Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          0ZKavu+fhcRxI0aYpG4MGzGLLNcOnD/89uoIFubElac=
Subject key identifier:   45:CD:AF:48:EA:76:43:EE:88:C7:8E:95:DC:EE:6B:75:20:61:EB:83
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       0A2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          0A20
Signing time:             Thu 26 Mar 2026 01:25:10 +0000
Manifest this update:     Thu 26 Mar 2026 01:25:09 +0000
Manifest next update:     Sat 28 Mar 2026 01:25:09 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: 2OuJV/dgBwd/jl/tMMt6+PFYEquxEWrilPz2Fy4Ft7c=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2603 (0xa2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Mar 26 01:25:09 2026 GMT
            Not After : Mar 28 01:25:09 2026 GMT
        Subject: CN=69c48af6-7b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:97:13:a9:02:57:5d:0b:d2:18:db:76:32:
                    34:5d:b4:ec:21:79:a9:35:0d:53:24:b7:7a:aa:e6:
                    dd:79:77:81:04:2e:8e:6e:7b:fd:5e:86:b8:d4:ee:
                    0c:dd:99:41:d5:ed:87:dc:b6:9d:9d:cb:a0:4c:08:
                    5a:35:0f:2a:76:1e:ba:b1:d6:df:b9:78:57:97:3e:
                    ec:11:43:f2:6c:98:43:7c:a4:66:17:a2:6a:44:e0:
                    a9:2b:3d:94:e0:b9:7a:56:ef:66:78:96:fa:b0:1a:
                    74:f2:d8:a9:d1:0f:0f:cf:2e:ee:94:12:c4:98:5f:
                    7f:48:6d:32:93:a8:09:81:2e:1c:56:3b:0a:34:91:
                    8a:94:16:ef:ad:fd:5c:a6:17:0c:e4:43:37:09:41:
                    22:97:bb:d0:8e:13:70:18:46:02:ea:eb:e9:45:ec:
                    37:27:88:68:81:19:81:d4:9f:26:34:7d:4b:2a:74:
                    09:26:8d:13:26:a4:15:0b:c6:65:a8:03:5c:79:6a:
                    1d:0d:30:93:c2:4b:38:43:63:d9:ec:14:48:00:ef:
                    ad:e4:77:79:0d:23:f9:52:8a:29:39:b0:e1:ec:b1:
                    de:e4:3c:04:eb:a2:a6:09:68:ae:a5:e5:e1:60:7e:
                    ac:37:37:34:11:38:f8:ec:f6:71:c2:97:90:9c:24:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CD:AF:48:EA:76:43:EE:88:C7:8E:95:DC:EE:6B:75:20:61:EB:83
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:48:3e:eb:d5:79:a0:69:4d:20:71:e6:d8:92:a7:d7:ec:11:
         0d:a4:21:a3:54:32:13:7a:72:30:24:85:d4:ec:87:bb:ea:06:
         32:4d:be:e2:ff:f1:6a:a1:37:a3:43:19:f5:62:15:d2:8e:33:
         45:f2:94:e8:6f:8f:1d:e6:67:82:b4:7a:31:ef:fc:37:c3:fb:
         c4:79:6c:91:d7:98:7f:76:71:1e:10:0a:f1:b2:29:f4:f8:0f:
         e2:3a:e4:68:e7:31:e6:93:04:ff:2e:8a:4a:a3:93:0c:ae:40:
         c1:97:b7:1c:28:d9:f6:ea:69:f0:fd:c5:57:23:59:3d:ea:a7:
         90:1d:bc:d4:84:8f:45:1e:57:2f:60:55:6d:4b:33:1e:91:71:
         14:9a:28:1e:dc:ac:9f:fb:86:3c:60:dd:1c:fb:7a:41:29:f6:
         51:b7:57:d5:cf:22:ad:43:c7:c3:f3:1e:80:bf:53:70:18:e6:
         eb:38:bd:82:68:b7:92:30:03:ee:f3:3e:ca:aa:cb:0c:6d:56:
         5c:c5:b8:cd:3e:8b:ff:c3:e9:79:f8:15:e7:79:8b:e9:77:07:
         d7:33:01:00:fc:21:84:a8:30:7d:c7:8f:d8:36:ea:69:a8:1a:
         a8:87:5e:78:7f:0e:4e:e7:bb:c1:1f:76:72:99:c4:52:78:e4:
         e9:47:56:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCiswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNjAzMjYwMTI1MDlaFw0yNjAzMjgwMTI1MDlaMBgxFjAU
BgNVBAMTDTY5YzQ4YWY2LTdiNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwQpcTqQJXXQvSGNt2MjRdtOwheak1DVMkt3qq5t15d4EELo5ue/1ehrjU
7gzdmUHV7Yfctp2dy6BMCFo1Dyp2Hrqx1t+5eFeXPuwRQ/JsmEN8pGYXompE4Kkr
PZTguXpW72Z4lvqwGnTy2KnRDw/PLu6UEsSYX39IbTKTqAmBLhxWOwo0kYqUFu+t
/VymFwzkQzcJQSKXu9COE3AYRgLq6+lF7DcniGiBGYHUnyY0fUsqdAkmjRMmpBUL
xmWoA1x5ah0NMJPCSzhDY9nsFEgA763kd3kNI/lSiik5sOHssd7kPATroqYJaK6l
5eFgfqw3NzQROPjs9nHCl5CcJLDhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURc2v
SOp2Q+6Ix46V3O5rdSBh64MwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkSD7r1XmgaU0gcebYkqfX7BENpCGj
VDITenIwJIXU7Ie76gYyTb7i//FqoTejQxn1YhXSjjNF8pTob48d5meCtHox7/w3
w/vEeWyR15h/dnEeEArxsin0+A/iOuRo5zHmkwT/LopKo5MMrkDBl7ccKNn26mnw
/cVXI1k96qeQHbzUhI9FHlcvYFVtSzMekXEUmige3Kyf+4Y8YN0c+3pBKfZRt1fV
zyKtQ8fD8x6Av1NwGObrOL2CaLeSMAPu8z7KqssMbVZcxbjNPov/w+l5+BXneYvp
dwfXMwEA/CGEqDB9x4/YNuppqBqoh154fw5O57vBH3ZymcRSeOTpR1ZB
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:19:39 2026 by rpki-client