Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          pxY6LYVUyH/NchGxeo6W/4kuFTleElgNgOfz7FwxHyA=
Subject key identifier:   CF:F7:DB:E7:2D:CE:AB:93:62:2F:42:A1:AD:A9:58:13:55:54:BF:53
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          0453
Signing time:             Tue 22 Sep 2026 03:43:59 +0000
Manifest this update:     Tue 22 Sep 2026 03:43:58 +0000
Manifest next update:     Thu 24 Sep 2026 03:43:58 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: oDSw+EJNmnEycOL5ejiaqIfvdwlJyipGdHSklX1K4kw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Sep 22 03:43:58 2026 GMT
            Not After : Sep 24 03:43:58 2026 GMT
        Subject: CN=6ab1f97f-06f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:68:f2:89:d6:f3:1f:a0:6f:4e:31:9a:64:
                    e7:8b:b5:b6:a4:f7:ce:aa:21:7c:00:5f:f2:71:c7:
                    aa:3d:f7:33:79:8a:18:ee:3e:7d:ab:74:3f:c9:76:
                    ee:71:aa:91:5d:3c:8f:0e:c6:32:e4:b1:60:41:dd:
                    da:bb:db:f0:83:5f:a6:74:7e:1e:b0:81:93:7e:8c:
                    d5:03:e1:24:51:3a:89:c2:fb:67:74:2e:4f:27:5b:
                    6e:5f:3e:59:ca:d8:20:49:69:1f:ed:5a:f0:78:e1:
                    18:60:f3:44:8e:09:3b:a6:56:8a:3f:9d:45:b9:ab:
                    71:74:20:10:95:18:9f:10:6d:82:66:b9:6c:35:5e:
                    08:99:10:62:20:67:76:2b:17:aa:68:94:30:1b:e4:
                    e8:da:61:c3:e7:8a:60:5f:bf:2b:7a:5b:b4:c7:85:
                    98:85:d8:6c:8f:c8:95:1c:b8:fd:a3:fa:f2:48:29:
                    8e:89:e8:66:5b:d9:56:3e:7f:3f:77:c8:65:22:dc:
                    e7:b8:70:75:29:9b:c5:47:45:2e:d8:dc:67:21:a7:
                    ef:8d:bc:78:45:81:14:fd:92:a1:9d:4a:50:f4:21:
                    b7:a6:49:9f:3d:7a:99:26:dd:7b:f0:06:ab:79:d2:
                    19:6a:fd:2c:af:86:77:e6:8e:76:e9:6a:22:85:c9:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F7:DB:E7:2D:CE:AB:93:62:2F:42:A1:AD:A9:58:13:55:54:BF:53
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9c:c5:26:08:d4:9a:b5:a0:e6:4c:76:68:c7:8f:d6:b0:c4:
         8c:dd:e0:55:d2:d7:e2:c9:59:e7:79:2b:bc:48:ff:5e:a7:c6:
         28:8f:32:55:23:c3:a9:ac:27:fa:5e:39:96:13:44:3c:63:aa:
         9e:88:2a:00:2d:3a:d4:6e:2e:18:51:0d:b8:39:6d:47:c6:3d:
         36:8f:be:94:51:6b:03:e6:74:16:9a:b5:b4:92:49:61:73:d3:
         e2:a6:79:88:c9:38:0d:ee:24:50:a3:1e:30:50:13:81:18:0d:
         a4:64:e9:a9:66:65:48:10:11:f9:e1:13:c5:aa:bc:bc:c6:12:
         d4:5d:3c:27:e1:eb:5c:79:34:13:6d:4d:01:4a:fe:8d:41:d4:
         bf:f6:90:e0:d8:fd:c0:5a:39:7b:99:f1:ed:12:e9:42:0c:79:
         dd:15:ca:57:62:ce:9f:9c:14:68:06:cf:b6:2a:93:46:67:d5:
         31:ef:7e:15:c6:e9:c6:ef:ef:4e:47:55:d3:e7:56:5b:15:10:
         9a:f8:f0:c9:0b:88:3b:3e:2f:50:8e:2d:f8:ee:36:03:13:ba:
         2b:fc:5f:6c:1e:8b:ab:b3:d9:a6:36:8b:4a:3b:aa:f2:1b:79:
         52:4e:29:2b:23:b7:72:e5:a2:96:fd:f4:cd:cc:4b:16:6b:66:
         4b:54:8e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----