Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          vpoKv0ZnE/F2Cl4oG8zjlb/6L4hgb/rTRJj/By+4WUQ=
Subject key identifier:   9D:5C:93:87:17:F1:A9:2F:15:E2:DD:EB:E6:F0:2B:BB:4B:C3:44:4B
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       03A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          039E
Signing time:             Thu 26 Mar 2026 04:26:06 +0000
Manifest this update:     Thu 26 Mar 2026 04:26:05 +0000
Manifest next update:     Sat 28 Mar 2026 04:26:05 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: YV0EuRAY9R0+DzteAJ6N2ZAylpOuGBC0jaoLMMTqods=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Mar 26 04:26:05 2026 GMT
            Not After : Mar 28 04:26:05 2026 GMT
        Subject: CN=69c4b55e-68e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:bc:f5:72:84:85:78:6a:3f:f1:95:47:de:
                    f0:1e:2c:3d:cf:c0:34:32:e9:96:ff:2b:a4:71:a1:
                    dd:ae:96:29:7a:6c:ce:1b:2f:39:e8:92:8a:aa:7e:
                    81:eb:d2:be:d4:b6:d0:88:2f:c6:84:3b:19:02:e1:
                    77:e6:c6:51:c0:89:26:48:00:c2:2e:f6:56:0b:96:
                    45:08:29:2f:00:4a:28:b6:1f:35:bb:c9:df:c6:45:
                    d0:e2:39:f8:ca:12:41:04:a9:70:78:86:ea:0e:c0:
                    6c:8a:d4:45:13:4e:e7:48:8d:77:67:e9:96:75:b4:
                    31:c3:4b:a2:74:8b:bb:f7:07:b8:7b:13:bb:f2:a3:
                    0d:87:f6:67:d5:ae:ac:70:47:03:f6:af:89:1b:f2:
                    4b:9c:e5:f7:7b:40:38:ad:db:f7:8b:cd:3e:ec:08:
                    4d:7b:ab:51:9e:95:73:0a:cf:79:b1:11:0c:eb:5b:
                    90:78:98:f6:c6:92:e8:ed:33:4e:94:94:40:1d:99:
                    5e:d9:53:da:a3:18:0b:8e:08:c4:51:ee:dd:08:0b:
                    1d:99:f8:03:f8:7d:94:9d:4e:69:54:4a:60:cf:81:
                    f6:ae:ef:3e:e0:26:43:71:cd:1c:bd:ba:37:12:49:
                    11:df:3d:5d:5e:ab:11:8b:a9:0d:13:3e:c7:7b:83:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:93:87:17:F1:A9:2F:15:E2:DD:EB:E6:F0:2B:BB:4B:C3:44:4B
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ae:35:54:a0:81:84:9a:53:cb:df:9f:a2:54:85:fd:b7:c2:
         eb:2d:5b:06:54:94:8b:81:e9:53:3d:65:3b:95:b9:98:96:0b:
         f1:f9:90:c6:27:3f:21:cf:cd:b8:81:94:64:64:08:08:7c:c8:
         27:db:ab:8d:f5:b6:36:03:1d:5a:e3:7c:ca:7a:86:b5:3b:f8:
         01:f5:27:db:b1:70:ee:93:64:4e:16:90:2a:bc:6d:89:b9:bf:
         3a:f2:f0:0d:7e:ea:15:98:96:22:f7:18:a8:be:5f:8c:66:e5:
         5d:62:77:75:d8:dd:60:34:79:36:ab:ff:cd:a4:e6:90:47:10:
         d1:2e:f0:5b:5b:21:47:36:3c:bb:e7:d1:d9:25:ca:77:e2:9e:
         10:4d:f1:b3:87:cb:a3:2e:32:41:98:ea:26:c9:86:ad:6a:d3:
         8f:ca:fb:a8:05:d1:39:a4:f8:7e:7c:07:18:eb:45:25:89:8b:
         c5:74:a0:0c:bb:01:5b:9f:96:a0:8d:80:be:99:af:0a:ea:c5:
         19:1a:b2:1b:7c:ac:41:cb:ed:91:2f:74:f7:c4:9b:ca:b5:67:
         9c:a4:6a:2d:73:c1:42:0c:47:68:c2:fe:cd:51:bf:5d:66:53:
         c6:c9:3b:eb:4d:6b:9d:e3:e0:5e:54:b4:a1:72:14:8e:81:7f:
         d9:a5:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:50 2026 by rpki-client