Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
File:                     gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft (raw, json)
Hash identifier:          gZXi0gO+uWK4FdlpTXp9679/qKgg/cZN+6fmCn5aO/E=
Subject key identifier:   80:83:23:46:6A:0D:6A:09:14:8C:E9:FB:29:AC:61:CD:49:3F:E6:F1
Authority key identifier: 80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
Certificate issuer:       /CN=F36D46F6AF/serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Certificate serial:       019B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
Manifest number:          019A
Signing time:             Mon 28 Sep 2026 05:08:56 +0000
Manifest this update:     Mon 28 Sep 2026 05:08:56 +0000
Manifest next update:     Wed 30 Sep 2026 05:08:56 +0000
Files and hashes:         1: gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl (hash: 8R9JHg6X+oK7z16B9U30kJ8G/FaZy9Spe65CxoQSRFU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D46F6AF, serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
        Validity
            Not Before: Sep 28 05:08:56 2026 GMT
            Not After : Sep 30 05:08:56 2026 GMT
        Subject: CN=6ab9f668-e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:d3:a8:75:05:18:7c:b0:36:bf:33:d0:93:
                    e2:7f:3e:5a:e4:6e:50:02:2d:1f:38:1e:57:b5:95:
                    d5:54:a7:df:d4:fb:e4:94:ca:01:75:68:8f:d9:15:
                    c8:d1:8e:43:95:bc:99:da:fa:37:91:01:68:da:95:
                    41:bc:1d:f3:9f:72:94:0b:dd:07:fe:d8:4c:3d:16:
                    75:93:f5:c5:e9:49:66:ac:71:6d:45:ee:f8:5e:28:
                    b6:98:e5:a3:2a:00:87:9d:77:63:f9:06:89:08:56:
                    9a:d6:da:c8:3e:6b:22:e1:54:6d:6e:15:8b:4b:50:
                    d1:93:2b:a9:9d:7f:0d:3e:e7:75:00:ac:5a:20:55:
                    db:1f:da:c0:e3:15:a9:7a:e8:1c:39:7d:1d:ac:71:
                    16:6a:45:68:fd:19:cc:db:dd:a1:72:f9:d8:2f:b2:
                    f4:7b:dc:5c:c7:72:0c:d5:48:53:cd:81:f5:f9:51:
                    a1:1b:73:d6:ff:71:a6:48:91:ae:45:59:22:0f:af:
                    3a:63:50:dc:dc:7a:28:33:da:b0:47:c3:d5:ba:3e:
                    26:43:ff:fa:7a:88:94:a5:d4:c1:10:df:ad:54:00:
                    ba:e6:3b:b7:0d:1f:38:3d:53:14:36:b8:94:42:0c:
                    2b:65:0e:ef:ad:e2:6f:83:04:32:c2:21:90:bb:01:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:83:23:46:6A:0D:6A:09:14:8C:E9:FB:29:AC:61:CD:49:3F:E6:F1
            X509v3 Authority Key Identifier:
                keyid:80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:44:8d:5c:18:0c:b2:b4:e0:c3:69:38:90:23:05:ce:fc:26:
         24:f4:c2:ad:b7:14:72:4e:33:dc:4d:bb:8f:d9:46:0f:38:93:
         78:ea:95:5d:e6:79:b3:36:de:fb:0e:9f:24:fb:83:e8:9d:87:
         df:34:d9:58:95:ed:af:f5:5b:90:e7:03:17:73:51:ee:ee:86:
         77:24:29:66:de:78:f6:28:6b:6e:63:c1:00:6f:b1:08:1c:48:
         38:51:18:1b:70:5d:93:30:28:2e:fd:39:fc:81:01:ca:5e:78:
         d2:b8:85:5f:91:95:00:09:4f:e0:7c:5a:b4:16:4b:de:f0:09:
         ed:0d:97:35:57:58:09:8c:3e:d8:b7:7b:ab:43:ca:11:14:f8:
         6a:47:e3:a1:ef:a0:f0:4f:bc:3f:d3:8c:ad:d7:e6:7c:07:75:
         60:34:96:12:1d:c9:1c:b2:e9:5f:f6:b0:de:90:8f:17:00:ce:
         bf:54:14:db:ff:36:f7:9d:e5:1b:e5:79:28:3a:79:fb:33:de:
         03:0b:69:2f:23:71:3e:72:0a:c7:54:40:37:fa:07:d4:52:3d:
         18:d5:c7:12:ca:9e:c6:66:d3:eb:47:3f:07:6f:e7:21:78:2d:
         16:03:4b:0d:07:23:3a:a3:01:93:84:4d:5a:65:a6:c6:1c:12:
         d0:a8:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----