Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          Y90BbvtUkP20JpsyIgudajAiRSuY6D5ImRv0POOugzs=
Subject key identifier:   6A:2B:AF:EC:F8:E1:B8:A6:92:5C:5D:E3:A0:C3:F1:89:41:D6:E6:6E
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       048A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          0488
Signing time:             Sat 14 Nov 2026 03:43:44 +0000
Manifest this update:     Sat 14 Nov 2026 03:43:43 +0000
Manifest next update:     Mon 16 Nov 2026 03:43:43 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: xaUr9hLgWvBVngwUGSl2tprDG6GTlH0COE6yBHp3VI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162 (0x48a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Nov 14 03:43:43 2026 GMT
            Not After : Nov 16 03:43:43 2026 GMT
        Subject: CN=6af7d8f0-09b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:89:f8:dd:6d:fe:ce:12:fd:c7:69:92:b1:d4:
                    9d:fc:23:dd:20:83:54:06:4d:42:ae:08:8b:8c:d8:
                    1c:17:90:88:53:cc:9a:78:c8:96:1e:9c:31:24:ee:
                    33:0c:de:db:21:8d:73:86:d2:d8:91:9a:5b:59:16:
                    9a:94:95:70:54:92:79:d7:ca:c9:7b:5e:be:9a:68:
                    e9:9a:f4:72:bf:52:97:97:6f:8b:6b:a4:4c:34:12:
                    f5:bb:64:c8:de:70:3d:4e:f3:42:85:af:fa:47:81:
                    23:b1:2d:f6:d2:af:63:02:bf:d2:25:35:e5:19:4f:
                    ad:de:0c:28:fe:d2:5a:33:1d:b9:be:b1:41:a8:ad:
                    0c:ac:3d:89:59:7b:e7:9e:79:b5:5d:f6:69:42:82:
                    6f:60:de:06:dd:06:ef:42:23:cf:e9:a3:5c:6a:11:
                    33:79:0e:71:b7:02:40:0c:e3:ce:40:cc:f5:9c:f4:
                    a9:47:11:83:6b:a2:7a:9d:07:90:fb:86:de:32:da:
                    0f:3a:f1:ed:4f:35:dd:b4:e2:eb:4f:34:6c:1a:56:
                    47:06:ea:ba:d8:a3:f1:ff:58:a5:91:da:c4:35:d8:
                    00:a9:7d:e8:6a:10:c1:85:d4:1d:0e:dc:a6:98:8b:
                    16:04:11:37:e5:f1:55:50:c8:2e:b7:da:b8:06:00:
                    35:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2B:AF:EC:F8:E1:B8:A6:92:5C:5D:E3:A0:C3:F1:89:41:D6:E6:6E
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:a9:c4:b4:f6:77:7c:af:03:08:ed:99:6f:fe:0e:c2:46:
         14:ec:c3:c6:c2:dc:82:e3:26:0b:bb:9b:6a:a9:1a:8e:06:90:
         a5:fb:e7:61:4e:ca:ae:c6:95:96:d4:cd:ae:d5:86:df:3f:f8:
         96:f3:e6:a2:c7:8f:99:cb:67:46:20:43:33:d9:72:2b:c5:6b:
         5f:d1:7b:fd:bd:8e:86:3d:a4:bc:2b:c0:a3:40:5a:21:54:21:
         9d:fc:2f:a5:3f:d5:c1:f8:ad:46:fa:8a:9b:ee:41:5e:1c:4e:
         59:88:6f:37:3c:9c:09:90:58:10:f8:96:cc:8d:db:3c:0a:16:
         1f:a2:a2:79:1a:b1:7b:d4:bf:62:0d:48:b4:5a:52:75:72:32:
         e2:5d:e9:17:6e:77:7d:c3:27:3f:c5:a5:4b:7a:e1:34:32:51:
         ad:a5:a6:60:34:e2:ad:ac:c0:da:fc:54:f4:4d:aa:de:2a:e6:
         ce:a2:b1:c7:c3:a0:db:cc:ef:58:0c:85:57:c2:d6:f2:53:9b:
         97:84:17:eb:71:d8:9b:a1:73:1f:fd:3f:2a:b5:b2:bd:5e:5e:
         d0:94:df:73:75:bf:5c:37:9f:bf:62:2a:35:29:7e:97:2e:d5:
         53:02:2e:d6:23:b9:ca:9e:ea:2f:0a:b5:ab:59:d5:9a:71:29:
         12:45:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----