Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          JvwbIe8LXB6rBPoy+7OlSLyKYszt6mP4yz6faS3Vj1M=
Subject key identifier:   8F:E0:4B:A3:A1:D4:FC:23:03:C6:32:98:C0:A7:DB:D2:F5:81:C2:4D
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0CB1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0CAF
Signing time:             Sun 29 Mar 2026 01:08:59 +0000
Manifest this update:     Sun 29 Mar 2026 01:08:58 +0000
Manifest next update:     Tue 31 Mar 2026 01:08:58 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: c2syEa/qT4hsU7dnaUav9LsAN0jUtUWw2ChuZ80a6xI=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 31 Mar 2026 00:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3249 (0xcb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF, serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Mar 29 01:08:58 2026 GMT
            Not After : Mar 31 01:08:58 2026 GMT
        Subject: CN=69c87bab-8afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:80:93:f7:fc:9d:ac:fa:5b:92:31:69:04:
                    3f:f2:22:a5:b6:10:de:9b:ef:34:bc:f6:86:f1:98:
                    7f:48:63:01:48:44:c5:a8:c9:97:6c:b8:07:81:1e:
                    62:9e:12:6d:17:29:73:be:51:ee:81:8a:9d:d2:51:
                    97:59:8c:9c:db:ae:4a:d6:e0:a1:55:81:a0:55:7e:
                    a1:0d:67:7e:c5:62:c8:7e:11:f9:7c:58:69:38:fc:
                    30:ff:b2:74:62:1a:10:a0:00:3a:2b:ef:90:46:d4:
                    ab:52:84:da:11:da:7b:16:41:bb:9a:7b:f5:16:18:
                    8d:40:d6:ef:9f:b6:85:05:77:93:be:5c:98:01:19:
                    44:1d:71:68:81:d3:7a:a1:4b:14:44:a7:78:14:6e:
                    ca:20:49:b1:c3:25:6e:0a:21:1a:36:bc:e1:59:ce:
                    47:43:d7:d2:ee:ea:75:ea:93:34:33:d1:38:c1:79:
                    37:33:9e:1e:f1:37:c7:e4:e2:da:29:c1:0a:dd:ea:
                    7b:2a:66:98:2c:72:29:55:25:3a:b6:19:dd:cc:f6:
                    a2:6f:ef:77:03:32:35:4e:cd:19:0a:a1:e9:16:50:
                    b2:a6:f6:61:55:95:9f:35:00:1a:8d:05:eb:20:7d:
                    6d:6f:bf:3f:97:62:d4:0a:85:ed:c2:20:6e:ab:56:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:4B:A3:A1:D4:FC:23:03:C6:32:98:C0:A7:DB:D2:F5:81:C2:4D
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:5d:8d:45:29:3a:e2:79:ed:8c:78:cb:49:57:a1:ee:fc:93:
         74:f8:dc:c2:e5:ab:22:01:5c:52:93:08:06:30:a8:c2:5b:8d:
         d2:68:60:30:66:8a:5f:b9:75:76:d8:53:52:a6:e5:33:20:f2:
         a3:17:bf:45:12:68:eb:e7:4e:0e:0a:35:72:e2:4f:a1:93:b8:
         bb:e2:ff:50:f2:58:87:e0:ac:51:f2:f1:07:b2:cb:bc:ce:16:
         dc:d9:21:79:9a:b8:fa:af:51:10:f9:c9:5c:dc:be:ac:a6:1c:
         99:91:8f:d5:2f:89:4a:40:23:85:d8:53:dc:ea:df:3f:3d:25:
         23:cf:9e:c2:48:8e:34:8b:9c:3a:7a:31:90:45:d8:92:34:46:
         15:6b:a3:7a:56:10:c3:57:6a:21:fc:50:ed:9c:57:f4:b7:c5:
         f9:f7:b0:06:7a:c6:c1:51:d7:ae:97:b2:7b:ba:91:5a:5d:27:
         38:f8:6b:74:d1:2b:84:20:ae:8d:2f:09:f0:b0:31:b3:f9:c3:
         ae:07:28:41:1a:e6:51:56:06:80:91:50:59:dd:c7:36:33:4e:
         82:30:ba:06:cd:5f:0a:38:7d:0d:fe:44:82:ed:6f:29:00:27:
         c9:f0:8c:88:ce:48:81:a9:76:0a:38:e5:a8:94:f3:74:de:2f:
         ce:0a:e7:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgyMzFBRjExMC8GA1UEBRMoMTgxRUY3MUEzNEY5MkNGNjJEQ0QxMUQ3OTAwN0M1
ODU0ODM5QzFBQjAeFw0yNjAzMjkwMTA4NThaFw0yNjAzMzEwMTA4NThaMBgxFjAU
BgNVBAMTDTY5Yzg3YmFiLThhZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvhICT9/ydrPpbkjFpBD/yIqW2EN6b7zS89obxmH9IYwFIRMWoyZdsuAeB
HmKeEm0XKXO+Ue6Bip3SUZdZjJzbrkrW4KFVgaBVfqENZ37FYsh+Efl8WGk4/DD/
snRiGhCgADor75BG1KtShNoR2nsWQbuae/UWGI1A1u+ftoUFd5O+XJgBGUQdcWiB
03qhSxREp3gUbsogSbHDJW4KIRo2vOFZzkdD19Lu6nXqkzQz0TjBeTcznh7xN8fk
4topwQrd6nsqZpgscilVJTq2Gd3M9qJv73cDMjVOzRkKoekWULKm9mFVlZ81ABqN
BesgfW1vvz+XYtQKhe3CIG6rVj2pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj+BL
o6HU/CMDxjKYwKfb0vWBwk0wHwYDVR0jBBgwFoAUGB73GjT5LPYtzRHXkAfFhUg5
waswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MjMxLzNBQThCQTIwNkI4RTExRTc5M0MxQzU2NUY4QUVBMjI4L0dCNzNH
alQ1TFBZdHpSSFhrQWZGaFVnNXdhcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dCNzNHalQ1TFBZdHpSSFhrQWZGaFVnNXdhcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjgyMzEvM0FBOEJBMjA2QjhFMTFFNzkzQzFDNTY1RjhB
RUEyMjgvR0I3M0dqVDVMUFl0elJIWGtBZkZoVWc1d2FzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDNXY1FKTriee2MeMtJV6Hu/JN0+NzC
5asiAVxSkwgGMKjCW43SaGAwZopfuXV22FNSpuUzIPKjF79FEmjr504OCjVy4k+h
k7i74v9Q8liH4KxR8vEHssu8zhbc2SF5mrj6r1EQ+clc3L6sphyZkY/VL4lKQCOF
2FPc6t8/PSUjz57CSI40i5w6ejGQRdiSNEYVa6N6VhDDV2oh/FDtnFf0t8X597AG
esbBUdeul7J7upFaXSc4+Gt00SuEIK6NLwnwsDGz+cOuByhBGuZRVgaAkVBZ3cc2
M06CMLoGzV8KOH0N/kSC7W8pACfJ8IyIzkiBqXYKOOWolPN03i/OCucn
-----END CERTIFICATE-----
Generated at Sun Mar 29 22:47:36 2026 by rpki-client