Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          tmPlrTFhD7QiU5hTuX4GaoQy8mgNvuPIkbQvwsQqIEs=
Subject key identifier:   3E:3E:58:6D:13:51:49:FB:99:D7:25:57:AE:81:67:E5:2A:C5:EB:46
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       0208
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          0207
Signing time:             Sun 19 Apr 2026 04:39:03 +0000
Manifest this update:     Sun 19 Apr 2026 04:39:02 +0000
Manifest next update:     Tue 21 Apr 2026 04:39:02 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: Aw8/DGAVI5Gy7Gwrggx0TxxmCNJECCj4DbFJkWN3XVE=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Apr 2026 00:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Validity
            Not Before: Apr 19 04:39:02 2026 GMT
            Not After : Apr 21 04:39:02 2026 GMT
        Subject: CN=69e45c67-90d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:74:f2:82:d5:43:10:41:27:1c:bc:0d:b7:
                    ae:d7:0a:de:f6:e0:f0:ff:26:97:4a:10:09:d9:4a:
                    ef:0a:da:a1:d4:b9:d6:7e:21:5e:33:0b:8a:23:38:
                    bc:dc:60:02:4e:e8:40:1b:7f:5a:05:47:50:b1:14:
                    04:97:d4:df:65:e0:e8:a4:9d:68:cc:8b:40:eb:01:
                    44:a9:e5:08:10:94:58:67:0c:48:95:62:e7:fb:56:
                    91:2c:17:e5:aa:83:b4:86:8e:a8:8b:91:28:be:51:
                    46:e8:a3:e9:16:e4:82:40:e1:ee:1d:a5:49:f4:4a:
                    e1:08:d3:97:b4:bd:42:aa:cd:34:d6:2a:17:27:71:
                    7c:5a:c7:62:61:25:35:0c:1e:35:94:3f:c2:5e:84:
                    44:2c:c3:6d:c9:4b:ab:d0:2b:62:8e:98:7d:ef:46:
                    45:b7:b1:b7:63:e1:c2:f8:08:76:80:b7:97:87:e2:
                    9c:56:b8:2f:73:80:ef:22:c4:62:bb:1a:af:5a:88:
                    f5:4c:e0:f8:e5:21:e7:4f:7a:01:4e:64:d6:ff:4a:
                    5a:13:bc:fc:da:dc:87:81:34:b5:ff:8b:4a:29:cc:
                    1f:5f:1e:4b:60:a2:3b:53:df:a9:50:20:1e:60:d8:
                    4a:84:18:1d:ff:81:5b:0a:0b:aa:37:6e:b9:c7:ec:
                    fe:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3E:58:6D:13:51:49:FB:99:D7:25:57:AE:81:67:E5:2A:C5:EB:46
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c4:6c:92:b0:76:f2:45:15:a3:b9:e0:2b:3b:ec:2c:3b:88:
         93:af:d9:32:97:2c:61:eb:25:ba:d5:39:5d:ba:4c:96:4d:1d:
         e1:15:6b:e8:6c:33:7f:a0:74:20:f0:d1:96:eb:4b:11:56:2c:
         0f:bd:37:8b:5e:1a:ab:26:5f:91:b0:33:a6:1f:bf:f8:8e:77:
         82:7f:8c:f6:05:40:04:30:e9:ff:ad:94:33:3b:b9:8a:84:bc:
         07:64:6f:02:a6:3e:78:49:e1:c5:c5:7d:08:64:47:63:d0:db:
         11:ac:19:0a:9f:e8:37:72:ef:72:e7:22:53:cc:e9:d6:a3:cf:
         e4:df:65:b9:d2:6e:2a:d2:94:ca:28:c6:6b:98:f1:a7:61:14:
         ee:6e:8a:5a:cd:01:16:73:8c:c0:58:da:03:e4:18:23:c2:cf:
         e4:27:e0:21:38:34:09:b8:e9:46:aa:18:21:93:2e:a0:68:99:
         a9:46:62:29:49:86:eb:ff:58:a5:66:27:8c:01:b4:31:bd:66:
         af:4e:43:85:56:0d:4b:13:cb:ee:4f:56:c0:3e:bd:7a:61:f3:
         82:81:9e:55:c7:27:53:bb:06:2e:40:09:b2:70:a6:23:97:ec:
         27:1d:e0:c6:f9:f6:71:eb:b8:01:f8:fe:07:10:2c:b3:ab:ad:
         2d:07:57:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAggwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMxQzVBRjExMC8GA1UEBRMoODEyNzc0NERBNEVFMDAzQjI5REUxMTAzNEY3MkRF
QjhERkVDMjhGRDAeFw0yNjA0MTkwNDM5MDJaFw0yNjA0MjEwNDM5MDJaMBgxFjAU
BgNVBAMTDTY5ZTQ1YzY3LTkwZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9e3TygtVDEEEnHLwNt67XCt724PD/JpdKEAnZSu8K2qHUudZ+IV4zC4oj
OLzcYAJO6EAbf1oFR1CxFASX1N9l4OiknWjMi0DrAUSp5QgQlFhnDEiVYuf7VpEs
F+Wqg7SGjqiLkSi+UUboo+kW5IJA4e4dpUn0SuEI05e0vUKqzTTWKhcncXxax2Jh
JTUMHjWUP8JehEQsw23JS6vQK2KOmH3vRkW3sbdj4cL4CHaAt5eH4pxWuC9zgO8i
xGK7Gq9aiPVM4PjlIedPegFOZNb/SloTvPza3IeBNLX/i0opzB9fHktgojtT36lQ
IB5g2EqEGB3/gVsKC6o3brnH7P7lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPj5Y
bRNRSfuZ1yVXroFn5SrF60YwHwYDVR0jBBgwFoAUgSd0TaTuADsp3hEDT3LeuN/s
KP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMUM1LzZGOTA2MThBQUQ3RjExRUZBNTQ5ODY5Nzc2MkU5NTFBL2dTZDBU
YVR1QURzcDNoRURUM0xldU5fc0tQMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dTZDBUYVR1QURzcDNoRURUM0xldU5fc0tQMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMxQzUvNkY5MDYxOEFBRDdGMTFFRkE1NDk4Njk3NzYy
RTk1MUEvZ1NkMFRhVHVBRHNwM2hFRFQzTGV1Tl9zS1AwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBxGySsHbyRRWjueArO+wsO4iTr9ky
lyxh6yW61TldukyWTR3hFWvobDN/oHQg8NGW60sRViwPvTeLXhqrJl+RsDOmH7/4
jneCf4z2BUAEMOn/rZQzO7mKhLwHZG8Cpj54SeHFxX0IZEdj0NsRrBkKn+g3cu9y
5yJTzOnWo8/k32W50m4q0pTKKMZrmPGnYRTubopazQEWc4zAWNoD5Bgjws/kJ+Ah
ODQJuOlGqhghky6gaJmpRmIpSYbr/1ilZieMAbQxvWavTkOFVg1LE8vuT1bAPr16
YfOCgZ5VxydTuwYuQAmycKYjl+wnHeDG+fZx67gB+P4HECyzq60tB1ek
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:50 2026 by rpki-client