Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
File:                     GkDw4AHOLpPoWMkIWPCvalgLyIY.mft (raw, json)
Hash identifier:          DMH3rjqlyOYfuFMm5gs2XXKC2uMuYDMx/xXbTj0nkgE=
Subject key identifier:   02:29:39:58:ED:51:07:87:42:2D:F8:9A:13:90:D9:83:79:6D:E6:47
Authority key identifier: 1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86
Certificate issuer:       /CN=F36A3C65AF/serialNumber=1A40F0E001CE2E93E858C90858F0AF6A580BC886
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
Manifest number:          18
Signing time:             Wed 04 Nov 2026 06:01:37 +0000
Manifest this update:     Wed 04 Nov 2026 06:01:36 +0000
Manifest next update:     Fri 06 Nov 2026 06:01:36 +0000
Files and hashes:         1: GkDw4AHOLpPoWMkIWPCvalgLyIY.crl (hash: ATOlPeBztUovlmfJ3IKAPMBc/Kal0ewMqdRJdea+SHQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3C65AF, serialNumber=1A40F0E001CE2E93E858C90858F0AF6A580BC886
        Validity
            Not Before: Nov  4 06:01:36 2026 GMT
            Not After : Nov  6 06:01:36 2026 GMT
        Subject: CN=6aeaca41-2167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b5:bc:5b:8b:13:14:c1:dc:4b:06:82:61:87:
                    4a:cd:6f:c4:ea:c1:b4:ae:f8:68:3b:90:45:53:3c:
                    c8:cb:1e:e0:f2:49:c1:21:27:54:fb:87:a8:dd:91:
                    9c:fb:7c:89:f4:c9:d6:7b:e3:cf:47:a2:74:37:40:
                    a4:3c:a8:f1:73:de:04:bd:cb:3d:45:31:3c:c4:1b:
                    b8:7c:4c:aa:6b:c6:67:54:b9:31:27:9a:25:b4:5b:
                    b6:84:23:4c:82:f2:db:b9:8b:30:87:3d:ee:32:a6:
                    15:d8:bd:49:23:af:ec:bc:8b:82:1d:be:17:d8:9e:
                    22:b7:ab:d0:3e:32:ee:68:2a:16:02:bc:e2:ed:d2:
                    46:2e:80:2c:87:62:80:29:f6:4c:bf:0b:87:72:c9:
                    d9:3b:53:b9:c7:cd:02:a6:a6:24:d4:2e:e2:1e:e8:
                    73:89:80:c1:22:00:50:f4:3b:bd:96:fd:c3:4f:3a:
                    66:a3:6b:c7:af:ab:bc:43:cc:18:6b:38:51:14:72:
                    32:98:e4:db:3a:ec:53:a3:f1:a7:72:98:3b:94:b0:
                    48:34:0d:b3:b1:bd:f3:9d:c2:83:88:1a:d6:0c:af:
                    c6:8d:e6:bc:08:34:f3:83:12:0b:ae:37:3c:77:c2:
                    e8:b8:46:45:e5:29:33:1a:33:ed:ba:7d:f8:f3:fc:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:29:39:58:ED:51:07:87:42:2D:F8:9A:13:90:D9:83:79:6D:E6:47
            X509v3 Authority Key Identifier:
