Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
File:                     GmsaK0nMdwGHzGghhibt3hBAg50.mft (raw, json)
Hash identifier:          QzOVPgGd1RMYzUUVSi2X6x8FT/Y2NVXSiOAgVyd8/dA=
Subject key identifier:   FD:3F:8D:B9:32:58:4D:6B:46:E1:34:09:7F:5E:D9:DE:F9:A7:29:2E
Authority key identifier: 1A:6B:1A:2B:49:CC:77:01:87:CC:68:21:86:26:ED:DE:10:40:83:9D
Certificate issuer:       /CN=F365915BAF/serialNumber=1A6B1A2B49CC770187CC68218626EDDE1040839D
Certificate serial:       06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
Manifest number:          06
Signing time:             Sat 19 Sep 2026 10:11:03 +0000
Manifest this update:     Sat 19 Sep 2026 10:11:03 +0000
Manifest next update:     Mon 21 Sep 2026 10:11:03 +0000
Files and hashes:         1: GmsaK0nMdwGHzGghhibt3hBAg50.crl (hash: PbNagVerhDpqcH5ASC9GuKMKEXXWDK9pdMOmAnUrynE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365915BAF, serialNumber=1A6B1A2B49CC770187CC68218626EDDE1040839D
        Validity
            Not Before: Sep 19 10:11:03 2026 GMT
            Not After : Sep 21 10:11:03 2026 GMT
        Subject: CN=6aae5fb7-6f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:4a:83:4b:77:5e:de:80:43:89:63:77:9a:
                    30:0d:2a:d4:2a:b0:18:a9:15:ee:df:eb:d3:cc:8a:
                    0e:1e:69:8a:01:48:e4:30:e2:39:cc:a8:01:e0:28:
                    53:ae:d4:db:95:e0:8c:be:d0:bc:df:f6:b8:19:f8:
                    de:d1:cc:69:d8:f4:22:66:19:57:2c:8d:0d:7c:36:
                    0d:96:62:36:56:98:e7:43:00:36:58:d8:a3:55:c6:
                    41:59:4d:f0:9d:c8:e7:9e:7d:4e:62:55:d9:ea:93:
                    9e:f0:1b:30:e4:7c:24:4f:02:80:a3:d5:5f:e5:6e:
                    9b:d5:df:ad:78:48:78:63:cb:0a:31:05:b2:46:9c:
                    5a:8c:2a:63:e8:e8:69:42:45:49:ee:ee:87:82:a7:
                    04:aa:8a:b5:a0:d3:37:dd:60:61:48:2d:c6:ec:83:
                    e3:ac:33:03:f1:a6:dc:88:16:39:a7:2d:7f:16:a2:
                    23:5b:1c:4b:a9:48:04:86:20:20:ea:2b:68:27:fc:
                    da:fa:e6:63:f1:e5:12:c5:0e:84:f1:1c:4f:1d:75:
                    db:08:b7:a2:46:c2:15:de:81:ec:0e:92:a8:60:5e:
                    da:f3:93:45:94:c8:41:bf:4e:33:b4:3f:af:27:b4:
                    b4:31:04:ad:4f:d0:12:dd:9a:48:4e:b9:e8:e9:d2:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3F:8D:B9:32:58:4D:6B:46:E1:34:09:7F:5E:D9:DE:F9:A7:29:2E
            X509v3 Authority Key Identifier:
                keyid:1A:6B:1A:2B:49:CC:77:01:87:CC:68:21:86:26:ED:DE:10:40:83:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GmsaK0nMdwGHzGghhibt3hBAg50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365915B/4FD9F058B01711F1815F1CB5CE1D38B0/GmsaK0nMdwGHzGghhibt3hBAg50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:7b:c4:d1:d7:e6:bf:28:29:6f:20:94:53:a9:20:9e:0d:d1:
         38:95:08:dc:59:fb:d7:13:a5:d7:b8:67:4e:2e:e6:7c:8c:6c:
         7b:ef:6e:6b:08:4e:7e:1d:a9:f2:ba:e5:69:bf:4b:46:0b:72:
         7a:b9:ff:d2:03:a0:85:5b:58:97:ec:c5:08:d2:a3:49:97:62:
         fa:db:da:f8:d7:8a:fe:26:c4:7d:6e:85:eb:35:34:95:3b:8b:
         0b:20:8c:e5:f9:75:b5:ef:1f:f7:e6:1f:47:f1:92:8a:f0:2b:
         5e:9a:22:35:0e:0f:73:86:15:a5:6b:c7:1b:f7:44:00:a6:57:
         80:03:05:cb:26:72:ed:4e:b5:34:98:11:26:79:e8:23:15:f0:
         ee:48:a3:69:3a:c9:ad:89:0f:d0:0b:6d:dd:49:55:bc:12:02:
         e0:b9:c6:34:e3:68:bb:60:ff:58:45:68:6f:8c:7a:5b:15:07:
         d6:5d:17:bd:2c:e5:48:47:6c:74:18:30:af:f8:f2:c3:eb:38:
         25:55:ba:65:e1:9c:a5:ce:37:3f:1c:bd:84:c9:51:15:78:43:
         b6:f3:cb:3c:36:e7:04:03:c1:57:1e:9e:aa:18:63:20:fd:90:
         9d:ea:62:1c:42:6c:64:a2:26:32:94:a1:a2:ef:7e:50:f1:cd:
         c4:99:81:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----