Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          XFjcnbdbks9131VF6Y5KMhOczQZlUDYhKiSdOiIrIDo=
Subject key identifier:   A5:4B:6C:F1:70:B8:D7:A3:26:5D:38:C5:10:5F:93:3A:80:AB:2D:88
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       083D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          083B
Signing time:             Mon 28 Sep 2026 02:00:15 +0000
Manifest this update:     Mon 28 Sep 2026 02:00:14 +0000
Manifest next update:     Wed 30 Sep 2026 02:00:14 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: t6PxZxsAS90TChhXjkXYQ4WVuAhyNOfJPbqp+5yKGIE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
        Validity
            Not Before: Sep 28 02:00:14 2026 GMT
            Not After : Sep 30 02:00:14 2026 GMT
        Subject: CN=6ab9ca2f-fa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:bd:5d:f5:44:43:21:86:a1:a8:bd:34:81:
                    9d:c1:f2:e7:23:a9:f1:72:f1:62:8a:1d:a2:39:27:
                    d4:11:8d:9c:1e:06:15:06:5d:00:af:41:24:9f:15:
                    1c:04:cc:f9:69:84:bf:9b:de:ef:4c:f6:39:cb:39:
                    86:1e:64:bf:52:34:45:bf:6e:35:2c:0e:21:b8:1a:
                    41:43:32:fc:fd:ae:82:79:09:6f:3b:e9:3a:a2:88:
                    76:f8:02:ec:16:ab:95:35:4d:26:98:07:45:1a:b0:
                    86:54:ae:d7:8c:6e:7d:97:86:f1:17:96:6c:8a:cc:
                    9f:78:b5:dd:cc:cb:7c:60:d4:39:12:01:a9:da:ac:
                    f1:05:e7:58:2e:b3:8a:7f:cf:af:6d:32:ae:78:89:
                    e2:67:1f:27:5a:e2:76:5f:7c:9d:2c:58:3f:18:96:
                    9f:8c:a1:04:c6:c8:07:a4:82:85:22:60:6f:b8:54:
                    1b:ad:66:71:69:5a:26:ad:81:ae:c1:67:da:24:bf:
                    bd:e2:34:a4:77:d8:c8:95:50:52:cf:25:e0:59:7e:
                    00:b6:ea:b1:80:4d:b6:e4:ca:47:25:b0:87:61:7d:
                    1d:d5:f3:a7:f7:80:94:8c:4c:8c:97:55:16:f1:57:
                    f8:9e:4c:ef:2d:ec:32:20:b3:af:e7:fa:e0:4f:67:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4B:6C:F1:70:B8:D7:A3:26:5D:38:C5:10:5F:93:3A:80:AB:2D:88
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:45:eb:63:2c:e8:c4:8f:db:c6:21:ad:15:d0:ac:c2:61:9d:
         4c:3a:a5:16:da:03:bc:ff:4e:bc:86:e7:4f:8d:83:ea:e2:87:
         c7:ad:de:83:50:86:88:cf:63:bd:87:93:88:80:ae:ff:d2:8e:
         a0:a4:fe:6b:ba:ba:00:32:04:96:ea:0d:03:fe:47:01:58:56:
         0b:ad:85:da:55:cc:14:53:74:00:45:06:53:83:a9:82:9c:af:
         f6:c4:33:f8:e6:18:eb:fe:26:a9:dc:cf:00:07:26:68:6c:20:
         91:ed:00:46:ec:ee:9e:51:38:c7:b2:ea:86:ff:2c:42:d2:a1:
         6b:49:66:68:71:93:19:f1:4a:5d:64:89:76:29:22:a6:2c:80:
         c1:87:70:1c:ff:d4:5d:69:45:db:2f:d6:1a:3d:5c:23:d7:e5:
         ac:0f:74:82:01:88:f4:17:de:9f:53:26:28:b6:1d:a8:7b:95:
         59:8b:a7:a6:c0:84:41:5a:5f:cc:40:3e:50:7e:f5:d5:69:4a:
         91:f5:cf:49:7b:8d:25:09:06:e5:05:a0:ea:96:31:58:47:fb:
         49:20:cb:cf:d8:9c:b4:ea:61:d5:05:7a:71:b3:82:a3:1e:ac:
         57:bf:c0:44:58:c7:58:ba:f9:f8:7f:fb:c6:8f:19:43:4f:29:
         dc:d5:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----