Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File:                     GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier:          IzPXX6Tuv1iKy80VMd2iVguZ8ofBbRyvSRIwpl+6foo=
Subject key identifier:   4C:3E:DB:C5:60:32:D6:2C:63:9A:91:90:B4:C9:14:F4:B4:B5:A5:97
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer:       /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number:          0423
Signing time:             Wed 03 Jun 2026 03:36:29 +0000
Manifest this update:     Wed 03 Jun 2026 03:36:28 +0000
Manifest next update:     Fri 05 Jun 2026 03:36:28 +0000
Files and hashes:         1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: vWXRn4Sp6wS+hGxE9FEPcE7/CZVBMVV8+k8bfAGYKes=)
                          2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Jun 2026 00:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
        Validity
            Not Before: Jun  3 03:36:28 2026 GMT
            Not After : Jun  5 03:36:28 2026 GMT
        Subject: CN=6a1fa13d-3e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:7f:d0:a2:4a:3d:fe:d4:c1:f0:ac:34:60:
                    4a:69:6d:1c:e0:f3:4d:0d:e0:73:25:2f:94:17:17:
                    7d:d0:d2:54:0e:bf:f4:a3:bb:92:9f:69:2f:89:2f:
                    28:48:45:59:cd:5c:f2:fd:ea:ed:c4:68:a7:85:ef:
                    ac:e4:4e:6b:0c:e8:20:ff:7f:00:d6:13:c8:87:d9:
                    89:53:37:fb:f0:55:98:df:f9:89:da:5d:45:1f:ea:
                    7a:a7:c9:64:9a:fb:09:f7:b5:99:f0:09:7e:59:e9:
                    1b:f6:43:95:64:88:e2:90:aa:d2:cf:ae:c0:ff:e4:
                    2c:5a:9c:c6:eb:52:27:96:02:70:5d:20:1a:ef:29:
                    1d:72:4f:53:99:61:cd:6b:a8:06:43:78:d0:24:a8:
                    9e:8c:c3:e5:00:7b:a7:5b:dd:dc:73:5d:d7:eb:ac:
                    b7:48:f4:73:4a:94:f9:16:8e:b9:be:8b:2f:73:03:
                    14:86:00:d8:b4:d0:42:aa:c0:80:73:1f:ad:63:7e:
                    ed:ff:74:1c:d0:ad:36:b9:c4:b8:bc:e9:b5:af:01:
                    1c:4c:d6:45:50:76:68:5f:a3:a2:07:92:19:da:1d:
                    76:75:b3:23:2b:4e:f6:07:92:a9:ae:59:97:c6:28:
                    09:72:15:2f:a9:32:ea:8a:11:ec:c7:73:20:36:df:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3E:DB:C5:60:32:D6:2C:63:9A:91:90:B4:C9:14:F4:B4:B5:A5:97
            X509v3 Authority Key Identifier:
                keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:00:70:69:da:84:13:cf:e9:ac:5d:2f:58:f3:00:a1:9a:94:
         5f:25:25:6a:06:07:74:d0:eb:d3:44:83:1c:81:46:de:ec:c3:
         56:59:61:37:21:9b:03:77:0e:65:20:35:06:99:3c:51:51:82:
         cd:0a:7b:98:41:d1:ab:5b:b8:cc:6f:ac:d3:97:51:4c:d4:06:
         cc:62:ee:65:a8:99:90:a4:00:ad:1c:d0:fe:4e:56:df:5f:79:
         f6:c3:32:8e:78:58:50:0c:4f:8d:73:a2:a4:1f:df:1c:dc:fa:
         ca:eb:10:9c:ed:3e:ab:95:85:c4:0b:a0:00:26:45:73:17:90:
         66:f9:d3:73:9a:7e:dd:ce:76:b0:bf:0d:6b:bd:1a:8f:a2:a9:
         64:a9:b1:41:6c:56:14:03:57:47:20:5f:f7:6f:0d:54:5d:b4:
         b6:cd:3a:04:12:1f:0a:a1:dc:69:c4:b3:32:08:c1:07:da:74:
         da:02:f7:e0:44:90:05:41:b3:d2:07:12:d2:de:96:c1:3f:0c:
         4f:75:27:90:97:05:9a:9e:8a:7d:f2:40:29:a0:a5:a6:7b:f5:
         97:99:c0:19:2e:99:59:b1:a9:41:10:19:64:32:10:b4:fa:c0:
         c0:9e:69:23:bf:55:97:ba:e2:34:f6:3b:10:ef:22:ae:ed:e9:
         5a:75:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 19:57:46 2026 by rpki-client