Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
File:                     gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft (raw, json)
Hash identifier:          TGVu4eLYWDHqq/Pp1+01S15RGPUeC39E7SKmI3vmAT4=
Subject key identifier:   DC:D6:11:01:6E:1D:E1:65:09:95:C9:27:1E:54:5E:5D:51:D8:FC:68
Authority key identifier: 80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
Certificate issuer:       /CN=F36D46F6AF/serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Certificate serial:       E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
Manifest number:          DF
Signing time:             Thu 26 Mar 2026 06:09:09 +0000
Manifest this update:     Thu 26 Mar 2026 06:09:09 +0000
Manifest next update:     Sat 28 Mar 2026 06:09:09 +0000
Files and hashes:         1: gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl (hash: 7EknfFI3D3toGQUoj5fVelnXgPq1VJNwmS/dCxix5RI=)
                          2: B341C57C7D8B11F098D9F7B2DAE4EC9C.roa (hash: gxdDf5YFTTIXUD0ePn6Oc2L/cMAyoWONeU7Dg/ah8UU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D46F6AF, serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
        Validity
            Not Before: Mar 26 06:09:09 2026 GMT
            Not After : Mar 28 06:09:09 2026 GMT
        Subject: CN=69c4cd85-1da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:8c:65:55:c4:1e:2d:9a:1c:71:d1:3e:30:
                    2d:a1:78:1e:2d:16:08:c5:db:65:d8:d8:c9:52:57:
                    2b:2b:ad:c6:4a:2e:69:2d:af:80:84:7e:a8:92:7d:
                    ec:01:35:6f:ae:0f:1e:4f:8a:10:25:b6:1b:b7:26:
                    ae:b2:07:e2:19:a9:40:e9:db:e7:1b:ac:7a:ec:a1:
                    7f:a5:3e:48:8a:83:59:06:a3:6b:99:3d:cb:47:eb:
                    4e:f1:bd:e3:5c:54:aa:7f:ce:9a:97:87:b4:38:81:
                    e1:03:4a:f2:d2:98:35:13:97:96:42:6e:7f:d6:8c:
                    fd:e5:0d:61:42:d0:80:88:4f:c9:82:37:ae:42:d9:
                    30:03:d7:97:54:4c:62:f5:26:67:36:e4:33:e3:f9:
                    e9:22:f2:a3:b4:b1:7f:a4:e4:36:64:31:73:ca:b0:
                    38:1c:9e:ab:2d:df:8b:ec:4e:a7:a1:1a:61:ad:da:
                    5b:d2:66:5b:b1:5e:bb:78:55:6a:b8:e7:3c:a6:30:
                    3a:a5:39:2b:74:82:8d:90:0a:53:41:0d:d9:90:fd:
                    49:08:b5:ac:ad:69:ed:6e:fd:be:8d:56:a6:7c:38:
                    24:b9:6f:7b:27:71:5a:17:16:43:14:a0:67:fc:5b:
                    44:a8:27:35:ab:8f:c1:39:13:bd:a0:89:84:50:e1:
                    d2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D6:11:01:6E:1D:E1:65:09:95:C9:27:1E:54:5E:5D:51:D8:FC:68
            X509v3 Authority Key Identifier:
                keyid:80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:34:73:d2:d5:ef:a4:40:dc:b9:ca:da:4e:f7:8b:86:60:05:
         dd:c3:19:3a:10:12:fd:05:43:c0:c3:89:fd:b5:34:a0:40:31:
         26:40:3c:65:2f:49:f5:bf:45:4c:2f:75:ba:17:f9:74:88:b0:
         a2:2c:29:7c:7d:d7:38:94:7d:cf:49:62:59:15:97:9f:db:e8:
         6c:8d:1a:d7:4a:f2:7e:ac:b9:d1:bb:fb:f8:47:56:18:b9:51:
         63:16:53:ae:be:c4:00:b8:24:33:da:41:4e:b6:f9:f1:68:7b:
         72:65:42:91:c7:67:2d:ab:cf:0c:42:3c:2f:d9:ab:f9:9c:c0:
         13:6c:11:ac:14:a7:da:80:d8:39:7f:23:96:06:14:93:7b:29:
         cd:8a:b0:82:6f:b2:c7:2d:ca:17:9b:e5:2c:53:fb:6b:c6:7e:
         9d:2f:76:b0:5a:2a:fd:90:75:fd:f1:a8:b9:7f:e1:2b:f4:84:
         3b:0e:2f:40:cf:49:dd:12:17:97:56:6f:7f:22:b0:c0:cb:9f:
         56:45:13:af:32:4d:30:b4:e2:dc:1e:bd:3c:e4:cb:52:62:8c:
         7d:75:0b:76:01:1a:d4:cf:6c:0d:57:81:14:c4:07:fc:f2:25:
         6b:5a:7c:0c:18:e5:ed:4d:75:6a:18:c0:8c:01:13:e2:34:c0:
         6b:44:16:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:54 2026 by rpki-client