                keyid:1A:40:F0:E0:01:CE:2E:93:E8:58:C9:08:58:F0:AF:6A:58:0B:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GkDw4AHOLpPoWMkIWPCvalgLyIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3C65/8B37F730C63811F1A0F7FBCCCE1D38B0/GkDw4AHOLpPoWMkIWPCvalgLyIY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:25:5f:30:ba:80:bd:d1:f1:7b:18:74:7c:2e:d0:ce:cf:d2:
         c4:3d:72:fd:e5:64:41:9d:4a:bb:2e:be:50:d7:16:25:35:f3:
         a9:8d:cf:f6:57:c0:a2:83:94:d6:e4:ee:1d:3b:49:5b:2c:54:
         38:27:af:33:99:01:19:20:fa:8e:83:9a:e3:e3:e6:3f:59:44:
         24:2b:82:9f:87:27:5a:09:fa:73:6b:52:4b:91:51:67:d9:c1:
         c6:0d:ea:63:bb:44:d8:86:7d:ab:00:c6:8c:f4:0e:b0:6f:d6:
         c1:e6:33:d3:94:96:60:61:ab:f7:b4:63:f8:9a:0b:0c:fc:ac:
         37:75:10:52:e1:73:e1:e6:15:7b:7a:82:ef:09:8b:e0:3c:36:
         83:f4:56:b3:3f:c9:cf:2f:0d:77:5c:51:b7:01:61:41:03:3e:
         a4:2b:0c:0d:74:b3:31:8c:a9:1a:fd:80:37:05:de:6d:12:53:
         4e:6b:1a:f7:a3:8f:a9:9b:18:66:52:73:cc:2c:1c:9d:52:a0:
         f9:7d:ab:49:a7:a2:5c:8a:ef:8e:0c:79:4e:1d:61:7f:43:1f:
         15:01:06:ea:92:8f:2a:d1:ac:58:1f:67:80:a1:76:f1:cd:b3:
         6a:12:fd:6c:65:2d:29:43:d4:ae:8c:36:fc:16:4a:5b:15:ca:
         e9:c3:52:6a
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
M0M2NUFGMTEwLwYDVQQFEygxQTQwRjBFMDAxQ0UyRTkzRTg1OEM5MDg1OEYwQUY2
QTU4MEJDODg2MB4XDTI2MTEwNDA2MDEzNloXDTI2MTEwNjA2MDEzNlowGDEWMBQG
A1UEAxMNNmFlYWNhNDEtMjE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANy1vFuLExTB3EsGgmGHSs1vxOrBtK74aDuQRVM8yMse4PJJwSEnVPuHqN2R
nPt8ifTJ1nvjz0eidDdApDyo8XPeBL3LPUUxPMQbuHxMqmvGZ1S5MSeaJbRbtoQj
TILy27mLMIc97jKmFdi9SSOv7LyLgh2+F9ieIrer0D4y7mgqFgK84u3SRi6ALIdi
gCn2TL8Lh3LJ2TtTucfNAqamJNQu4h7oc4mAwSIAUPQ7vZb9w086ZqNrx6+rvEPM
GGs4URRyMpjk2zrsU6Pxp3KYO5SwSDQNs7G9853Cg4ga1gyvxo3mvAg084MSC643
PHfC6LhGReUpMxoz7bp9+PP8wu0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQCKTlY
7VEHh0It+JoTkNmDeW3mRzAfBgNVHSMEGDAWgBQaQPDgAc4uk+hYyQhY8K9qWAvI
hjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTNDNjUvOEIzN0Y3MzBDNjM4MTFGMUEwRjdGQkNDQ0UxRDM4QjAvR2tEdzRB
SE9McFBvV01rSVdQQ3ZhbGdMeUlZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvR2tEdzRBSE9McFBvV01rSVdQQ3ZhbGdMeUlZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBM0M2NS84QjM3RjczMEM2MzgxMUYxQTBGN0ZCQ0NDRTFE
MzhCMC9Ha0R3NEFIT0xwUG9XTWtJV1BDdmFsZ0x5SVkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGklXzC6gL3R8XsYdHwu0M7P0sQ9cv3l
ZEGdSrsuvlDXFiU186mNz/ZXwKKDlNbk7h07SVssVDgnrzOZARkg+o6DmuPj5j9Z
RCQrgp+HJ1oJ+nNrUkuRUWfZwcYN6mO7RNiGfasAxoz0DrBv1sHmM9OUlmBhq/e0
Y/iaCwz8rDd1EFLhc+HmFXt6gu8Ji+A8NoP0VrM/yc8vDXdcUbcBYUEDPqQrDA10
szGMqRr9gDcF3m0SU05rGvejj6mbGGZSc8wsHJ1SoPl9q0mnolyK744MeU4dYX9D
HxUBBuqSjyrRrFgfZ4ChdvHNs2oS/WxlLSlD1K6MNvwWSlsVyunDUmo=
-----END CERTIFICATE-----