Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          6HPu9vtj0VnC7+63e9xtovxj739Q3+1+z8SmrpzPf5g=
Subject key identifier:   E1:3B:50:A6:B7:FE:DC:99:8D:93:BE:4B:68:EF:4F:51:8A:3D:76:5F
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0CAE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0CAC
Signing time:             Thu 26 Mar 2026 01:14:27 +0000
Manifest this update:     Thu 26 Mar 2026 01:14:26 +0000
Manifest next update:     Sat 28 Mar 2026 01:14:26 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: kThzPesiChf10VdsZBgn7jTiiFfvEOiGq1+mVT7wG5U=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3246 (0xcae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Mar 26 01:14:26 2026 GMT
            Not After : Mar 28 01:14:26 2026 GMT
        Subject: CN=69c48873-1866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:90:22:ac:c6:a2:91:88:36:9a:5c:ef:83:
                    f5:0a:b6:a8:c0:28:6f:be:d0:b7:8d:73:b2:30:9a:
                    4b:3a:b4:c4:52:3f:07:d9:f4:9f:7c:78:e6:2e:12:
                    b4:3a:e8:16:a8:65:52:27:d7:ca:ca:a8:81:b5:27:
                    c7:13:7e:5c:b4:fa:55:f1:16:9b:2c:87:29:40:1a:
                    66:eb:2e:3f:d1:b9:6f:14:1b:8f:83:dd:f9:48:80:
                    9b:c3:d2:0b:75:27:33:37:34:9e:cd:62:50:f1:a2:
                    ec:f6:1c:26:2c:b7:da:96:54:6e:3f:31:4b:1f:ca:
                    89:ee:fd:76:73:e7:80:5b:77:d4:c2:2e:dc:31:b3:
                    fa:30:76:a6:53:2a:a2:b2:ae:ce:55:10:a8:f4:f2:
                    e4:d2:43:8b:1f:fa:6b:99:9b:d3:c3:f3:1e:8e:64:
                    d2:ff:d0:60:9f:4b:b3:72:90:7f:93:d0:11:b4:3d:
                    b1:7e:33:6d:16:ae:9e:f5:a2:49:a3:fb:bd:19:47:
                    96:06:ea:27:82:0c:bf:ee:4c:83:05:df:8c:fe:57:
                    7e:50:7c:43:91:64:05:ca:75:40:ae:28:b3:e5:fc:
                    6d:23:69:70:3d:57:21:04:70:0c:c3:25:c7:17:19:
                    80:be:34:4f:92:50:bb:d8:b2:17:54:d4:76:d9:e4:
                    ff:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:50:A6:B7:FE:DC:99:8D:93:BE:4B:68:EF:4F:51:8A:3D:76:5F
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:ad:b3:65:50:a3:51:71:49:73:97:a5:37:ae:04:fb:70:
         8f:82:1c:44:27:22:ca:e5:12:64:e8:72:e5:ca:45:ff:39:38:
         eb:03:31:75:c1:52:4a:43:dd:e6:cc:92:53:b5:22:db:89:4a:
         01:89:6c:9c:c9:f4:d3:4e:21:24:f3:25:d1:30:cf:9c:9b:fb:
         e5:1b:57:d4:1d:15:d4:06:c2:20:d4:32:68:7c:94:d0:a0:a3:
         c5:7c:2d:43:75:c8:72:35:c6:b7:0a:25:99:e1:68:07:23:bb:
         38:af:eb:5e:df:01:4b:b8:bd:4a:09:19:4a:2d:2a:fd:66:cf:
         43:a8:b1:10:4f:5e:77:7b:7b:0c:81:14:cf:2a:1c:22:fb:67:
         32:d6:de:ef:d7:90:22:6c:fd:ac:3a:a8:da:0b:d1:73:04:4b:
         d2:28:bb:14:e5:bf:af:ca:fd:f1:09:69:ee:8a:8f:79:5a:11:
         75:d5:d2:01:bd:48:58:6e:60:2a:0d:14:84:f1:0b:39:b9:f7:
         bd:2f:23:f0:3a:07:5e:38:22:6b:f3:7a:e3:ce:6e:d4:9c:91:
         ad:17:c9:06:a8:88:40:15:89:5d:81:6b:19:16:4d:59:25:3c:
         7e:9b:3e:44:42:99:c1:c2:93:98:4f:ed:66:7e:ef:52:e7:3e:
         a5:ad:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:30:40 2026 by rpki-client