Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File:                     GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier:          tnkcR8+jItIqpOhMjLhB+IHtwGF2Gfn+XNw6c7Dftd8=
Subject key identifier:   39:02:C3:2E:22:2D:3F:DF:0A:85:2A:3C:E2:8E:7F:8F:83:70:12:CA
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer:       /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial:       03F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number:          03F3
Signing time:             Fri 17 Apr 2026 03:36:43 +0000
Manifest this update:     Fri 17 Apr 2026 03:36:42 +0000
Manifest next update:     Sun 19 Apr 2026 03:36:42 +0000
Files and hashes:         1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: oMj2+0Hu5ipeNnct1xIemr/I8evsWx1X9UTi7lkunoE=)
                          2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
        Validity
            Not Before: Apr 17 03:36:42 2026 GMT
            Not After : Apr 19 03:36:42 2026 GMT
        Subject: CN=69e1aaca-cc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:4a:25:41:98:dc:e1:a8:8d:42:ba:c1:bc:
                    a0:cc:48:a2:bb:d7:9c:27:68:81:f9:01:ec:aa:bf:
                    b5:99:a5:c0:a7:88:61:cd:1f:2a:4e:ee:36:fc:e9:
                    b7:d5:ad:6a:bf:ea:90:40:88:66:4a:41:c2:12:85:
                    a5:cd:cd:0b:a5:0b:fb:b2:b9:33:1f:1d:ce:79:11:
                    a5:27:c7:11:a7:02:f6:d2:4b:ab:62:b2:3d:13:d4:
                    b9:c5:af:92:8e:37:26:56:27:f0:9d:04:4f:25:30:
                    5b:1f:73:d6:2e:e7:0e:99:30:2f:ab:59:6d:ef:d2:
                    0b:f1:47:b8:a7:71:50:65:d0:b3:da:52:0c:8d:f9:
                    8e:29:80:1c:6c:07:f7:87:4e:e6:3f:2a:5b:ee:a3:
                    ef:09:40:51:a8:0b:04:d6:74:c1:1d:1f:e3:8f:f8:
                    74:79:3f:76:99:38:11:21:24:17:b9:0b:d2:48:4e:
                    6a:b4:05:70:5b:32:c4:b1:3c:20:b4:eb:5f:b7:30:
                    ea:35:0d:25:a8:19:83:9f:cf:9d:16:a6:a4:70:f9:
                    38:43:91:b6:39:dc:c4:f0:07:b5:96:fd:ab:bf:21:
                    a6:47:b7:30:1c:c6:b4:c5:06:23:21:90:f2:6e:92:
                    04:b6:78:10:02:16:fb:00:c9:a6:02:cf:4e:79:da:
                    4b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:02:C3:2E:22:2D:3F:DF:0A:85:2A:3C:E2:8E:7F:8F:83:70:12:CA
            X509v3 Authority Key Identifier:
                keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:7e:20:37:18:35:f6:43:75:c1:2f:b3:6e:d6:2f:00:8e:
         63:3a:09:ba:b6:38:50:cd:31:c9:21:64:2c:0f:df:ee:16:ea:
         31:bd:3e:b0:77:dd:4f:cd:7e:08:aa:52:f6:2f:1c:8e:ee:6b:
         8e:8b:50:07:68:df:c2:99:20:bc:2e:b2:4a:c7:f3:67:30:51:
         ea:f2:b6:a9:36:18:42:91:1f:99:0c:ee:e1:45:eb:86:ad:ca:
         2c:1b:06:33:8a:8d:91:a4:9b:c2:95:52:48:11:48:2e:7b:0f:
         c0:16:84:6e:1f:9a:02:ed:eb:2b:bd:63:4f:21:05:50:ad:f2:
         94:26:0d:b6:58:01:f8:84:e7:52:86:db:08:48:ea:8f:ae:78:
         a8:43:73:14:77:80:15:48:5d:7a:a2:99:12:83:4b:b4:48:8b:
         ca:61:53:9d:bc:20:08:db:40:1b:bb:ee:e8:66:4a:ef:b6:d2:
         86:43:1c:a3:6c:f1:fa:23:15:ad:61:5b:6a:3d:7b:6a:72:65:
         a3:11:18:a2:8d:8a:7b:0d:13:2f:61:32:f4:e9:dc:72:d7:56:
         70:94:cb:81:d5:b4:1d:51:0d:ac:d7:6d:d2:bb:2d:21:5d:c1:
         fd:a7:78:82:9b:53:1b:7c:41:36:3f:78:0d:64:e9:06:20:81:
         a6:17:c4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:55 2026 by rpki-client