Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File:                     gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier:          gnQcHggwIzybXa8tFG59GLrUJXMHcrTuilXnlHOHV1o=
Subject key identifier:   B0:7C:2C:68:66:7A:EA:C2:E5:23:BF:95:1C:82:6B:7A:86:1D:D1:1D
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer:       /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial:       03F8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number:          03F6
Signing time:             Sun 21 Jun 2026 03:44:41 +0000
Manifest this update:     Sun 21 Jun 2026 03:44:41 +0000
Manifest next update:     Tue 23 Jun 2026 03:44:41 +0000
Files and hashes:         1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: +rEEL8LKM/wu+KgctEODCiqkphbMFAtiFvTfylMpYus=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1016 (0x3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
        Validity
            Not Before: Jun 21 03:44:41 2026 GMT
            Not After : Jun 23 03:44:41 2026 GMT
        Subject: CN=6a375e29-3c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c4:d7:96:5d:d1:1f:fb:f4:1d:e5:64:3f:93:
                    a0:ff:87:90:d8:1a:e1:06:b2:4b:4d:22:87:59:8b:
                    72:0a:f6:05:fa:0a:2e:d3:b8:21:bd:3f:24:3e:48:
                    7e:0b:05:ec:25:6b:3f:1c:47:ca:b2:8b:23:a5:97:
                    54:a3:25:a9:3d:cc:27:d9:0e:6e:27:15:6b:ce:d7:
                    94:1c:83:30:e4:e2:df:ab:1a:7d:19:69:e2:73:bd:
                    9b:7e:3d:9c:ec:c0:18:50:0f:d0:bf:79:88:23:ce:
                    8f:f7:7c:97:d1:c8:b3:dc:e0:a1:d6:1f:c3:3b:28:
                    a7:9c:71:fc:4e:fb:20:2a:ea:58:46:76:e7:37:83:
                    ef:ba:f0:e3:09:c6:85:8b:32:4b:2f:a8:a3:f9:b8:
                    20:45:6d:9c:5a:95:c8:d9:91:03:d9:e1:08:fb:3d:
                    3e:f7:d9:fe:51:55:23:61:ad:c5:ba:b9:ec:82:ea:
                    c2:ef:1c:bb:86:24:99:58:d1:ca:dd:72:f7:e4:c3:
                    19:11:17:b7:ec:83:41:ec:f5:62:32:c2:46:10:52:
                    58:41:ad:63:2c:62:f7:54:00:6e:1d:3d:9a:98:5a:
                    af:44:6c:b1:16:96:59:be:c8:ac:ad:d1:ff:b1:10:
                    9e:d4:32:40:c8:c4:25:59:a8:04:61:0e:cd:b5:c3:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7C:2C:68:66:7A:EA:C2:E5:23:BF:95:1C:82:6B:7A:86:1D:D1:1D
            X509v3 Authority Key Identifier:
                keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:ca:44:98:ef:83:cb:22:c7:7e:b8:66:c5:c5:d5:1d:d0:a8:
         7e:5a:c9:41:8e:1c:cd:fd:fa:44:a1:4a:b0:04:81:fe:37:93:
         f3:2e:df:ac:35:78:e5:cc:49:65:12:f8:ed:75:cb:30:69:c9:
         e0:60:df:4e:e6:8e:f5:d9:57:12:bb:10:1b:08:17:d0:a7:13:
         8d:c0:ee:3e:1b:27:94:b6:78:98:f6:35:7f:74:c4:d7:51:85:
         e9:de:cc:4c:64:44:a8:c2:9e:6a:53:1a:5a:79:3c:75:e7:8d:
         e9:10:16:35:d7:1d:ce:df:f0:5f:6d:12:b3:2b:9b:12:b9:10:
         a0:dd:24:bd:23:2d:db:56:ae:04:2c:31:3d:ff:a4:61:9d:02:
         1a:e3:f9:cb:9c:75:07:6e:bf:c7:52:52:1b:39:0c:ed:07:81:
         51:05:a9:c5:67:aa:a5:50:fa:9e:aa:9a:32:62:10:8d:75:13:
         c6:bf:7f:be:b9:f3:94:25:82:55:16:6d:fa:be:6d:0c:d5:f3:
         dc:f3:77:69:d7:58:f3:33:2c:01:64:9c:37:a9:44:56:b0:18:
         01:76:22:a5:42:87:28:a2:96:b4:35:4e:52:17:65:74:4a:f3:
         64:39:97:cf:e5:b8:3b:bb:e9:28:7c:0c:94:62:3d:7f:bf:ef:
         2c:35:37:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:35:49 2026 by rpki-client