Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          4zhCPzcgHoXvIggHRXU0pZBnJLxTOs8ChK5/tSTtG60=
Subject key identifier:   84:F3:F3:04:4E:19:BF:59:2C:74:40:67:D9:D8:A7:0A:D8:CB:56:E4
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       055A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          0558
Signing time:             Fri 17 Apr 2026 02:54:56 +0000
Manifest this update:     Fri 17 Apr 2026 02:54:56 +0000
Manifest next update:     Sun 19 Apr 2026 02:54:56 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: koTpjlStuCWdzGKWvL8VSZDyZBe7PtkZB9KYVv+EM+M=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Apr 17 02:54:56 2026 GMT
            Not After : Apr 19 02:54:56 2026 GMT
        Subject: CN=69e1a100-b305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:95:20:c7:10:16:19:ec:51:52:0f:77:3c:89:
                    8f:e9:df:e8:5a:14:0c:38:66:71:3b:92:b2:76:80:
                    40:a3:9e:ea:08:b9:67:86:0d:86:8d:1e:90:06:f3:
                    9a:bd:eb:a9:7b:70:9f:17:2a:3d:41:9d:70:5a:fd:
                    a6:4d:4e:29:62:1d:c9:0d:09:69:1b:31:f1:8e:01:
                    25:d9:13:90:7d:c5:54:07:e1:a6:eb:88:56:c5:eb:
                    d2:81:79:9a:90:fd:e9:0c:ce:c7:99:34:d8:f9:85:
                    3b:42:7b:ca:a4:78:d8:a5:23:17:77:10:43:3b:60:
                    6e:ab:6c:2e:f3:14:43:d2:90:03:ba:55:f6:d8:fd:
                    2f:eb:b1:5f:98:d4:00:aa:a8:dd:38:bb:dc:19:6e:
                    b0:e1:1e:18:ce:0f:eb:51:0b:c2:a6:7a:ea:d9:64:
                    5a:23:ee:25:df:e7:69:ff:49:1c:e4:22:bf:c6:63:
                    82:22:6c:b3:6b:b9:f3:55:0d:65:fa:cd:37:9e:b9:
                    57:6f:ed:43:4d:2a:6e:68:6b:6e:d5:52:f3:f6:d3:
                    f4:4b:26:c5:8e:68:bd:a1:77:3f:af:92:c8:65:d8:
                    86:db:d1:03:89:ac:bb:b0:3b:b2:6c:ae:88:3f:65:
                    24:6c:d1:3f:90:9b:36:86:27:f8:28:de:bb:e4:b3:
                    6b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F3:F3:04:4E:19:BF:59:2C:74:40:67:D9:D8:A7:0A:D8:CB:56:E4
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a9:94:02:e0:a4:a7:ed:1b:95:be:4b:07:e9:96:e7:93:e3:
         a7:03:14:8f:f0:d0:a4:3c:92:af:f3:4c:d1:70:0e:d5:e7:3e:
         44:d7:24:5c:11:8c:91:83:3e:b4:1d:5f:0b:35:9f:7f:0d:72:
         7f:79:8d:a2:1c:a4:50:0f:22:b0:6f:19:fe:df:3b:f9:65:1b:
         87:fd:23:ee:f4:5f:0f:c2:55:99:b1:fa:fc:66:01:0b:b4:0a:
         59:52:8d:49:79:b3:b7:92:ad:a4:5d:96:ae:2b:0b:eb:fa:7e:
         82:ab:61:6f:69:a7:c0:6b:12:9d:58:42:c7:cd:78:6b:01:a2:
         7e:fd:84:8e:ac:0f:c8:67:a4:17:b9:84:6e:9d:1d:86:f1:13:
         15:65:f9:ee:f4:98:2e:62:66:d6:bd:8f:c3:28:4b:76:1b:36:
         c5:59:4a:d3:b7:d5:52:44:e2:ad:54:d9:44:6e:33:c1:bf:7b:
         84:f2:21:3b:b9:ae:3b:d5:b6:f6:a3:f8:ca:c1:c3:02:cd:6b:
         91:95:f2:19:ed:1b:23:a3:39:81:e6:35:c2:b0:73:e2:0a:fe:
         e6:eb:1a:3f:8d:5c:09:13:5e:7a:9d:32:f4:fd:6f:b5:6a:e0:
         62:ad:c0:de:95:4a:10:5a:f9:38:bc:a4:ea:97:68:43:93:ce:
         2f:ac:08:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:25 2026 by rpki-client