17:78:63:e2:a9:04:80:50:82:de:d3:7c:37:ab:85:
                    2b:75:51:c5:52:80:c9:64:91:80:97:fc:27:54:51:
                    12:26:a9:0c:79:ab:0d:70:84:46:3d:be:c5:47:e5:
                    d3:3b:e4:75:30:83:4a:6b:10:44:d3:25:68:94:6b:
                    21:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:40:C6:F4:F8:C9:B6:6E:78:57:05:69:4A:A3:5F:9C:D0:19:93:CA
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:fc:27:6e:b7:2c:a7:09:62:0f:03:ac:f2:f3:d1:9b:0b:fd:
         da:7b:a7:8a:fa:71:96:9a:9d:ad:1f:82:21:b5:df:ef:4f:85:
         bd:6c:c1:95:4c:ec:4b:bd:f0:e2:a2:ea:70:39:0c:80:88:ca:
         5c:97:53:18:83:de:dd:cc:59:91:31:bb:a8:a5:3c:04:ef:60:
         90:67:e6:19:7e:e8:4c:59:51:b5:43:d1:31:57:6d:0c:1e:bf:
         ec:69:b8:ca:74:41:9e:ba:61:95:da:92:61:da:4e:d1:5d:eb:
         d9:64:6b:47:d7:da:b7:da:00:01:64:d5:2f:f0:44:30:a9:18:
         7d:b1:03:d9:96:2f:bc:f9:7d:ce:76:da:dc:62:48:5f:72:31:
         98:18:5b:9a:4c:c2:b8:ce:39:0f:48:01:6a:1a:e7:4b:eb:e8:
         13:a9:bb:b7:00:1c:58:ab:64:94:61:2a:06:44:3b:a0:5d:93:
         e8:81:f3:15:94:97:f5:8b:1b:90:b8:26:12:41:55:45:d0:ad:
         86:38:3c:83:40:09:53:c3:0a:ec:29:5f:fd:4b:d3:24:50:08:
         80:bc:48:08:27:a1:c1:97:46:64:d7:2e:f5:a7:87:79:9d:50:
         52:87:d6:1c:67:32:75:91:7a:ff:38:51:2e:e0:ea:b6:9a:14:
         0c:88:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:56:32 2025 by rpki-client