Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          IaWk5PpQE6jOGEvBv2pu7NL9RBfSo5FPY9Hpsgjt+0w=
Subject key identifier:   9F:56:FE:C8:7B:DF:08:BF:5E:98:B0:83:D7:AB:A2:2B:E9:EA:8C:AB
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       04D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          04D2
Signing time:             Sun 11 Oct 2026 03:33:24 +0000
Manifest this update:     Sun 11 Oct 2026 03:33:23 +0000
Manifest next update:     Tue 13 Oct 2026 03:33:23 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: zLC9JpcYGRW4W/U3AhYszg9wsfqDW9VX5qgGtn0/+FI=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Oct 11 03:33:23 2026 GMT
            Not After : Oct 13 03:33:23 2026 GMT
        Subject: CN=6acb0384-9044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:6f:0f:f3:33:8d:92:8a:ab:a7:05:75:f1:
                    53:71:1c:40:62:5f:33:7c:4a:5b:bc:a0:93:38:12:
                    ac:51:b2:30:17:06:e9:e0:9a:c0:a8:48:35:a5:9c:
                    ca:4f:91:7b:75:01:fd:29:95:a7:4d:7f:2f:9c:84:
                    e4:48:25:aa:15:36:73:fe:52:c5:48:eb:37:83:ae:
                    87:ff:5f:45:a5:3a:03:33:03:36:70:a6:71:fd:49:
                    f3:a8:f1:e0:ee:bc:cb:f3:30:20:8d:be:8a:0e:db:
                    9c:bb:45:85:e9:6a:fe:e9:0b:59:21:05:b7:14:47:
                    5a:43:67:ab:3b:bb:e4:7b:99:81:0a:a7:66:9b:e6:
                    79:64:81:2b:24:c3:40:ea:50:96:87:9f:5c:f3:e4:
                    e0:df:3f:c4:12:ac:17:6c:8a:a4:e1:e2:99:06:15:
                    5e:0e:99:09:98:dc:0c:16:aa:45:b1:fb:49:e3:33:
                    4d:12:00:2c:01:a1:80:06:11:0a:e8:c3:b2:34:ab:
                    cb:e6:fa:04:3c:22:63:5e:ab:df:e9:73:46:57:5b:
                    a9:da:20:ac:12:cb:af:9e:e0:1c:88:3e:33:6d:da:
                    f3:76:b3:83:b6:31:6c:42:b5:75:4f:7e:8d:8b:73:
                    85:e9:e4:21:c1:96:f3:45:10:a6:f6:df:03:0f:26:
                    1e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:FE:C8:7B:DF:08:BF:5E:98:B0:83:D7:AB:A2:2B:E9:EA:8C:AB
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:3b:c0:5a:3b:35:b8:73:15:05:75:f7:28:ee:09:10:cd:14:
         f7:5f:c8:a5:1e:0f:44:18:9d:99:21:db:e9:68:a7:d3:95:be:
         cc:61:15:83:50:db:06:e4:ec:cd:28:49:1e:39:c9:0d:47:f9:
         ca:36:ca:ca:c6:66:58:a7:2b:58:85:4c:94:07:4d:65:eb:29:
         aa:85:c1:83:bd:c9:6d:88:03:ae:af:31:e0:ba:02:47:99:75:
         0c:72:73:6b:30:42:41:9d:c4:ba:36:3e:b8:38:eb:ed:e9:23:
         f9:fb:6f:b2:5a:d5:8b:b0:00:7d:1b:8a:f6:50:d3:ca:7d:7a:
         40:db:5b:2a:32:8d:76:64:83:47:77:c0:79:16:b4:95:c1:ea:
         13:a1:4e:30:5c:ce:a0:fa:47:e9:ad:2c:1b:11:67:1a:1d:f2:
         c4:d7:65:68:69:12:c2:dd:40:97:a5:cc:1c:4c:50:35:e0:9d:
         d9:98:ba:59:8b:85:e6:bc:37:26:c8:72:05:e9:f0:00:49:37:
         2d:cf:0e:af:cb:a0:78:f7:22:07:f2:f0:24:6e:99:3f:6c:f0:
         49:a2:b7:ae:37:92:47:35:96:14:58:ec:6a:5b:33:c2:84:7d:
         10:41:21:27:29:a3:75:54:1c:9b:08:50:82:30:86:43:b2:60:
         b8:3e:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----