Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File:                     Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier:          ugbadpiP16ML1Glx78ah/b741fQweM7Vn7szyJ1hcaE=
Subject key identifier:   BE:02:F1:1E:52:B8:EE:96:35:62:DB:36:6B:92:1A:0F:67:61:8E:38
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer:       /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial:       028D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number:          028D
Signing time:             Sun 21 Jun 2026 04:32:12 +0000
Manifest this update:     Sun 21 Jun 2026 04:32:11 +0000
Manifest next update:     Tue 23 Jun 2026 04:32:11 +0000
Files and hashes:         1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: EszzVwU7900MYtxzquJuJK7y0oG0elWOllxLmCgBFQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AF, serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
        Validity
            Not Before: Jun 21 04:32:11 2026 GMT
            Not After : Jun 23 04:32:11 2026 GMT
        Subject: CN=6a37694c-d013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9c:4d:5f:0b:10:55:0f:4f:c2:50:de:8a:4b:
                    9e:13:2f:50:50:88:c5:99:57:a6:36:fd:c1:d6:e4:
                    36:74:9b:ba:85:2b:73:36:77:24:8d:8a:7b:ef:53:
                    2b:28:05:07:3a:c8:34:b0:bb:84:38:80:b6:cf:10:
                    b0:9d:6c:94:25:0d:8d:63:97:1a:5e:8c:a7:b2:2f:
                    09:f4:3f:3d:3f:81:1a:37:7c:99:d0:33:9c:0a:36:
                    87:b2:22:46:d8:78:33:58:65:7f:ab:81:4e:e2:1d:
                    6d:04:4c:b6:ab:54:82:a0:7c:11:81:c7:3e:dc:64:
                    fc:01:fb:54:33:3b:27:6a:25:ce:86:c7:17:a6:32:
                    2b:88:08:6f:2d:dc:d4:1c:78:70:fb:15:ea:b5:01:
                    ba:94:64:77:f0:2d:8d:a9:87:6c:0e:5e:31:7f:40:
                    40:fc:98:f0:ed:ef:7e:1e:1a:0f:15:43:7d:3c:e7:
                    4d:73:77:e9:04:bd:0a:6f:23:e5:4e:43:4e:c4:02:
                    bf:f4:57:af:92:68:6c:71:43:d3:ab:cb:19:5d:13:
                    1f:ab:35:c0:dc:e5:a7:70:da:07:e5:3e:2b:65:b4:
                    6b:4e:1f:70:ce:28:6d:1b:6f:40:62:2a:dd:ef:75:
                    15:33:be:e2:79:4d:de:00:15:5b:3c:a4:13:2d:e6:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:02:F1:1E:52:B8:EE:96:35:62:DB:36:6B:92:1A:0F:67:61:8E:38
            X509v3 Authority Key Identifier:
                keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:60:ea:e6:9a:40:d5:3a:2a:fb:66:35:2c:db:54:09:27:da:
         0d:c9:74:0f:67:3f:54:c6:e4:99:6a:f5:1c:a4:20:fe:f4:d8:
         1c:56:a8:0e:88:5a:d7:d3:2e:c5:62:36:7a:2d:b1:7f:8e:dd:
         d5:78:91:a2:9f:4d:4a:37:71:07:b8:e6:27:c6:c0:ad:74:28:
         e3:a2:80:61:d3:8b:cd:06:05:fc:81:a4:d6:c6:34:f5:a5:dd:
         10:6c:3a:1c:e2:f8:d3:34:1b:a8:24:61:3c:8b:fd:24:ec:96:
         49:41:1c:2c:b3:e8:18:e7:b8:24:5b:2e:ba:f8:b1:5c:00:fe:
         ab:a4:0e:be:35:94:4c:b8:69:fe:6d:d7:fa:12:a4:5e:39:f9:
         ee:f5:38:d2:1d:b4:fb:ee:9e:8f:9d:d6:bf:58:85:da:dd:27:
         11:7e:60:52:75:ad:aa:1c:f5:2e:de:ae:6e:37:46:14:92:c3:
         25:67:89:a1:ae:6f:e9:2c:85:4b:83:f5:dd:34:6d:cb:67:fc:
         e3:88:28:8c:77:eb:b9:48:69:89:5d:5d:10:a3:ba:ad:f5:ac:
         28:de:30:de:a3:93:92:21:b4:3c:e3:ad:87:a5:e9:07:60:d2:
         af:ab:f1:99:95:f2:24:bf:d8:9e:b0:f5:30:1c:0b:37:11:b2:
         d0:c1:04:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:40:43 2026 by rpki-client