Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          yHKmf/29wYnUBOX+2O3w1rI4Y2lwd3z7fRDcLRDfM/U=
Subject key identifier:   D7:BD:7A:52:D6:50:77:A7:8B:2E:D0:F2:86:B0:F8:51:1F:F2:6C:96
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          0529
Signing time:             Sun 01 Mar 2026 02:07:50 +0000
Manifest this update:     Sun 01 Mar 2026 02:07:49 +0000
Manifest next update:     Tue 03 Mar 2026 02:07:49 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: ZlhUEPXD6q1X6rD07vrH+81rxBnfh+rOzmz3NXBOODY=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Mar  1 02:07:49 2026 GMT
            Not After : Mar  3 02:07:49 2026 GMT
        Subject: CN=69a39f76-f5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a7:df:30:af:22:85:a0:dd:d7:f9:a8:b3:b8:
                    0c:06:27:47:fe:39:6a:19:36:62:ec:7a:f4:ad:fd:
                    8e:91:09:25:0a:fb:23:9a:9c:2e:00:fb:97:ad:81:
                    ec:04:16:13:a5:c0:a9:81:08:f5:80:0d:e8:8b:91:
                    27:2d:00:a6:b3:57:1e:8b:03:32:21:e9:7e:a7:b4:
                    ec:ac:67:f0:73:4a:f1:09:7a:2d:67:77:aa:4c:fa:
                    52:a7:09:4c:10:d0:3b:24:7b:9a:bd:57:55:f7:39:
                    37:50:40:eb:07:e6:78:d2:20:05:73:06:f8:1f:71:
                    19:48:62:fe:76:b5:08:53:c2:28:d5:15:cf:b9:41:
                    a8:52:9c:42:d3:52:9b:89:5c:96:28:ea:cd:ad:a5:
                    91:a6:3b:79:31:ba:68:04:5f:bf:1f:92:13:c2:92:
                    5d:7f:36:78:af:0c:b7:10:15:84:84:c7:1f:e2:5b:
                    4a:11:93:4f:f1:fd:6a:8c:b0:43:3c:50:0c:85:9f:
                    25:0d:4d:85:bb:a1:2c:23:b0:52:e9:b2:6c:d7:99:
                    8b:6c:49:69:18:3f:df:7f:b9:86:25:c1:96:b8:98:
                    14:e1:a7:ba:e1:b2:98:a9:5f:bc:12:f5:e8:f4:c7:
                    a9:6c:9a:03:61:e3:c5:5a:9f:30:0d:ed:a7:12:0c:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BD:7A:52:D6:50:77:A7:8B:2E:D0:F2:86:B0:F8:51:1F:F2:6C:96
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:79:87:df:fa:44:be:10:28:56:ee:98:d9:57:61:9b:b9:62:
         94:4b:8d:9e:eb:71:5e:ea:6b:6a:a8:e9:18:48:53:16:7f:6a:
         c8:f1:ec:a4:24:60:b9:8e:91:60:dc:ec:8c:25:28:97:dd:10:
         c7:8d:8c:79:ab:af:af:41:98:92:65:98:47:de:c7:4f:d4:83:
         8a:ba:fd:a9:9e:cf:24:67:33:4f:e6:08:f5:43:f8:9a:83:0c:
         fd:d7:04:7c:54:cf:8f:49:5c:89:79:38:88:df:c7:a5:17:6e:
         bb:cc:da:29:3a:f9:aa:97:69:d9:8e:6c:5c:7d:87:88:c8:fe:
         d6:44:e6:37:ae:5e:89:e1:80:fb:47:6a:ab:56:7c:f8:b2:95:
         db:f6:80:97:29:b3:f6:01:3b:1f:de:eb:80:39:a0:f3:6a:d8:
         7e:06:bd:65:74:1d:9c:ab:b6:3a:e4:02:9d:f3:44:50:ab:a6:
         18:c9:09:2c:9a:29:97:70:ed:91:b5:bd:76:aa:df:b4:e3:54:
         51:7f:9f:f7:f9:a3:bf:31:41:b5:bd:ff:b5:8a:93:1a:56:de:
         6b:c3:a8:84:33:9e:60:f1:97:8f:05:cb:75:2b:8b:f7:01:15:
         1d:61:fa:32:aa:0c:39:1a:20:23:c7:e9:9f:3d:e7:9c:fd:8b:
         b7:a1:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:08 2026 by rpki-client