Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          mBqQgjgA9RUMp1s/hRjT2eqFKbu1qXpQNqBkYZtTbKs=
Subject key identifier:   DF:95:2B:07:D3:52:41:A7:8D:C8:EB:F7:E4:D9:B8:F2:BB:E0:36:02
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       0371
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          0371
Signing time:             Mon 20 Oct 2025 03:35:39 +0000
Manifest this update:     Mon 20 Oct 2025 03:35:38 +0000
Manifest next update:     Wed 22 Oct 2025 03:35:38 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: eCPQ1OD3mipQfRQWb0CQ+hBcWqZ2s3LZKErGPmFgkTg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Oct 20 03:35:38 2025 GMT
            Not After : Oct 22 03:35:38 2025 GMT
        Subject: CN=68f5ae0b-67b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9d:a0:c4:c0:1e:ef:ae:bb:79:f2:ab:f3:ee:
                    27:d3:6f:26:a8:2e:b8:b3:45:02:99:6b:d8:15:e3:
                    e6:7f:bf:f7:25:6c:d9:c3:8f:22:96:ce:99:59:4f:
                    7b:65:9a:8c:ad:1f:71:2c:18:1b:76:5a:e0:1e:f1:
                    89:41:af:f6:59:18:fa:4e:e2:c1:a1:fc:4f:53:d7:
                    d5:01:a4:93:67:43:b7:81:64:39:ad:7a:11:c6:13:
                    51:1c:a3:b6:66:eb:b5:29:2d:4d:9a:0d:fa:53:48:
                    ab:71:37:51:7b:ec:a0:7d:00:c2:d5:4f:6e:49:a4:
                    dd:5f:79:f8:c7:d3:d9:32:3a:94:3c:b8:2c:3c:8e:
                    6a:71:e7:5d:08:0c:d3:87:f4:c3:59:ed:c9:8e:73:
                    b3:44:c6:ec:f3:54:5e:28:b9:f0:8c:fe:82:a6:83:
                    27:9c:b4:d7:57:1b:f0:1c:48:08:46:22:37:d9:75:
                    33:03:68:d3:64:33:e0:a7:96:46:b0:6e:60:50:6f:
                    4e:18:95:84:dd:cd:39:03:85:19:e6:43:d3:3c:ce:
                    74:ee:96:14:54:6b:45:f6:00:f3:b3:59:c8:c4:17:
                    2a:6f:d1:c4:f5:e7:f7:a3:4e:55:c4:a4:72:52:f8:
                    84:0e:8b:ee:a4:9c:e1:2f:3e:bb:00:a9:3e:18:da:
                    2a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:2B:07:D3:52:41:A7:8D:C8:EB:F7:E4:D9:B8:F2:BB:E0:36:02
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ae:4a:f9:4a:9b:d3:72:3d:4a:f0:dd:13:f7:7d:28:97:3a:
         18:68:84:8f:e1:86:7c:08:df:88:f3:74:ac:4f:6f:61:1d:46:
         3c:6c:d9:1a:7e:d1:3f:a9:20:57:4e:dc:d8:bd:46:84:a0:f2:
         51:ea:e9:22:a0:fa:b6:df:b9:40:aa:6f:90:9f:f0:70:40:d3:
         dd:6e:06:d4:bf:7e:18:28:e5:6d:78:01:9b:c0:3d:6e:98:7f:
         b7:c7:ca:2c:bc:20:d0:f4:7b:4d:17:b8:e1:65:fe:8e:ad:7f:
         d4:d6:66:bd:86:43:dd:bf:87:e1:0f:58:9f:2d:15:44:32:15:
         c0:3b:b0:37:8a:86:5c:6d:23:ac:bc:37:8f:3f:68:37:10:dc:
         5f:89:27:b1:91:45:fe:0c:fa:66:f6:00:42:ac:a9:cf:84:1f:
         de:19:0e:79:e7:dc:72:9b:53:6d:28:de:bc:f6:a1:c8:3d:23:
         04:21:fa:d3:6d:3e:7a:b5:1d:b8:4a:3f:14:a7:c9:3d:82:50:
         fd:d1:a5:c7:7a:b2:4c:31:7f:05:a8:4d:78:88:f9:13:da:ea:
         3e:ee:73:bb:28:8a:11:fc:a6:dd:91:14:14:46:71:b4:3e:8d:
         f4:9b:dc:9c:8d:75:f7:0f:f7:4f:85:74:1c:5d:2c:ee:8e:2e:
         4c:5c:55:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:45 2025 by rpki-client