Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          mNc4Ov361TN/cct9yQKR/ljNOqS9QiDa9G1CSls7qTE=
Subject key identifier:   6D:E7:74:86:84:71:58:43:F3:FE:12:B0:C4:60:79:57:84:D2:23:2B
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0D2B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0D29
Signing time:             Tue 28 Jul 2026 01:09:28 +0000
Manifest this update:     Tue 28 Jul 2026 01:09:28 +0000
Manifest next update:     Thu 30 Jul 2026 01:09:28 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: EKRw838OBP6KA4VxZhnlgBLON6Ril/XgayI40DpyeZ4=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Jul 28 01:09:28 2026 GMT
            Not After : Jul 30 01:09:28 2026 GMT
        Subject: CN=6a680148-b5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ee:41:02:f9:4d:c5:c2:e7:fd:57:db:f9:eb:
                    cb:e1:74:41:58:2a:cd:96:e2:76:7a:da:97:6b:7c:
                    aa:1f:64:b8:37:cc:e6:27:88:1c:bb:52:85:eb:6d:
                    7b:4a:de:2d:1f:6b:b6:3e:03:cf:8b:3c:7a:a4:8a:
                    0e:ee:38:e8:43:70:b4:b1:70:90:f0:c0:3e:6e:fd:
                    4f:7f:b8:0b:60:2f:d1:00:1b:75:48:37:7a:5f:ae:
                    b1:e1:df:e7:75:e8:62:d2:10:12:cd:c4:f9:cd:7f:
                    cf:e3:78:82:46:8f:e7:5b:b5:9d:f5:f0:06:4c:46:
                    78:48:43:97:cc:0f:18:49:76:13:65:85:9e:d1:3b:
                    85:a9:65:21:c1:08:58:ef:a8:f4:4d:33:1a:44:da:
                    d8:ab:8b:09:e7:49:e1:f8:13:04:85:7d:b8:f3:b1:
                    59:ed:ba:0d:f7:8b:53:c6:32:ca:d2:15:51:1b:32:
                    52:bc:a6:db:07:d9:85:f5:99:6d:b1:51:b8:f9:fd:
                    a8:b7:44:b9:44:ae:f9:87:1c:57:26:cb:67:56:dd:
                    e3:2a:c1:8d:51:c9:09:94:78:c7:cf:71:83:f3:da:
                    e5:a5:c3:13:b8:03:8f:80:d6:20:fc:74:3b:cc:8b:
                    bb:4e:1e:ed:ac:78:41:6b:01:62:84:f9:a7:de:ee:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:74:86:84:71:58:43:F3:FE:12:B0:C4:60:79:57:84:D2:23:2B
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:89:94:49:b5:54:cc:65:b7:79:05:70:6d:25:10:d1:b2:58:
         2c:7b:8d:77:fc:d8:fb:c5:f8:81:26:77:d4:b6:76:ba:da:25:
         0f:c6:f9:1f:67:d5:64:54:3e:3d:24:13:a2:bb:4b:e6:cb:e6:
         b6:66:cc:6b:3d:8c:c9:7f:8e:4b:50:1b:c6:98:22:2f:9b:f7:
         b1:8f:76:e3:f5:27:b3:52:56:86:db:d4:df:a5:06:a4:d3:a5:
         f2:c8:0a:7f:54:d8:42:2f:0e:49:15:a3:85:c8:95:b6:31:da:
         b6:c8:ff:2c:cb:bc:1c:08:52:4a:9a:60:ab:83:01:e4:0b:42:
         58:db:52:d9:2d:09:7f:ba:dd:89:ab:14:2f:37:1c:b9:ac:2b:
         0b:b1:91:5e:99:ef:12:e5:56:9c:70:60:0a:ec:93:f6:83:3f:
         36:e0:76:f1:11:23:47:b6:24:eb:a7:15:f3:dd:28:f7:36:0f:
         9e:67:f6:e9:f2:e2:f4:16:f3:99:6a:29:ea:d3:ae:19:a4:64:
         b4:3d:61:ae:b5:85:d7:31:f3:6c:ed:8d:7a:a7:63:9e:8c:98:
         5a:38:41:03:12:a6:5e:fd:58:85:32:46:76:f9:b3:3d:f5:5b:
         ae:d3:49:b6:0b:91:17:0d:cb:a5:44:b2:46:31:65:c2:1b:c8:
         2a:41:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:31:49 2026 by rpki-client