Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          C9cuB8hqTV8EP/voYo6SQ8Yw3prSMQjyfIBhdXPqbmo=
Subject key identifier:   93:3C:ED:33:43:D2:46:BC:C1:C7:65:F7:E4:D2:FE:C2:87:2D:F6:D1
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       0490
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          0490
Signing time:             Wed 29 Jul 2026 03:30:18 +0000
Manifest this update:     Wed 29 Jul 2026 03:30:17 +0000
Manifest next update:     Fri 31 Jul 2026 03:30:17 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: k/fBRrgLAFE7SSdRCCE9h9GaIrYSSGyiLdW9NURf0+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 31 Jul 2026 00:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Jul 29 03:30:17 2026 GMT
            Not After : Jul 31 03:30:17 2026 GMT
        Subject: CN=6a6973c9-fd1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:c1:c9:1c:e3:da:c3:2a:7f:74:aa:ad:95:
                    b4:98:5c:32:89:63:54:bf:e4:88:45:b5:6d:03:54:
                    a2:7c:9e:b9:ff:aa:5a:96:e8:af:fd:e0:f1:04:5c:
                    c5:92:5f:14:c8:2c:a3:8b:d6:52:12:55:c9:d9:64:
                    ea:58:cf:64:3b:57:a2:75:c7:18:da:3b:87:b9:53:
                    4b:da:c3:0f:5b:82:7e:ea:e2:22:d1:a5:b0:7f:4a:
                    ea:4d:bc:6b:b8:72:94:96:a7:41:6e:13:2a:6e:8d:
                    6e:5d:8d:a3:05:d9:1c:f8:fc:e3:82:83:36:a4:0c:
                    9b:f2:8f:a2:49:1f:a7:81:45:c5:fb:62:11:d0:17:
                    d0:10:55:37:a3:77:1d:59:ae:bb:14:dd:48:ab:45:
                    f8:79:44:59:f7:8e:93:a5:35:24:8e:f3:cc:7b:92:
                    7a:63:be:78:44:44:a1:e7:7c:e8:f9:fc:60:b9:5f:
                    66:24:4d:aa:b1:06:1c:24:76:80:60:7c:3e:cb:12:
                    bb:dc:28:47:75:0d:01:4e:7b:c3:37:9f:b0:b3:b2:
                    1e:92:30:d4:20:8b:0b:91:86:49:b3:91:87:30:d3:
                    68:05:a3:d0:0d:68:7e:ac:ec:7f:c9:d5:2f:1d:76:
                    03:08:a4:63:17:35:83:10:ab:80:1f:7f:fa:12:67:
                    b7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:3C:ED:33:43:D2:46:BC:C1:C7:65:F7:E4:D2:FE:C2:87:2D:F6:D1
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:e2:c7:88:de:e5:28:b7:7d:f0:46:ba:45:51:91:58:ac:
         bb:c1:57:c2:f4:3c:24:f6:6f:18:8e:3c:7f:e3:5d:e3:5e:fd:
         55:08:aa:a6:44:5f:29:6a:bf:12:79:f9:82:a5:9c:72:ed:10:
         0a:6a:40:7c:38:19:ea:f3:0f:80:65:dc:db:b7:83:dc:36:20:
         c6:00:a5:42:da:8a:53:19:c8:dc:2d:7b:14:19:7c:4f:99:d8:
         41:8e:b7:e3:8c:cd:77:7e:e7:f9:c7:ee:38:2e:ae:ce:60:1c:
         93:c5:58:1e:ae:c0:71:c3:bf:27:e6:43:66:42:76:ea:fe:9c:
         0e:e4:a8:94:f8:e6:3e:3f:93:4b:7d:92:fd:90:8c:8c:52:c4:
         9c:ab:0b:67:68:0e:c1:fa:5d:1f:a1:9f:8e:1f:b3:8f:90:36:
         00:f2:c1:0b:20:e8:ba:73:da:7d:e2:72:b6:cf:e4:8a:b8:b2:
         d1:15:28:68:71:d9:2e:6e:25:8b:3a:4f:52:69:a1:1e:b5:14:
         e7:b4:ad:93:0b:b0:4f:5d:5a:0c:66:84:2a:8a:54:a9:b1:1d:
         c5:7a:17:ef:ff:f7:83:80:43:35:b5:b5:3f:a4:0c:37:ef:42:
         74:d7:a2:aa:49:73:47:b8:2b:a5:03:ed:6c:a7:fb:0f:a7:92:
         6a:8a:08:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:58 2026 by rpki-client