Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          HYOy252yqnSBuB4Fyqp8a74mqDHiTVHOraa3SFw61wU=
Subject key identifier:   C8:5C:C8:1E:02:4E:17:FB:23:01:F7:49:1F:09:A6:08:3E:EB:50:E1
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       04C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          04C7
Signing time:             Tue 22 Sep 2026 03:29:01 +0000
Manifest this update:     Tue 22 Sep 2026 03:29:00 +0000
Manifest next update:     Thu 24 Sep 2026 03:29:00 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: k4KDCi7/a19VzUTz1SQ4oKLtsFcvG7brSmN4yaZdnqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Sep 22 03:29:00 2026 GMT
            Not After : Sep 24 03:29:00 2026 GMT
        Subject: CN=6ab1f5fd-ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:15:33:92:3a:ba:9c:a2:d9:b3:4d:57:30:d0:
                    77:96:81:ef:7a:a6:54:8d:a3:21:84:57:1a:e6:a9:
                    c1:bd:90:6a:2f:2f:72:e1:87:2e:a0:43:66:69:5e:
                    b9:6a:8b:52:d6:47:54:9c:9f:55:39:12:cb:2f:1d:
                    cc:04:48:cf:5c:bd:61:4c:29:06:81:fd:6a:10:53:
                    3f:2c:34:7f:5d:58:be:05:8e:36:f1:8a:d5:cc:7f:
                    25:ce:6e:fa:f4:9b:23:ac:ab:40:23:f8:7f:6b:00:
                    15:6f:33:b0:1c:fb:93:98:ea:5e:32:12:fa:90:3c:
                    b5:13:a7:59:94:ac:4a:8e:96:dd:86:7c:80:a1:79:
                    ab:4e:4b:90:ce:98:07:c8:07:ac:27:93:fd:71:40:
                    46:2e:8c:84:fa:bb:0c:e1:b1:99:59:73:bf:b8:8a:
                    57:7a:7d:98:d8:ca:f3:69:cf:c1:40:ef:b2:fb:4f:
                    de:ad:a6:e8:e8:ed:e2:a8:20:90:47:58:a3:15:ec:
                    80:4a:a9:31:3a:41:6e:60:b3:64:06:9b:62:59:19:
                    84:cd:e4:ec:ca:0b:ad:da:77:55:66:be:0e:81:8e:
                    5d:81:a2:a9:9e:64:c1:15:98:bf:a2:0d:e7:f7:8b:
                    06:05:c3:61:0e:5e:4e:51:4b:e6:00:28:7d:c8:61:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:C8:1E:02:4E:17:FB:23:01:F7:49:1F:09:A6:08:3E:EB:50:E1
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:63:36:4e:81:b4:69:d2:d5:39:9f:b8:b3:c7:d9:b1:59:11:
         5d:4b:ad:9b:65:9f:72:5c:5e:91:b4:8b:b9:c2:1e:df:5f:be:
         97:64:c0:5c:e5:7e:01:9f:f2:19:29:d4:e0:e7:be:7c:74:85:
         e5:c0:a5:10:66:b2:bb:fd:06:ff:dc:f7:03:ad:bf:ed:7a:ee:
         c5:41:13:45:65:60:3d:63:78:6e:38:f4:c9:47:df:8c:7a:f5:
         0c:80:a5:8c:44:74:f4:c7:db:8c:2a:00:3c:3e:cb:af:48:c9:
         c9:c1:3b:a1:c1:05:e5:44:93:d9:0d:0d:c5:c4:44:b2:66:2e:
         0f:30:1a:44:6c:ea:96:cb:72:d5:1e:32:2a:bb:8a:10:d6:07:
         60:eb:e6:c7:7a:50:61:e9:4a:4f:16:66:07:9a:7e:18:e6:af:
         5a:da:f1:4c:b2:c5:2d:dc:45:64:59:51:32:3e:cf:9d:85:2e:
         f9:92:cb:85:dc:b8:a9:94:f2:b1:ef:fd:7f:9a:6b:71:ba:b9:
         ec:f8:aa:11:d3:2f:4d:32:ab:c9:f0:c2:13:5d:1a:69:d5:0e:
         d2:5c:20:28:67:8d:a7:58:1f:46:86:0e:b8:8c:bf:84:ea:56:
         fd:4f:9a:8f:2b:9f:8a:42:ff:cc:3e:f1:bb:23:35:b8:f0:22:
         2d:93:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----