Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          0NACWhut/eARmE1lrdWwlcxlgXYONDPGBBplL1ESzz0=
Subject key identifier:   7E:5B:AA:A6:6E:B8:A5:A1:21:64:E2:36:E2:69:48:02:67:E4:E2:05
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       0995
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          0992
Signing time:             Sun 21 Jun 2026 01:40:57 +0000
Manifest this update:     Sun 21 Jun 2026 01:40:56 +0000
Manifest next update:     Tue 23 Jun 2026 01:40:56 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: /QxWrHYgKOWCPis2niX6RQOZvlSKHWOFAZAsi9CM0i8=)
                          2: F31E6B76755711ED9B93B29DF1222468.roa (hash: NAQ4ruRr3CeKBEbG5bbYSwTINb1GDpCxoruFb42Xz/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 01:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR, serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: Jun 21 01:40:56 2026 GMT
            Not After : Jun 23 01:40:56 2026 GMT
        Subject: CN=6a374128-0a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:5c:38:32:a1:06:77:b5:22:d4:85:7c:16:
                    d3:39:6c:8a:82:5c:8d:02:46:7d:e5:05:d3:30:f6:
                    db:4d:15:9c:12:23:5e:5e:f7:f9:cc:e3:f9:f9:0f:
                    c4:ea:0e:db:dd:bd:86:f5:01:42:bf:ea:67:fa:fb:
                    af:57:c4:94:a5:40:f4:47:e1:d5:c2:5a:7b:0b:5d:
                    58:00:42:5c:aa:f2:1e:28:63:6f:40:52:1b:15:1a:
                    11:79:21:b0:97:d5:18:9e:67:a3:23:01:35:7c:6e:
                    27:1d:de:b3:d4:f7:1b:d6:c6:e0:16:37:8d:f3:99:
                    42:55:18:13:52:66:e3:4b:a3:89:e6:f5:5c:7c:68:
                    e0:a9:46:99:84:b3:6e:52:67:e1:32:42:89:49:77:
                    f0:48:aa:f8:63:e7:b6:99:31:d2:15:10:48:1f:2c:
                    79:1d:d4:6c:7e:c1:7f:f9:74:72:d8:e0:44:f5:66:
                    d6:da:56:ae:28:b3:51:9a:dc:3a:e8:c5:c1:14:da:
                    ac:a7:56:46:ed:af:30:32:9d:6b:55:e5:17:7f:e1:
                    be:bd:a0:37:2b:2d:b0:3c:27:eb:cd:21:eb:2b:8e:
                    ce:64:c4:e4:83:83:3f:02:82:e9:5e:33:70:f7:97:
                    98:f0:be:04:fc:1c:37:31:c6:53:13:28:14:b3:0f:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:AA:A6:6E:B8:A5:A1:21:64:E2:36:E2:69:48:02:67:E4:E2:05
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:14:70:f7:4c:98:23:2f:5f:c6:de:db:52:a0:0d:31:5e:
         ae:bd:a1:db:b4:2c:7d:bd:82:02:77:cc:34:f9:07:c1:e5:ec:
         70:ae:27:75:fd:68:e6:4a:90:ad:3a:4f:cf:f2:23:84:84:ae:
         54:23:ea:89:bd:69:62:2a:cc:96:a6:ba:44:66:47:12:e3:f4:
         f5:43:76:1f:8c:c1:6a:35:cb:2a:a7:37:05:ab:3c:bf:75:f2:
         1d:05:cc:71:85:3d:0b:3a:ce:cf:32:98:23:3c:31:17:e5:91:
         53:a0:49:a1:44:f1:59:93:f5:48:1b:c4:b6:36:a5:be:7b:3a:
         64:85:33:aa:20:ea:84:05:74:14:f7:07:17:41:1f:a0:af:87:
         87:c1:93:8b:fe:3b:cc:e7:05:31:a7:f8:15:8f:34:a2:da:3b:
         6b:d9:6a:30:18:67:0d:2e:47:06:c8:0e:6e:62:00:b7:7b:78:
         3a:4f:8d:80:5f:ed:f3:da:67:73:f6:64:73:1b:46:22:86:80:
         3c:6d:96:8d:80:09:2a:6a:16:79:fc:cc:e0:28:21:fb:5a:af:
         c8:1b:43:dc:73:f4:a6:86:b1:68:5b:56:e6:92:f7:2c:a6:7e:
         ab:98:78:60:b1:7a:73:30:21:99:20:30:0b:62:ca:a8:08:14:
         d9:4e:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 03:56:21 2026 by rpki-client