Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
File:                     PX4rsaW_d2MBah9006PUVz6rsIk.mft (raw, json)
Hash identifier:          HU9GOiqknJtKGzXePh6+rHFoxFJcSOCVYSDpBbZD3NQ=
Subject key identifier:   2D:0D:21:20:3E:1C:D7:20:40:BE:48:B6:48:69:E6:05:80:12:9C:9D
Authority key identifier: 3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89
Certificate issuer:       /CN=F3678120AR/serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
Certificate serial:       0F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
Manifest number:          0F
Signing time:             Tue 22 Sep 2026 05:52:59 +0000
Manifest this update:     Tue 22 Sep 2026 05:52:58 +0000
Manifest next update:     Thu 24 Sep 2026 05:52:58 +0000
Files and hashes:         1: PX4rsaW_d2MBah9006PUVz6rsIk.crl (hash: V/TnuuWWp/AmKCRXYgtDkFbRU3V4eD+dGVP8qCnrif4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                          rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AR, serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
        Validity
            Not Before: Sep 22 05:52:58 2026 GMT
            Not After : Sep 24 05:52:58 2026 GMT
        Subject: CN=6ab217ba-ce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:96:f6:71:a9:56:71:7a:37:93:6b:ea:60:61:
                    93:b4:d1:55:b7:92:5e:fb:af:2b:16:9e:b0:96:b2:
                    d8:e7:24:bc:15:d0:2c:49:5b:b3:39:94:17:ea:a2:
                    ae:3e:0b:17:b2:a7:da:40:f4:e9:45:60:01:bd:cd:
                    01:58:70:76:a1:8d:60:21:9a:05:e5:f8:ca:fe:ab:
                    a5:44:bf:0d:59:5c:72:84:e8:5c:df:74:51:fe:3f:
                    5b:4b:dd:f9:77:55:34:ec:3c:df:13:1b:bc:6e:fc:
                    92:f0:48:e8:79:c3:e5:20:86:a8:50:37:ea:d6:c9:
                    7f:4b:65:e5:59:cd:22:e0:fb:cd:78:f6:f0:b4:c7:
                    b1:9c:7d:73:71:9f:eb:67:8e:09:ff:f2:06:56:3f:
                    03:a6:42:8c:44:ff:f7:07:34:3c:ae:91:b5:c6:06:
                    e4:b5:a6:e4:6b:1f:e9:ab:a4:54:22:a0:3a:27:c3:
                    fe:c8:e3:13:0d:5c:6c:64:3e:db:5b:b4:db:fb:9d:
                    52:f1:10:c6:eb:6e:cb:07:08:1b:4d:d9:1e:9b:44:
                    28:27:3a:e1:1d:4c:37:96:1d:53:8f:a2:d0:90:cc:
                    8a:f9:e8:7d:44:7d:b1:0a:3f:f8:d1:6a:09:02:b0:
                    91:62:68:37:ae:14:a2:07:5a:f0:79:ca:8b:c7:00:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:21:20:3E:1C:D7:20:40:BE:48:B6:48:69:E6:05:80:12:9C:9D
            X509v3 Authority Key Identifier:
                keyid:3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:26:f4:32:4d:db:4c:4e:b6:20:3c:8c:f9:f9:ba:39:b9:
         42:ef:92:c3:96:88:69:c1:f7:30:2e:8f:46:4a:a2:16:11:c6:
         4a:f0:a0:d3:92:a8:94:fd:2d:19:85:81:fd:ac:fd:44:f7:a3:
         95:ee:75:ca:45:de:27:78:d6:ae:81:41:28:f3:d0:36:e0:86:
         73:d8:41:fc:83:26:bf:a0:cd:91:e2:45:ce:35:89:87:d8:56:
         50:2c:70:38:8e:67:ba:d8:47:a7:a4:80:df:08:46:1a:dc:d2:
         89:6a:d7:44:14:24:83:dd:f6:b6:28:4c:bb:10:6d:f3:50:5f:
         44:53:c8:b9:72:3e:35:b0:ff:9e:0b:e0:32:d3:f9:d6:77:18:
         f6:2a:64:15:97:d7:d0:69:1d:40:c8:e2:3d:22:a5:94:3c:39:
         88:68:54:80:38:92:a9:39:d8:a3:1b:be:85:30:32:29:23:b1:
         f5:7e:8b:fc:68:b5:26:b6:36:94:25:e9:c5:84:1c:69:8a:3a:
         5d:10:07:cc:e9:31:fe:3d:83:23:f9:f5:fc:f3:92:d8:b0:49:
         21:db:39:57:36:ea:d7:67:77:01:dd:a0:6f:f6:7a:54:0f:7b:
         c1:57:ce:0c:a1:b7:fb:54:d8:26:4e:45:75:9e:c3:5e:a8:48:
         a2:aa:31:bf
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBDzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
ODEyMEFSMTEwLwYDVQQFEygzRDdFMkJCMUE1QkY3NzYzMDE2QTFGNzREM0EzRDQ1
NzNFQUJCMDg5MB4XDTI2MDkyMjA1NTI1OFoXDTI2MDkyNDA1NTI1OFowGDEWMBQG
A1UEAxMNNmFiMjE3YmEtY2U5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKiW9nGpVnF6N5Nr6mBhk7TRVbeSXvuvKxaesJay2OckvBXQLElbszmUF+qi
rj4LF7Kn2kD06UVgAb3NAVhwdqGNYCGaBeX4yv6rpUS/DVlccoToXN90Uf4/W0vd
+XdVNOw83xMbvG78kvBI6HnD5SCGqFA36tbJf0tl5VnNIuD7zXj28LTHsZx9c3Gf
62eOCf/yBlY/A6ZCjET/9wc0PK6RtcYG5LWm5Gsf6aukVCKgOifD/sjjEw1cbGQ+
21u02/udUvEQxutuywcIG03ZHptEKCc64R1MN5YdU4+i0JDMivnofUR9sQo/+NFq
CQKwkWJoN64Uogda8HnKi8cAM28CAwEAAaOCArUwggKxMB0GA1UdDgQWBBQtDSEg
PhzXIEC+SLZIaeYFgBKcnTAfBgNVHSMEGDAWgBQ9fiuxpb93YwFqH3TTo9RXPquw
iTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzgxMjAvMEQ1NTNGRkVBQkUzMTFGMUE5RkNDRUFDQ0UxRDM4QjAvUFg0cnNh
V19kMk1CYWg5MDA2UFVWejZyc0lrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
UFg0cnNhV19kMk1CYWg5MDA2UFVWejZyc0lrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY3ODEyMC8wRDU1M0ZGRUFCRTMxMUYxQTlGQ0NFQUNDRTFEMzhC
MC9QWDRyc2FXX2QyTUJhaDkwMDZQVVZ6NnJzSWsubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC1EJvQyTdtMTrYgPIz5+bo5uULvksOWiGnB
9zAuj0ZKohYRxkrwoNOSqJT9LRmFgf2s/UT3o5XudcpF3id41q6BQSjz0DbghnPY
QfyDJr+gzZHiRc41iYfYVlAscDiOZ7rYR6ekgN8IRhrc0olq10QUJIPd9rYoTLsQ
bfNQX0RTyLlyPjWw/54L4DLT+dZ3GPYqZBWX19BpHUDI4j0ipZQ8OYhoVIA4kqk5
2KMbvoUwMikjsfV+i/xotSa2NpQl6cWEHGmKOl0QB8zpMf49gyP59fzzktiwSSHb
OVc26tdndwHdoG/2elQPe8FXzgyht/tU2CZORXWew16oSKKqMb8=
-----END CERTIFICATE-----