Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
File:                     GkDw4AHOLpPoWMkIWPCvalgLyIY.mft (raw, json)
Hash identifier:          OTonpKjufWX1Nf5HxSqFbbxY8HLOw6cXwB4bIGCdT0E=
Subject key identifier:   F7:55:F4:BB:5B:51:07:2C:6E:30:9B:CF:48:27:DD:65:F7:EE:10:C0
Authority key identifier: 1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86
Certificate issuer:       /CN=F36A3C65AF/serialNumber=1A40F0E001CE2E93E858C90858F0AF6A580BC886
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
Manifest number:          23
Signing time:             Sun 15 Nov 2026 06:00:20 +0000
Manifest this update:     Sun 15 Nov 2026 06:00:19 +0000
Manifest next update:     Tue 17 Nov 2026 06:00:19 +0000
Files and hashes:         1: GkDw4AHOLpPoWMkIWPCvalgLyIY.crl (hash: No63MDpmbCtq2anDViQx14YLLZFXXd4I1CphjxjTl1A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3C65AF, serialNumber=1A40F0E001CE2E93E858C90858F0AF6A580BC886
        Validity
            Not Before: Nov 15 06:00:19 2026 GMT
            Not After : Nov 17 06:00:19 2026 GMT
        Subject: CN=6af94a74-786e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:23:13:de:04:22:04:dc:95:e0:c3:ab:86:
                    6b:01:51:0a:84:58:1e:51:c5:5c:85:3c:3c:aa:e4:
                    79:2c:e4:9d:3a:a4:f3:81:1c:e7:aa:d9:3f:ca:e6:
                    ea:bf:50:cc:5d:b5:bc:4a:7f:ce:eb:8b:e9:58:88:
                    3e:92:e3:ae:16:01:6b:e7:6c:a0:07:75:0e:a2:36:
                    a1:24:67:58:53:0c:a7:ed:05:24:fb:e2:df:05:65:
                    7b:89:b9:cb:50:30:49:7d:09:a5:29:9b:21:69:ad:
                    62:74:91:2b:f5:05:96:dc:17:b9:3f:a3:52:d7:14:
                    4d:37:24:c7:9f:e7:b6:75:09:02:f8:d4:6f:82:77:
                    31:19:34:fc:83:87:de:06:11:60:ac:2f:9c:b4:f5:
                    5e:ed:4d:ec:12:d6:48:ac:92:a9:0e:e2:00:65:f2:
                    d8:d7:94:8a:d7:8a:9d:82:43:a5:2d:a2:8c:5b:1c:
                    a2:82:90:5e:09:82:61:9c:0f:2e:b7:2e:49:c7:76:
                    25:bd:f1:c7:de:70:4c:b5:dc:6e:3f:48:9d:e8:02:
                    82:e9:5b:b3:49:2f:ba:a1:ed:93:45:73:b9:73:1c:
                    87:46:a2:d1:7b:96:da:1b:7b:f0:a3:0a:dd:33:16:
                    2d:50:6b:80:66:c1:09:e0:a3:c3:8a:5d:d4:c7:08:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:F4:BB:5B:51:07:2C:6E:30:9B:CF:48:27:DD:65:F7:EE:10:C0
            X509v3 Authority Key Identifier:
                keyid:1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:57:50:e0:fc:27:5b:5a:90:1f:83:56:a1:35:c5:80:8d:8e:
         ee:f8:3a:1a:61:d7:86:32:2e:31:8c:57:92:fc:eb:3b:db:24:
         29:6a:3e:5d:97:7b:fb:77:0d:72:0d:98:26:d3:50:64:76:46:
         6c:36:dd:7a:ff:62:0a:6c:a0:a4:e8:ee:ab:2d:c2:86:db:35:
         71:22:3e:38:54:c9:11:bb:7a:7a:1b:25:61:48:82:85:48:e4:
         f2:3f:7b:2f:35:2d:9a:4c:4e:02:1a:ba:e1:5a:45:4f:74:78:
         7e:7b:62:c5:25:f9:db:d6:b1:85:5b:2c:8c:27:14:1c:16:a9:
         09:c4:57:30:50:32:26:08:96:61:79:49:ea:4b:f2:ce:12:b8:
         e0:0f:2c:f3:4b:0c:f0:4c:9d:ab:3a:9e:8b:72:db:b0:b7:3f:
         09:15:48:f9:d0:67:7f:ee:af:3f:f3:dc:67:0c:bc:cf:6d:45:
         28:64:c4:04:5b:22:27:22:6c:37:99:8e:ec:b0:72:5c:a3:ad:
         55:ec:92:1a:13:2f:a0:eb:5c:7f:cf:08:2f:68:dd:fd:a3:79:
         32:c8:3c:8c:16:12:4e:de:49:c3:f8:4c:8d:f8:b3:38:61:fb:
         4f:3f:36:44:f5:c4:27:9f:89:af:1f:c4:08:96:27:58:fa:3e:
         a7:4a:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----