Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          z1u2SOAae/QkS4fnMeI8HIaRDVYxwIlgYPD26MX0hLg=
Subject key identifier:   52:44:48:ED:0A:E7:A6:AD:52:05:D2:77:AE:B4:75:98:40:3C:A1:C3
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       085A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          0858
Signing time:             Tue 27 Oct 2026 01:59:04 +0000
Manifest this update:     Tue 27 Oct 2026 01:59:03 +0000
Manifest next update:     Thu 29 Oct 2026 01:59:03 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: YHizLZfSw0G6SBBqOg4mxZjxqjS2uEZ1jMM+O0lLmb0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2138 (0x85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
        Validity
            Not Before: Oct 27 01:59:03 2026 GMT
            Not After : Oct 29 01:59:03 2026 GMT
        Subject: CN=6ae00568-b634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:9b:59:7a:08:dd:40:e7:31:64:1f:50:d2:
                    36:e6:25:17:32:3c:be:a9:01:35:4d:41:2d:34:1d:
                    3e:b0:b6:f6:fc:cf:df:ff:4c:b5:d4:86:29:4e:fe:
                    42:a8:11:39:5c:4c:6e:02:3e:ff:9a:7a:d0:0b:8c:
                    6c:91:ef:9a:d8:35:55:df:56:ad:b1:a2:0d:4d:6a:
                    fd:20:83:bb:ab:96:ce:39:54:77:a4:2f:9f:48:5c:
                    53:43:c3:7c:23:b3:63:0d:04:fe:aa:e7:33:ed:ea:
                    9a:7a:ea:a2:64:4a:fa:48:9e:2b:a7:f3:79:b2:ba:
                    f7:dd:fe:be:58:08:f0:1e:25:a3:9e:7b:45:18:35:
                    58:e2:84:6a:4b:a5:23:70:d9:2a:ff:84:93:0d:9d:
                    32:c1:c0:fc:96:56:de:14:9b:61:80:90:77:2b:30:
                    50:bf:18:2e:2f:23:e3:ce:60:27:b1:59:2e:cb:1c:
                    67:11:04:87:d9:51:f2:63:98:5a:8a:02:10:74:d6:
                    6e:f5:8c:63:20:61:2f:af:24:2e:0b:5b:68:ac:52:
                    a9:fb:d5:74:98:f9:67:d8:05:cb:a8:0c:b2:d9:51:
                    6b:03:c6:da:ef:3b:8f:a3:b0:e2:04:d7:38:2e:3f:
                    bf:ee:2c:51:3d:50:08:3f:f6:aa:0b:d3:ca:a4:52:
                    9c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:44:48:ED:0A:E7:A6:AD:52:05:D2:77:AE:B4:75:98:40:3C:A1:C3
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5e:e2:ed:a4:60:c4:6b:a0:a8:75:65:78:97:f7:df:dd:52:
         04:c7:e1:aa:26:bb:5a:75:93:2c:58:69:c9:58:82:9e:1c:01:
         91:5e:79:e7:3b:bb:10:32:2c:de:cb:f5:58:7f:01:4e:fb:d8:
         ff:b5:1c:23:30:5e:5f:6d:78:c2:5a:53:b6:70:b0:43:0a:3b:
         d1:e4:eb:dc:b1:d4:1b:57:36:5a:ac:a3:47:d5:92:bc:0b:86:
         51:ec:28:52:57:08:10:4c:3f:52:fb:a2:aa:ab:e7:7d:e7:93:
         a3:61:57:af:58:ba:17:1d:4c:85:30:c0:b8:4b:da:e7:9b:87:
         a5:5f:16:15:c0:19:63:59:a6:26:af:ea:da:a8:aa:f8:9b:72:
         a8:59:93:57:3d:12:70:7a:66:5e:be:07:2a:28:be:c8:88:81:
         30:10:0c:2d:60:fb:0a:02:a4:12:9c:78:8d:b3:b0:50:07:be:
         d4:36:fb:fe:80:98:f4:f6:ae:9d:f5:61:c6:01:d8:24:7b:a9:
         b4:3b:f0:3a:5c:b8:46:c6:92:e9:57:0c:eb:85:de:29:d5:18:
         5e:9b:65:e3:a4:b1:34:44:b7:79:08:0f:6d:2d:76:da:c9:3d:
         3c:d5:90:10:4d:83:8d:80:d2:4c:83:07:63:91:20:68:0e:81:
         8b:05:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----