Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
File:                     GsSe57FYhufc3nkyHoJCyZMkg8k.mft (raw, json)
Hash identifier:          XdgNx3ZDbiVZT2HHVWBCk23ArjRIYdhCUZ1/JmM7l0w=
Subject key identifier:   60:C4:5F:67:75:E6:1C:E8:9D:1D:64:5D:44:5B:92:C4:3A:73:98:A6
Authority key identifier: 1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
Certificate issuer:       /CN=F36A7FC6AF/serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
Certificate serial:       037A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
Manifest number:          0378
Signing time:             Tue 16 Sep 2025 03:27:14 +0000
Manifest this update:     Tue 16 Sep 2025 03:27:13 +0000
Manifest next update:     Thu 18 Sep 2025 03:27:13 +0000
Files and hashes:         1: GsSe57FYhufc3nkyHoJCyZMkg8k.crl (hash: QB3A90DjY2jTLZIjrLNX2tJCsQN3tunQ0tpoaAoYYNM=)
                          2: AA9ABA5642D411F0B38EE4DEDAE4EC9C.roa (hash: pdHoehgzkEsYPixEIbNAhE6JMM6V0LCrLDRC9qMstoA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AF, serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
        Validity
            Not Before: Sep 16 03:27:13 2025 GMT
            Not After : Sep 18 03:27:13 2025 GMT
        Subject: CN=68c8d912-b6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:99:d4:b6:95:2b:a3:13:c1:bf:36:a8:fd:
                    ec:20:0a:d9:1d:0e:5b:79:c5:95:ea:e4:b9:31:9e:
                    66:3c:0a:00:4a:93:f2:45:40:3c:f3:ef:c8:44:a2:
                    eb:81:52:e5:b4:0f:13:31:2b:a2:2c:1a:87:f1:31:
                    d7:ee:e5:ad:53:50:c7:69:47:6b:53:99:ad:c8:3d:
                    61:b0:d1:4f:67:b4:41:98:01:46:98:0b:4b:bf:18:
                    51:11:e0:37:ed:9d:88:7e:a6:87:e7:d3:59:23:73:
                    ad:59:54:d0:e5:80:fa:f3:8d:97:39:66:ac:78:1e:
                    eb:62:98:a6:75:8e:11:12:3b:16:41:5c:6c:2e:60:
                    35:f5:e7:b5:db:03:a9:8e:0d:d9:23:21:55:27:71:
                    3b:e3:dd:ef:32:85:83:09:18:a4:37:79:d5:b5:79:
                    7f:b2:35:29:12:c8:76:ef:79:fa:a6:e8:77:75:90:
                    31:bb:2d:57:fc:89:2f:3c:0d:fb:8e:26:6f:53:f5:
                    dc:fd:83:7a:bf:29:72:02:1d:16:be:bb:e6:07:18:
                    b2:8a:15:e2:07:41:e4:3e:37:ef:61:1d:c0:bb:68:
                    67:26:07:ca:1b:bc:6b:14:9c:a7:ad:02:eb:23:f1:
                    fa:46:ae:e8:f1:16:d9:00:c0:5d:fa:8a:30:92:d8:
                    94:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C4:5F:67:75:E6:1C:E8:9D:1D:64:5D:44:5B:92:C4:3A:73:98:A6
            X509v3 Authority Key Identifier:
                keyid:1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:0d:5d:e7:44:4b:50:f8:85:df:d7:dd:bd:87:32:37:be:
         af:a9:41:9b:98:ab:eb:1f:b6:7e:21:77:ed:fc:b4:10:9a:74:
         6c:35:d1:a6:0b:1a:df:b9:5b:1e:de:7d:f4:63:85:49:83:d0:
         2b:20:ac:ae:db:0c:0c:a7:66:58:c2:2a:63:ac:ca:b6:7c:be:
         77:57:6b:5a:5c:d1:b7:f4:bc:b0:ce:a4:59:84:68:8b:a2:a0:
         92:b3:9b:9a:0e:89:0d:bf:52:b1:00:a7:65:96:5f:32:38:ef:
         9f:c7:6c:d3:ac:92:52:ea:06:b7:7d:ef:38:10:41:ff:06:f5:
         66:26:44:77:c0:e4:b1:4c:12:b5:d8:06:0e:b9:a2:48:93:f0:
         e3:1c:5a:d9:bd:d6:ca:18:43:13:b5:87:25:30:3e:89:fb:99:
         b2:fe:4c:7b:e9:9d:5e:6b:97:92:f3:91:14:99:ba:5f:11:95:
         31:9b:35:8a:41:fd:8d:36:04:3a:32:e0:a9:9b:15:b1:20:71:
         45:78:b9:1f:f9:43:98:59:fa:d3:5f:59:82:53:ca:44:c4:ec:
         bd:3f:56:10:c8:ec:69:e3:c6:52:b3:f0:a7:7d:28:49:32:b9:
         bb:d9:77:5c:96:71:e6:90:0e:1a:d2:a8:cb:7a:af:b7:06:99:
         9e:9e:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:50:27 2025 by rpki-client