Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
File:                     gyq31tewX3AP-RtzAzXuEJ-gLX8.mft (raw, json)
Hash identifier:          uOWOUVRVilFaGgUd5xaZr7B/gSxFLyyAb4qA1Hj7XSg=
Subject key identifier:   64:8A:9A:8C:DD:B0:36:DC:70:38:C8:47:6D:10:13:AB:F9:CC:F3:8E
Authority key identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F
Certificate issuer:       /CN=F36DBD5BAF/serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
Certificate serial:       74
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
Manifest number:          73
Signing time:             Mon 02 Mar 2026 03:32:31 +0000
Manifest this update:     Mon 02 Mar 2026 03:32:30 +0000
Manifest next update:     Wed 04 Mar 2026 03:32:30 +0000
Files and hashes:         1: gyq31tewX3AP-RtzAzXuEJ-gLX8.crl (hash: v5dXauxOKSABYn/3hmRNg6p8dPBj6pMmPwkAoRqlSz4=)
                          2: 4B9CA364BED211F09A698DD6DAE4EC9C.roa (hash: wpjf9P8gQce8p8xSJXmo+d96rtH8YAlQBHy9oW1+SUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBD5BAF, serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
        Validity
            Not Before: Mar  2 03:32:30 2026 GMT
            Not After : Mar  4 03:32:30 2026 GMT
        Subject: CN=69a504ce-babb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ed:56:96:74:55:77:76:c2:c2:4f:fe:bd:f1:
                    35:ab:32:cc:2d:54:82:25:0a:86:62:4a:7d:cd:84:
                    c3:13:2c:da:af:25:d7:2d:7d:6f:c9:93:8a:cc:5c:
                    15:2b:fa:e1:14:63:39:0b:80:b1:e1:28:4e:98:12:
                    5a:14:66:78:1a:79:80:2b:74:1c:e5:b9:8a:47:90:
                    dc:09:79:6f:02:be:23:0c:fc:7b:be:c0:b6:88:a3:
                    e7:bb:ec:78:ba:3d:61:71:63:49:05:51:1b:d2:a2:
                    c6:f5:5b:24:26:ca:18:5d:f0:aa:2d:db:4d:e7:42:
                    14:cb:66:90:a8:7e:b1:d6:4e:8d:6f:b0:9f:76:5b:
                    5c:51:ab:e0:cf:24:e2:d3:20:e3:fe:60:c6:69:13:
                    5e:35:f8:5d:9a:4b:20:f9:22:f2:fc:29:b4:30:16:
                    79:f1:17:d4:da:2d:57:5b:58:de:1b:f5:56:34:76:
                    92:1c:e2:ec:87:ee:80:59:53:78:7c:8d:e5:0b:00:
                    0b:35:a8:e8:08:e9:4e:31:68:79:f9:1f:a7:4d:fd:
                    df:37:e0:83:6e:1a:d9:3b:bd:cf:34:3d:82:e7:ed:
                    81:93:02:11:28:3c:aa:fa:c6:86:f1:a9:f1:3f:2b:
                    d2:a9:86:d4:d3:12:73:d4:8f:3f:94:bc:96:41:b1:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8A:9A:8C:DD:B0:36:DC:70:38:C8:47:6D:10:13:AB:F9:CC:F3:8E
            X509v3 Authority Key Identifier:
                keyid:83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:62:70:25:5a:53:92:61:b4:92:69:76:95:56:8c:e0:c3:50:
         44:e8:c6:a3:71:a8:cc:73:7f:38:f5:a1:77:6c:e6:58:83:20:
         67:aa:7b:43:27:dd:dd:27:46:8e:10:08:70:54:98:93:69:91:
         46:23:71:f8:a5:10:34:df:b0:f9:9d:81:5e:93:1f:09:61:a2:
         6e:71:17:e7:d6:7e:a4:f8:70:54:ff:41:a7:ae:4a:3d:57:b2:
         89:db:95:f8:f8:33:44:4e:f1:03:26:69:36:77:16:0d:2f:de:
         23:89:81:9c:cb:89:d9:23:9b:41:fc:e5:0f:dd:54:93:e3:a2:
         e0:4a:ef:96:68:5a:37:ac:84:16:45:f4:d5:8a:30:56:b1:7f:
         7c:94:5a:12:4e:85:1a:ff:a8:50:ff:f7:c0:16:8d:5c:ed:34:
         c7:98:9b:1a:1b:91:ae:4c:c7:5d:c3:22:25:50:88:9b:32:bd:
         21:35:9f:71:99:ab:c7:b0:9c:d4:c3:5f:75:4a:b9:6e:c4:71:
         74:f7:6c:ba:7a:65:42:8f:64:ba:59:c8:eb:f5:92:5b:8f:18:
         73:9c:f0:61:79:c7:51:bb:46:e5:f6:0d:0e:10:d4:47:d0:bc:
         a5:fe:dc:31:1c:94:b5:24:b0:5e:1d:d3:fa:87:30:bd:b1:c4:
         0d:f7:71:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:02 2026 by rpki-client