Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
File:                     GowOsmMfWAdEOXlYTg1NL6iFp2A.mft (raw, json)
Hash identifier:          9K3r3j+Hro1DvKZ7TlLzdeqe236evISRFRaGTHPgBHE=
Subject key identifier:   A5:19:D8:63:6B:2C:E7:78:A3:72:1F:5E:EA:06:EE:9F:EF:8B:3D:D0
Authority key identifier: 1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60
Certificate issuer:       /CN=F36D3DBFAF/serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
Certificate serial:       0124
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
Manifest number:          0123
Signing time:             Mon 02 Mar 2026 03:20:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:20:22 +0000
Manifest next update:     Wed 04 Mar 2026 03:20:22 +0000
Files and hashes:         1: GowOsmMfWAdEOXlYTg1NL6iFp2A.crl (hash: WcptSG5gcWusY1I80kr30Y3NtZQSoxFyFKzuWpQSuVQ=)
                          2: B9050D40361C11F093254187DAE4EC9C.roa (hash: ykB61aa7osAic1a6NuVWCNXOxA9WGDqvh0GJYCwmQc8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAF, serialNumber=1A8C0EB2631F5807443979584E0D4D2FA885A760
        Validity
            Not Before: Mar  2 03:20:22 2026 GMT
            Not After : Mar  4 03:20:22 2026 GMT
        Subject: CN=69a501f6-62f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cb:9a:d2:f1:d9:1e:8a:fa:a6:03:98:80:1c:
                    e9:04:f9:2d:85:d4:d8:19:b5:75:bf:57:99:07:d6:
                    f6:eb:bb:43:02:fa:f6:15:b4:a2:df:3b:4e:26:7e:
                    47:d6:aa:0b:ee:31:90:66:77:44:92:4c:2b:a4:59:
                    45:ee:b7:65:d9:d8:4a:aa:3c:36:8a:4e:97:6d:08:
                    78:e0:f6:c7:3a:23:a1:23:26:97:1c:b1:8f:5d:ee:
                    7c:9a:59:2b:a9:82:a5:fa:92:fd:8a:9c:70:ae:ff:
                    4f:db:d2:19:c4:d4:58:ce:0c:ec:40:62:db:73:9e:
                    26:24:5c:b8:98:9c:5a:ba:39:20:84:77:03:92:01:
                    03:2b:48:16:d1:3d:71:50:3c:e7:c9:d6:1c:5b:75:
                    37:10:54:46:bd:62:96:fa:60:ab:78:22:ae:e0:14:
                    3f:b7:d5:36:f3:d3:ce:c4:2b:31:df:a4:07:96:2e:
                    70:0a:94:87:55:f1:cc:08:44:48:1f:d8:c0:45:56:
                    a4:b3:97:ba:84:15:cf:9f:63:b0:58:63:e3:99:76:
                    9b:60:40:42:3b:c2:cd:0f:df:49:ab:da:ca:7a:61:
                    41:c9:c1:c6:84:b3:01:25:5d:82:d5:bd:78:d8:35:
                    5d:77:56:5a:bf:0a:19:33:38:22:8e:e0:8b:79:87:
                    52:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:19:D8:63:6B:2C:E7:78:A3:72:1F:5E:EA:06:EE:9F:EF:8B:3D:D0
            X509v3 Authority Key Identifier:
                keyid:1A:8C:0E:B2:63:1F:58:07:44:39:79:58:4E:0D:4D:2F:A8:85:A7:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GowOsmMfWAdEOXlYTg1NL6iFp2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/063FE546361B11F0A5A10E7CDAE4EC9C/GowOsmMfWAdEOXlYTg1NL6iFp2A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:3f:52:42:a8:c7:00:8c:38:37:b3:53:fa:a2:15:bf:db:
         73:6f:74:32:76:4d:24:0e:1b:45:72:f2:3b:c1:8c:66:48:d2:
         53:0a:e6:45:f1:20:37:d5:69:c5:13:46:27:7c:a6:53:15:25:
         d0:fc:3f:1a:cf:bf:d7:e5:36:bf:28:49:17:36:39:e4:eb:8c:
         95:e1:f1:c8:88:3e:de:68:3d:c8:e5:51:83:26:14:29:ad:1c:
         00:66:0e:fb:cd:cc:01:7a:a0:a2:61:ae:cb:47:a7:d0:2b:3a:
         da:b1:b5:81:9a:ea:69:d1:8e:c6:77:cb:73:26:28:08:76:4c:
         97:90:06:75:2e:60:13:c3:1c:e7:32:8d:94:d9:6d:4a:34:6f:
         5f:ea:90:17:14:b4:c3:8a:42:ba:e7:d7:dc:dd:4b:9c:83:aa:
         9b:86:47:32:4e:fa:dc:ce:28:77:02:9d:b8:17:b9:54:c5:c7:
         8d:06:77:7b:48:c4:dc:c2:ae:bd:48:87:d3:eb:87:fc:85:8a:
         9e:41:b5:d9:82:3b:40:8b:f1:6d:4f:29:7a:c5:91:2c:65:dc:
         3a:2f:48:45:a8:16:e4:9a:b3:9c:c8:5b:b5:e4:a7:c0:ba:db:
         37:3b:3c:37:e0:f9:67:04:40:8b:b0:35:5c:02:65:0b:a7:7f:
         c9:48:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:37 2026 by rpki-client