Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          kwq3NgsT/E1Gy2bpnKlJIFfxXdr8IY3fo/5JOdKMK3M=
Subject key identifier:   A4:8E:13:35:33:13:31:47:7D:E1:B5:1C:3F:95:DB:DD:50:0F:85:56
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       048B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          048B
Signing time:             Fri 24 Jul 2026 03:28:27 +0000
Manifest this update:     Fri 24 Jul 2026 03:28:26 +0000
Manifest next update:     Sun 26 Jul 2026 03:28:26 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: P/TcDPYzV9oJ2AUg+q95ysNx2fEXxEUalEqbn7izED8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Jul 24 03:28:26 2026 GMT
            Not After : Jul 26 03:28:26 2026 GMT
        Subject: CN=6a62dbda-b1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:92:61:1f:13:17:52:a9:75:2f:a9:e6:2c:
                    41:41:21:fb:20:a9:45:1f:c7:73:73:97:95:d8:2f:
                    e7:d4:55:1d:4c:c6:fc:2a:a2:cb:1a:49:9f:70:cf:
                    a2:fa:0a:a7:98:4a:69:af:2f:e2:cc:da:c5:33:59:
                    af:33:2a:32:05:03:41:28:44:5e:fa:d1:88:71:a4:
                    60:e1:89:f5:13:bc:7f:d4:eb:0e:6a:7b:40:81:08:
                    80:a6:26:e4:f4:37:a9:be:8e:c7:26:a8:6b:c5:25:
                    96:dc:79:21:ff:92:0e:ee:0f:8a:46:da:a2:72:48:
                    25:36:0c:da:47:cd:c4:c7:64:92:18:d9:84:db:42:
                    00:8c:d5:97:42:a8:f7:04:e6:c4:6d:0a:a5:70:0b:
                    4e:3d:3a:e5:13:10:ef:f9:ad:6b:c0:71:7d:46:61:
                    9f:c5:c9:65:e3:e4:64:e6:4f:2b:cc:dd:fe:63:fd:
                    50:53:10:6b:51:42:4a:8b:20:a5:b4:1c:3d:02:6b:
                    50:f6:da:46:03:84:40:0b:71:e1:17:8f:04:07:f1:
                    f9:99:46:39:d7:15:b2:62:8e:28:63:b0:6c:de:4a:
                    e3:ab:76:54:fd:98:3d:4b:fc:72:19:74:5b:79:ef:
                    bf:57:94:26:6b:71:80:02:e0:e7:e8:ce:1d:64:e4:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8E:13:35:33:13:31:47:7D:E1:B5:1C:3F:95:DB:DD:50:0F:85:56
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:bd:6a:0a:4c:ee:32:42:a8:b6:24:df:14:0b:ec:2e:73:
         79:d3:15:6d:27:85:03:f2:56:26:ec:73:2d:60:68:71:11:87:
         ca:ca:2e:97:47:3c:e9:7e:f1:20:65:53:6d:59:3b:b6:d7:e2:
         14:d8:30:75:71:c1:61:d5:79:84:97:26:09:17:1a:4d:dd:d9:
         18:c2:ad:d5:8d:a9:c0:23:9f:8a:a2:2c:07:52:b0:49:b2:c8:
         60:70:f5:a7:9f:89:2a:99:e1:f4:d6:e3:d6:4c:88:6e:f4:e1:
         7b:8b:6e:bd:74:0a:59:16:fb:7d:72:02:dc:d6:72:79:8a:84:
         71:fc:65:b3:79:90:d1:ab:16:37:5e:1a:92:2d:5d:a3:29:2f:
         a4:a2:cd:df:79:3a:0f:36:0c:c0:85:30:1f:f4:e7:33:5d:1a:
         cc:93:b5:b3:6e:8b:f5:41:50:c0:94:fa:58:08:39:1a:76:3e:
         46:e4:71:ea:1d:fe:79:49:5a:4f:fb:52:99:17:95:20:7f:e7:
         f4:a6:e0:d8:3d:bd:93:4a:33:b0:1b:94:67:2a:dc:ba:cd:6f:
         0b:95:4e:4c:9d:11:16:ed:b9:b3:73:08:ea:c5:85:77:14:99:
         fd:1b:3f:98:c1:87:24:1c:03:b3:e9:77:76:16:76:f7:93:4c:
         22:b0:6a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:41 2026 by rpki-client