Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
File:                     GmsaK0nMdwGHzGghhibt3hBAg50.mft (raw, json)
Hash identifier:          dTv6Xq83lrFVAqOv+jtmO8hyvXinP1pjisWCMz5rLTc=
Subject key identifier:   7C:58:D4:06:53:ED:7C:4E:47:6A:1E:EB:79:9F:E0:AE:17:D8:3C:D8
Authority key identifier: 1A:6B:1A:2B:49:CC:77:01:87:CC:68:21:86:26:ED:DE:10:40:83:9D
Certificate issuer:       /CN=F365915BAF/serialNumber=1A6B1A2B49CC770187CC68218626EDDE1040839D
Certificate serial:       08
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
Manifest number:          08
Signing time:             Mon 21 Sep 2026 05:55:33 +0000
Manifest this update:     Mon 21 Sep 2026 05:55:32 +0000
Manifest next update:     Wed 23 Sep 2026 05:55:32 +0000
Files and hashes:         1: GmsaK0nMdwGHzGghhibt3hBAg50.crl (hash: ZmX4GLBZduDwokt+F1dH4TsRawv7pfhtme1HDbisK+g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365915BAF, serialNumber=1A6B1A2B49CC770187CC68218626EDDE1040839D
        Validity
            Not Before: Sep 21 05:55:32 2026 GMT
            Not After : Sep 23 05:55:32 2026 GMT
        Subject: CN=6ab0c6d5-5063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:1f:68:07:10:6e:30:17:6c:fc:45:44:21:
                    14:0d:0b:2d:72:ac:93:23:d1:f8:c2:39:08:5b:4b:
                    06:18:ab:9e:98:0d:b9:53:15:f1:ee:71:e8:22:1c:
                    63:8c:b8:fa:83:32:84:3d:ab:8e:28:05:72:df:67:
                    3e:ba:7b:d3:e5:2d:bd:37:d4:fa:ae:12:ac:1c:2b:
                    1d:d8:09:75:5e:d0:b8:88:50:ab:4b:65:28:40:ae:
                    3c:c1:5f:3b:b5:53:94:72:ba:39:c5:80:90:20:cb:
                    05:66:33:5d:27:db:88:01:dd:81:51:5c:33:de:fd:
                    b6:2a:87:a0:c7:dd:00:8e:aa:09:4a:7c:14:20:26:
                    a3:9b:de:67:a2:a4:a8:29:33:e2:3a:c1:83:91:18:
                    23:cc:4f:81:e0:6e:f0:9a:ed:45:e0:4b:26:52:63:
                    70:15:b1:9e:d0:59:4d:e4:c1:01:49:e1:d2:16:c6:
                    f0:bd:8d:c9:f3:9f:ea:60:cf:dc:ac:9b:ce:13:9c:
                    7f:78:f1:ca:37:90:75:b0:ea:e0:9d:9b:25:e1:12:
                    e2:e3:ee:0c:bb:2d:ad:c3:1b:af:fe:0f:59:8d:ac:
                    22:79:0a:0c:5c:7d:87:6d:e5:5f:12:8e:74:2d:c0:
                    b3:81:2b:6a:d8:8a:11:f0:7c:b8:fd:98:56:20:90:
                    bc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:58:D4:06:53:ED:7C:4E:47:6A:1E:EB:79:9F:E0:AE:17:D8:3C:D8
            X509v3 Authority Key Identifier:
                keyid:1A:6B:1A:2B:49:CC:77:01:87:CC:68:21:86:26:ED:DE:10:40:83:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:81:43:39:ad:cc:f5:56:0d:ba:4a:96:5f:30:93:98:cd:68:
         7e:98:ea:30:02:da:82:82:78:a9:ec:ff:16:66:92:36:38:dd:
         0b:71:ed:55:2e:81:58:8a:22:63:40:d5:4f:2f:4c:d0:a0:da:
         3c:ef:fb:1b:df:2a:87:8a:12:95:80:02:dd:f5:bf:0a:92:de:
         3e:a5:48:c2:e0:c5:df:96:78:62:52:cc:3b:ce:e4:40:af:15:
         82:5c:ef:33:a3:44:ad:85:37:05:81:46:a2:b8:03:30:49:ca:
         dc:95:31:29:bb:b1:a3:10:da:8b:5f:f4:e3:dc:5b:c9:80:74:
         c2:bf:b1:8b:74:81:f1:57:01:db:44:2d:1e:81:0c:87:82:d4:
         6c:c8:a0:dc:80:1f:12:29:20:ef:9a:72:42:51:44:3d:a8:ae:
         dc:7c:93:90:a0:58:3c:f8:ec:56:73:dc:1d:0f:8a:68:d0:1d:
         1a:1d:f4:48:85:9d:a1:24:7c:a8:83:c3:36:31:fc:4b:15:65:
         e0:c3:dc:c4:98:a0:dd:18:0d:0d:47:00:92:a7:d6:a6:c1:28:
         98:27:21:32:19:1d:38:4d:68:ed:fe:b4:59:da:3d:b0:a2:99:
         fc:08:dc:0e:ee:a2:f3:bd:23:ea:91:2e:ce:8a:ab:67:e7:00:
         45:c2:56:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----