Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
File:                     PX4rsaW_d2MBah9006PUVz6rsIk.mft (raw, json)
Hash identifier:          QrJBjoVvC3DYbx/1ZD2EI8KDf+yHn1fIVooiVQWvQ2I=
Subject key identifier:   D2:34:37:E2:04:6F:D9:6C:26:D0:52:A8:D8:64:3A:6C:18:86:BB:58
Authority key identifier: 3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89
Certificate issuer:       /CN=F3678120AR/serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
Certificate serial:       11
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
Manifest number:          11
Signing time:             Thu 24 Sep 2026 05:53:10 +0000
Manifest this update:     Thu 24 Sep 2026 05:53:10 +0000
Manifest next update:     Sat 26 Sep 2026 05:53:10 +0000
Files and hashes:         1: PX4rsaW_d2MBah9006PUVz6rsIk.crl (hash: TM9vgCEith/t0v0geGXSf5XX3DmU5crOmYc7IZDC80s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                          rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AR, serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
        Validity
            Not Before: Sep 24 05:53:10 2026 GMT
            Not After : Sep 26 05:53:10 2026 GMT
        Subject: CN=6ab4bac6-051f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:ce:ed:8b:7a:16:0b:3b:d3:21:d0:e7:c1:
                    54:ad:ea:77:f8:0c:24:d2:4e:a0:59:97:f3:1e:c9:
                    cf:22:8e:0f:ea:84:65:4a:04:24:83:f1:39:67:75:
                    f7:e6:32:23:99:34:05:9c:e1:09:c8:3f:cb:d9:b1:
                    0c:fb:3c:10:b1:49:70:cb:db:a8:c8:0d:0f:d6:0d:
                    0a:ad:b5:c5:e3:1b:60:19:b5:f1:15:a0:69:19:95:
                    41:1e:91:97:cd:5c:75:24:53:2a:fa:39:6a:28:9c:
                    72:93:f2:01:bf:0a:9e:4c:e4:e0:a6:63:2d:68:2d:
                    37:cc:83:d0:35:9a:0f:28:db:0c:af:1e:eb:03:7a:
                    2c:8d:15:ac:30:25:5f:a6:0b:3f:e9:19:a3:b3:25:
                    96:67:16:af:a8:51:de:31:7a:1b:ce:60:f9:e3:43:
                    3f:32:35:63:b0:fe:20:bd:74:f7:74:75:b2:25:0c:
                    eb:44:c7:b2:e3:a5:12:ac:bb:49:d3:2c:9a:6d:39:
                    74:9b:38:32:ea:03:c2:88:8c:ac:32:b9:c3:78:9e:
                    ce:ad:1f:41:39:d8:c0:f2:99:87:0a:a1:fa:a2:9b:
                    bf:f9:6e:2d:70:35:6b:21:e1:15:41:11:ef:3d:9a:
                    d0:30:36:4e:45:37:a4:8b:21:5b:1a:74:15:fa:1a:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:34:37:E2:04:6F:D9:6C:26:D0:52:A8:D8:64:3A:6C:18:86:BB:58
            X509v3 Authority Key Identifier:
                keyid:3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:aa:e6:30:c0:df:7e:2e:13:d4:93:c0:f0:d3:63:ea:78:73:
         6a:22:79:38:69:a4:39:78:8a:56:bb:b9:a6:38:7e:f4:48:e3:
         b5:1a:75:fa:f0:09:5f:d1:d9:ff:00:fc:b2:73:be:16:fe:64:
         7b:90:aa:f7:91:fd:00:65:56:82:d3:41:81:e1:90:eb:00:17:
         86:c7:c4:46:69:84:2b:42:9b:12:27:0c:db:01:45:3f:b0:52:
         d3:17:d0:77:52:0b:b7:dc:c2:8f:e0:e7:df:85:23:5e:6f:2f:
         45:b8:e4:b9:6a:3d:7d:60:29:04:20:cc:c3:f2:39:98:31:bb:
         dc:62:61:3d:71:90:30:1f:74:2a:8a:92:73:f0:fa:af:12:2b:
         b2:02:83:59:99:8f:43:ce:98:93:86:40:b9:88:36:13:56:2c:
         95:a2:07:7a:55:dc:6d:7f:5a:48:2b:c8:de:2d:57:72:c2:7f:
         18:30:95:15:11:fd:45:d3:f0:aa:ab:a9:f0:9c:c0:46:1b:f2:
         c1:5d:7c:0b:7d:21:91:b5:a3:3b:b4:ea:d8:7d:e6:4d:be:4a:
         d8:c2:18:ca:6f:74:f1:1c:07:88:60:7c:e2:b9:ee:7f:c0:ea:
         52:8a:7d:4c:58:54:f7:6a:97:53:d1:be:dc:fc:2b:dc:98:ee:
         d4:e5:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----