Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          tTKWKvz1YlQW8+Q1wG3P1xjDbEJpUqDRkyAKaO7xfBI=
Subject key identifier:   C0:0D:35:00:5B:12:74:1D:C3:4F:F8:CF:6C:F0:1D:A3:88:A1:63:8C
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          0429
Signing time:             Mon 21 Sep 2026 03:48:42 +0000
Manifest this update:     Mon 21 Sep 2026 03:48:41 +0000
Manifest next update:     Wed 23 Sep 2026 03:48:41 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: UYeaawv8hhwi9rxd078axffBEkDnFyxw+tVqOg4QtdM=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Sep 21 03:48:41 2026 GMT
            Not After : Sep 23 03:48:41 2026 GMT
        Subject: CN=6ab0a91a-d792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:56:90:ac:91:4c:11:46:e2:8b:43:38:5a:db:
                    48:04:99:95:9e:0a:57:35:3e:91:b5:9a:88:ca:82:
                    75:bf:28:ea:6c:10:92:c0:92:02:e5:48:c4:4a:10:
                    56:c9:b1:7c:b2:ae:83:0b:63:dc:e3:31:43:fc:d3:
                    d8:a1:bc:eb:19:c3:7b:87:b3:77:28:2f:7a:92:5a:
                    9b:a4:80:a1:ea:58:a8:26:92:53:9d:bd:ad:04:af:
                    f4:dc:97:16:dc:4a:59:32:36:4d:37:79:71:9e:55:
                    05:54:20:10:3c:b5:d1:38:98:f4:e8:83:56:ac:44:
                    30:b8:9e:8b:0c:e2:b2:1b:95:b2:a5:53:2e:ef:61:
                    fa:69:c7:d9:f6:1b:23:3e:ef:ae:81:40:ca:e4:96:
                    12:c9:8a:89:6d:e5:1c:37:7e:04:41:ef:b7:0a:39:
                    35:a6:8e:ac:0d:b0:d7:f4:25:ee:df:75:25:a5:ce:
                    e9:36:23:cb:99:60:b7:32:d8:28:97:08:54:a9:32:
                    86:72:ba:a5:4a:54:03:32:c5:36:92:a6:0e:bc:37:
                    0f:59:94:06:f7:af:d0:74:23:56:96:ef:35:10:43:
                    34:37:80:7b:05:a5:9b:e5:ff:80:d9:6e:05:70:3c:
                    9e:67:01:2a:b1:99:85:72:4d:c0:c1:9f:1c:cc:54:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0D:35:00:5B:12:74:1D:C3:4F:F8:CF:6C:F0:1D:A3:88:A1:63:8C
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:da:e7:25:b0:0f:6d:13:08:b7:7e:25:34:ac:75:e1:c7:
         fe:d3:79:33:20:07:40:7d:11:c3:4f:0e:b6:c5:04:d6:c5:f6:
         67:ac:b6:02:f8:7e:d1:2d:0d:70:4e:69:fb:10:92:db:03:19:
         c1:a0:d8:83:84:1b:c4:78:b3:2a:79:ac:50:9c:61:dd:12:d6:
         b8:4a:e5:a0:a0:62:4d:57:cd:e9:73:0c:04:1a:3c:75:69:d8:
         ef:b5:96:d4:a4:11:ec:ae:b1:a1:9c:15:34:56:f6:25:60:ed:
         98:dc:a3:7e:97:b7:7c:9f:e9:c4:aa:99:e0:d3:29:32:31:f6:
         39:22:81:c7:0b:4a:82:51:7f:34:83:1f:0c:e4:9c:76:f4:fe:
         d3:50:a9:ab:3f:4d:bc:7d:ac:4a:1c:20:06:46:05:0b:0f:8e:
         20:ad:3f:9e:65:42:6d:6e:9d:de:ee:b0:8d:b7:b3:41:a8:a6:
         fe:25:ba:a0:da:0c:95:0f:77:ec:a1:92:7f:7a:ee:d7:9c:e2:
         37:41:82:3d:58:c6:68:84:11:2b:60:c8:72:5f:1c:1b:39:b0:
         d3:5b:1e:53:30:69:ed:e7:2d:8a:95:07:95:1d:c0:3e:f8:ae:
         63:fd:58:d6:08:70:09:1f:69:f1:c4:f1:6e:10:42:e4:8e:aa:
         88:fa:03:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----