Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          NRgLUdNZGLdcl6E/+MXOlPOZlQd4Kgwjf3JqX9YzZxs=
Subject key identifier:   22:38:6F:AA:FF:BB:75:E7:7B:AD:91:F8:F8:FB:23:43:47:8D:0A:BD
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       04C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          04C9
Signing time:             Thu 24 Sep 2026 03:29:57 +0000
Manifest this update:     Thu 24 Sep 2026 03:29:57 +0000
Manifest next update:     Sat 26 Sep 2026 03:29:57 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: rKU67l1CJ2su4hCEQJU52WRmU1/zF+n1Q9nj1PoedjI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Sep 24 03:29:57 2026 GMT
            Not After : Sep 26 03:29:57 2026 GMT
        Subject: CN=6ab49935-6635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:10:48:26:d4:4c:5e:85:a8:6f:fe:12:33:
                    98:0b:b7:5b:7f:0f:52:e9:dc:74:38:02:51:56:b5:
                    a7:e1:0a:15:a2:8a:d6:97:8f:4a:17:fc:6c:a5:66:
                    01:67:7b:62:7e:8d:fd:f2:d9:05:af:23:88:18:f8:
                    2c:32:e1:c3:9c:f9:33:0c:f6:ee:f4:d0:85:b1:ad:
                    88:75:48:d8:3b:ad:96:f4:69:27:62:c7:76:ec:f0:
                    60:b3:23:28:b0:e3:de:76:0d:28:3e:45:48:f2:5e:
                    88:f4:e9:9c:29:9d:d0:48:ba:0a:28:a4:1f:af:8d:
                    41:a6:41:9f:ad:80:99:35:ad:e9:19:e9:02:54:7d:
                    62:e6:54:16:96:7b:84:e8:b9:5a:9d:1d:f0:ff:c8:
                    3b:40:79:57:8f:9c:e8:7d:55:fa:41:3f:2a:10:0a:
                    83:b7:b9:dd:6a:ea:4d:c7:25:69:7d:76:91:8a:8e:
                    3d:65:3f:00:0a:3b:be:dc:1e:8b:7a:43:4e:45:f4:
                    73:14:1e:93:53:b4:77:ea:4c:9f:ee:54:3d:14:b5:
                    55:8d:8a:40:0b:53:e9:24:b9:7e:ba:ef:61:03:06:
                    7b:d6:a0:87:19:2b:9d:4c:c3:30:49:4b:ac:b3:89:
                    f7:37:57:d5:40:06:fb:06:a8:23:80:79:aa:8f:87:
                    49:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:38:6F:AA:FF:BB:75:E7:7B:AD:91:F8:F8:FB:23:43:47:8D:0A:BD
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:55:14:c5:47:97:00:8f:3b:ca:7f:cc:34:72:e0:df:66:93:
         00:cd:e9:95:59:a3:dd:7f:07:c6:ea:69:c9:6d:06:4d:a9:f3:
         03:7c:fb:00:bd:77:b5:d6:d9:3e:da:a5:6f:9b:88:d2:27:c1:
         e3:9f:4f:27:d2:82:27:15:70:e7:f1:91:50:3c:d4:e6:8c:8d:
         7c:b0:6d:7c:92:38:34:14:fc:2d:5f:99:b0:f9:1f:d3:9e:51:
         1e:a3:67:8e:18:5b:ac:28:94:33:fb:e9:47:95:83:13:15:9c:
         c9:da:43:b2:67:84:30:cb:fa:12:b4:73:0e:a6:f4:79:62:cf:
         db:b6:e4:71:a2:2e:68:59:7a:c0:1d:f5:78:c0:e5:34:1a:a1:
         94:9b:6d:b3:db:55:66:6a:6a:d0:02:b2:73:c3:df:74:01:82:
         69:2a:af:92:b5:20:e9:fb:39:fb:ca:15:ab:75:57:d7:18:79:
         b4:73:5e:3b:cb:4e:05:0c:89:23:51:33:1a:94:00:2c:31:57:
         3d:45:c5:c3:81:c6:82:36:c7:a0:90:86:d7:9f:8a:6a:7d:ca:
         d8:99:c7:21:ca:b1:ad:3e:07:65:45:c8:69:10:ad:cd:50:2c:
         19:46:a5:75:b9:ae:35:f2:c3:76:19:4a:89:58:de:bb:04:28:
         02:ec:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----