Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          qbQ2Xae7qTgHG/suGn3aExvF9zZyY0jg4A3k7Bq+2+8=
Subject key identifier:   F3:29:0C:20:05:98:05:68:6B:74:FB:BE:97:D8:63:4F:CD:2D:25:6A
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0C96
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0C94
Signing time:             Mon 02 Mar 2026 01:01:21 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:21 +0000
Manifest next update:     Wed 04 Mar 2026 01:01:21 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: /HOGXyI+WxxqiHZlk7KGoZNzPr4VNnFxkTMNgl5Sels=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3222 (0xc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Mar  2 01:01:21 2026 GMT
            Not After : Mar  4 01:01:21 2026 GMT
        Subject: CN=69a4e161-9f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:8a:50:4e:9f:8e:85:27:5d:e8:2b:4c:7d:
                    1d:b6:33:99:a8:d4:ee:64:6c:d1:48:96:27:f0:73:
                    f2:ac:43:c1:9e:5a:c7:9e:c7:35:86:2b:60:5e:ef:
                    ad:96:92:85:a0:93:a0:4d:53:cf:38:63:75:d1:50:
                    b5:71:c1:d9:5b:d0:e8:67:a5:a8:0e:99:b7:bb:91:
                    a2:67:3d:8e:b3:ac:6b:82:7c:66:1a:ee:5a:f7:8d:
                    54:69:d1:0b:b4:51:46:66:ba:38:76:8f:2b:9a:c0:
                    bc:b8:ba:8b:ac:24:7b:c5:9c:05:6a:12:e6:95:c3:
                    ac:20:f3:82:0b:82:2b:08:47:e6:90:dd:86:a8:fa:
                    90:24:50:d8:d5:6d:a9:ff:7f:88:31:75:d2:81:74:
                    52:b6:64:1d:20:f7:f0:76:27:e0:8e:ed:43:97:36:
                    ac:98:1e:22:64:90:4b:d4:b3:ef:d2:9c:a5:10:ba:
                    de:a8:a9:4b:18:3e:af:2e:09:59:e0:89:49:8c:f6:
                    3d:3a:95:05:34:2d:3b:92:80:66:f6:39:22:c8:a6:
                    5f:c8:92:26:ce:46:92:b2:94:f9:0f:7f:2a:bc:65:
                    9c:3a:3a:aa:9f:99:f7:f5:e1:05:bb:dd:03:b9:2b:
                    92:46:a2:ed:79:9c:a5:27:da:df:42:81:96:77:94:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:29:0C:20:05:98:05:68:6B:74:FB:BE:97:D8:63:4F:CD:2D:25:6A
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:dc:94:fd:db:3e:51:11:06:6e:ae:f3:fa:b2:81:40:15:e1:
         e0:49:50:8e:ae:c9:82:02:76:d2:60:19:70:1e:39:04:93:aa:
         18:b7:7e:e7:43:24:4d:73:ad:89:3c:aa:06:fa:95:bf:9c:0c:
         12:67:89:b6:da:34:61:59:15:49:8c:71:0e:50:95:a6:4a:b2:
         ea:42:60:97:06:87:c9:1a:50:6b:79:7a:1a:38:f6:66:7e:ed:
         4a:0d:61:0c:8a:bd:f1:90:22:b1:5c:e8:c5:3b:44:17:1b:ce:
         03:cd:33:f5:56:d4:6c:99:49:6c:87:5a:cf:fe:a7:80:0a:11:
         5b:e8:73:b8:5e:79:7a:ff:e4:b7:45:4f:03:4a:e4:6a:15:e5:
         45:30:72:13:25:ff:60:53:00:ff:19:0b:51:51:32:a7:bd:c2:
         e0:7c:23:33:11:3c:5e:5d:8a:42:a7:45:dc:db:f1:97:23:b8:
         b1:44:af:7a:92:70:e1:1a:1c:7b:b7:a7:75:90:3e:df:d6:9a:
         4c:98:71:48:e6:0c:e1:4b:79:b1:ff:af:ee:cb:ab:5d:1a:98:
         9a:5f:b7:94:b9:6f:fe:3b:87:cd:c5:ef:32:04:8c:ab:8b:df:
         33:a6:a0:d9:eb:0c:b9:cb:26:d8:45:71:35:46:ac:9a:65:0f:
         52:2c:55:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:18:58 2026 by rpki-client