Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
File:                     GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft (raw, json)
Hash identifier:          DxVDjKr54jkgX1qqkru3hjB0adxoRNHYxTgQbfruj1k=
Subject key identifier:   75:24:83:07:A1:A1:70:D5:D4:67:CA:E0:68:2F:8B:21:B4:92:30:AE
Authority key identifier: 1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5
Certificate issuer:       /CN=F36750E0AF/serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
Certificate serial:       0461
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
Manifest number:          045C
Signing time:             Fri 17 Apr 2026 03:23:43 +0000
Manifest this update:     Fri 17 Apr 2026 03:23:42 +0000
Manifest next update:     Sun 19 Apr 2026 03:23:42 +0000
Files and hashes:         1: GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl (hash: PJI+eCRkPQN4rAQiJ0ctExUZBXXzDsdmIcIBrNYMbcE=)
                          2: 9F80812EDB0911EFB46D89BD762E951A.roa (hash: FoaOMoMM4KGYFeAi/UEScoLQ2zP+N4lDb6DDMV/MjGk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1121 (0x461)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36750E0AF, serialNumber=1AC2711DE56051E0CD6701041D1D8204710BDDF5
        Validity
            Not Before: Apr 17 03:23:42 2026 GMT
            Not After : Apr 19 03:23:42 2026 GMT
        Subject: CN=69e1a7bf-1b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:67:83:ac:89:63:dd:2f:4f:5d:2d:54:37:
                    f0:e4:79:4b:7e:ab:ca:95:db:6c:a8:4a:f0:3a:fd:
                    5c:d8:23:53:8f:f3:08:c4:51:5a:25:05:57:f5:3c:
                    73:91:72:e4:0c:eb:b0:d7:cd:44:c6:e4:63:ed:d1:
                    39:70:0d:e5:6d:0e:be:5a:a4:52:24:59:48:fa:1a:
                    1b:ba:73:8c:b5:91:f0:6f:e3:d5:d9:b9:c8:59:ec:
                    17:3c:fb:33:00:bf:67:6d:51:15:e7:a1:dd:4c:12:
                    4f:bc:e0:fd:53:60:71:0b:55:f3:f1:22:28:e5:14:
                    66:50:36:7e:03:21:b9:21:3b:28:0b:8b:0a:44:87:
                    09:13:6b:6f:92:1e:3d:e0:a1:70:d6:45:e0:04:4e:
                    d8:e4:d4:4c:1e:bd:54:15:c3:68:23:c1:f2:1f:f9:
                    09:7f:d7:c1:6c:ec:02:63:3b:8e:b8:06:32:88:0a:
                    9e:c8:a3:ed:8a:c5:96:d4:31:10:d3:3d:30:a1:a1:
                    70:23:4f:60:93:ac:2e:5a:86:5e:81:4f:4e:29:20:
                    d2:12:b2:fc:9f:7a:dd:a7:0d:c2:66:5a:ec:0a:ed:
                    da:d8:ae:c9:57:97:94:71:84:8c:f1:60:48:db:33:
                    f6:04:ee:42:e3:09:03:dd:e7:88:af:41:cf:4d:34:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:24:83:07:A1:A1:70:D5:D4:67:CA:E0:68:2F:8B:21:B4:92:30:AE
            X509v3 Authority Key Identifier:
                keyid:1A:C2:71:1D:E5:60:51:E0:CD:67:01:04:1D:1D:82:04:71:0B:DD:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsJxHeVgUeDNZwEEHR2CBHEL3fU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36750E0/F1A0BF34EBD511EDA4BAA72A4AD9E6FC/GsJxHeVgUeDNZwEEHR2CBHEL3fU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:25:cf:cc:c7:03:a9:c5:b7:80:fa:47:ac:d8:99:19:1d:
         31:c1:98:81:73:e8:12:77:03:60:68:52:14:da:98:0e:e9:55:
         aa:e4:d7:94:53:3f:bc:8a:0a:97:36:a4:38:4b:39:ab:2a:1f:
         a9:31:6c:db:3b:e0:3d:79:9a:f2:d3:e6:e5:57:94:03:84:dc:
         3f:0a:1d:1f:7b:4f:0a:21:ea:09:e5:0a:e4:2c:ad:84:41:d1:
         2b:15:a6:01:44:75:75:55:b8:9e:dc:87:e3:41:04:67:5a:51:
         10:f1:ff:8d:45:40:2a:2d:fd:8f:f9:3e:81:2b:cd:d7:f9:a0:
         3a:8e:56:a3:a2:6e:02:70:e7:49:0d:b4:c0:1f:01:72:cf:df:
         17:b7:67:66:1f:22:1a:9a:c7:42:84:49:e3:1c:4f:8e:86:98:
         5c:bf:24:34:4d:0c:b2:89:4a:c5:27:e9:ef:ed:21:a8:bd:e3:
         35:3c:e7:48:40:7c:64:24:64:38:28:11:9d:d3:f7:8e:b1:1f:
         df:4a:67:21:5f:84:d2:80:6c:f6:b4:9b:50:20:6b:bf:e1:95:
         bf:24:ae:b1:01:8c:0b:36:98:82:be:68:03:91:07:63:ba:41:
         10:da:87:f6:b3:e0:0e:5d:01:6f:a2:3a:10:f8:61:6b:b3:83:
         7a:19:a5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:46 2026 by rpki-client