Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          Wq9aRTnHEwzXhXfAJh9OqUDIS4G+nu/w1nFSdueCi3E=
Subject key identifier:   04:5D:08:9C:4B:50:DF:92:CD:73:CC:B4:06:93:E8:79:BF:D5:A5:D2
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       09BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          09B9
Signing time:             Tue 28 Jul 2026 01:41:09 +0000
Manifest this update:     Tue 28 Jul 2026 01:41:08 +0000
Manifest next update:     Thu 30 Jul 2026 01:41:08 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: 8z5iNkT9xuXM3R+PSfxgPs+FwwTsCuh+QrZ4jBke8vI=)
                          2: 5072AEFE89D111F18B20B5CDCE1D38B0.roa (hash: F8n2BcR3ryzUl8HMLoSq2Rf5j6pryb+IcWt69b/OZWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493 (0x9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Jul 28 01:41:08 2026 GMT
            Not After : Jul 30 01:41:08 2026 GMT
        Subject: CN=6a6808b5-f7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:2f:ea:83:ca:31:a0:e3:13:9c:d6:37:17:
                    d0:f6:51:bb:6f:19:0c:8e:c0:2d:3b:be:d1:66:27:
                    1e:ba:07:db:04:7f:e6:38:e7:55:7a:b7:7c:44:3e:
                    0e:80:6f:68:b8:c7:41:19:59:8f:61:a3:c7:f0:1b:
                    ac:75:f5:7d:86:04:09:12:24:6b:6d:04:aa:ac:ea:
                    23:a0:e1:4b:10:3e:54:8b:24:12:bb:0a:14:9a:85:
                    95:73:72:98:27:3c:4c:49:ab:3f:5f:22:a3:ca:11:
                    a2:02:04:4e:15:d6:b8:e9:91:6e:ba:c0:2d:1a:7c:
                    8b:ef:07:d1:1e:68:9e:1b:d6:3c:da:8e:cd:08:88:
                    b8:11:4f:2d:1e:a1:7b:a5:a8:8f:7e:ec:0f:49:cc:
                    a3:82:9d:2b:03:ee:55:e2:1d:86:d3:f9:25:4a:f7:
                    f1:66:44:de:ed:da:33:5b:0f:90:87:75:7f:bc:7b:
                    f5:60:8f:9a:39:e5:a2:18:29:98:2a:64:b1:06:bb:
                    dc:50:fb:4e:7a:61:25:8e:fd:51:ca:0d:5a:5a:2f:
                    68:1b:67:f7:fa:d2:9e:f7:c3:b3:b1:2d:31:36:e0:
                    18:b5:36:fa:8a:42:71:c3:79:75:7b:8e:3f:a9:a7:
                    b3:a5:ef:4e:49:b6:12:19:6d:c5:32:ad:ef:aa:cf:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5D:08:9C:4B:50:DF:92:CD:73:CC:B4:06:93:E8:79:BF:D5:A5:D2
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:53:56:80:c9:7f:fa:5e:3c:a0:8c:c1:e6:06:07:37:3d:0e:
         ae:c2:59:e9:64:3a:e6:de:14:49:7b:7b:b7:94:ee:1b:8b:95:
         7b:46:b7:fe:76:d3:92:26:5a:a9:11:85:b7:1a:6f:b9:e7:71:
         0f:c4:6b:31:dd:07:53:35:79:bf:e0:f7:35:9d:f6:07:d6:88:
         34:de:5f:ee:72:59:9c:41:dd:da:69:e4:82:ea:3e:58:75:9d:
         7f:9f:d8:63:0c:03:d4:67:2e:c9:3b:c7:dd:dc:3c:5a:f7:24:
         1f:9c:7f:cd:a5:78:ed:00:22:91:d0:0c:5a:27:75:09:f3:2a:
         44:9c:45:90:f3:c4:a9:02:45:bd:41:f1:2f:78:de:4d:2a:0f:
         75:90:ab:ea:f7:e3:73:01:4b:94:aa:fe:94:8c:0d:be:fd:aa:
         3f:b7:c5:f5:bd:52:4a:10:26:97:6f:81:8c:8a:1e:5e:76:3e:
         09:3e:20:3c:ed:53:34:d5:0b:f5:74:cd:ec:a0:b6:96:9c:07:
         0f:87:38:d4:ca:0e:a5:fa:cd:21:a9:43:a6:6b:37:22:91:6c:
         92:64:98:f7:3c:af:00:19:f4:24:72:b7:92:43:a1:0f:0e:a3:
         20:1a:2b:48:b5:b1:8e:c8:12:4f:d0:8a:66:22:0f:88:84:69:
         c2:df:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:33:01 2026 by rpki-client