Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
File:                     PX4rsaW_d2MBah9006PUVz6rsIk.mft (raw, json)
Hash identifier:          5ciOYF04YTyeC365Z4beZA92kTk95iDkFsdNaf+ljwg=
Subject key identifier:   C5:82:FE:13:71:E9:76:0E:EC:BD:79:7C:7C:39:CC:49:63:F6:4B:85
Authority key identifier: 3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89
Certificate issuer:       /CN=F3678120AR/serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
Manifest number:          37
Signing time:             Sun 01 Nov 2026 05:53:00 +0000
Manifest this update:     Sun 01 Nov 2026 05:52:59 +0000
Manifest next update:     Tue 03 Nov 2026 05:52:59 +0000
Files and hashes:         1: PX4rsaW_d2MBah9006PUVz6rsIk.crl (hash: fRikdLsVDN6fqUgF89LI04LoRtIDzKeDuqG0tXVtcVQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                          rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AR, serialNumber=3D7E2BB1A5BF7763016A1F74D3A3D4573EABB089
        Validity
            Not Before: Nov  1 05:52:59 2026 GMT
            Not After : Nov  3 05:52:59 2026 GMT
        Subject: CN=6ae6d3bc-eec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:17:bc:f4:09:e5:db:1f:fc:57:4e:2e:d6:
                    65:44:79:a2:4a:0d:6c:66:ba:ca:63:cf:c3:ca:3b:
                    25:d9:63:53:ab:d0:5c:27:64:65:70:79:b2:68:d7:
                    0e:36:cf:8f:f5:0f:b2:37:0f:05:02:eb:18:17:6d:
                    2e:21:7a:f5:98:cc:a8:15:ec:16:68:fa:2e:96:7a:
                    27:11:5e:2f:ac:20:8d:de:7b:60:00:3d:14:40:88:
                    18:96:8a:10:b8:68:08:1a:80:7b:da:7d:08:1b:ff:
                    47:48:54:dc:30:97:54:fd:57:86:e0:bf:f2:55:29:
                    3d:0a:55:77:23:38:cf:e2:af:b9:4d:37:6f:b8:16:
                    8d:92:45:5b:b5:05:b9:c2:df:25:92:6c:56:54:0f:
                    8d:8d:49:f1:d4:a6:05:d0:a7:47:b8:4f:28:33:cb:
                    d7:ab:db:0a:65:55:e2:ce:9f:61:4c:40:17:87:85:
                    78:03:2b:4b:7c:18:2a:c9:8a:7c:21:aa:a7:2e:bf:
                    e1:a7:d6:01:c4:93:4e:1e:d6:f7:64:a9:f5:2d:52:
                    35:d1:eb:52:38:44:f0:62:4d:32:ff:44:f2:32:65:
                    f8:f6:84:d7:22:2e:de:00:e1:e4:6f:73:7e:63:fc:
                    4e:73:05:a5:a9:99:a7:db:a8:7c:c3:69:c8:13:53:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:82:FE:13:71:E9:76:0E:EC:BD:79:7C:7C:39:CC:49:63:F6:4B:85
            X509v3 Authority Key Identifier:
                keyid:3D:7E:2B:B1:A5:BF:77:63:01:6A:1F:74:D3:A3:D4:57:3E:AB:B0:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PX4rsaW_d2MBah9006PUVz6rsIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/0D553FFEABE311F1A9FCCEACCE1D38B0/PX4rsaW_d2MBah9006PUVz6rsIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6f:dd:91:fb:73:31:a3:f3:d5:b9:07:0a:b0:e7:23:46:81:
         b6:85:78:44:60:a5:9b:94:6d:a7:66:59:2e:b1:5b:07:b9:1e:
         33:a5:c4:e2:a9:f0:4b:56:71:5a:19:b2:4c:5d:d1:c0:ec:40:
         a4:49:5f:fd:0a:b5:41:38:35:d7:ca:b7:b2:bb:68:95:02:43:
         38:b7:4b:90:8c:b6:e3:4f:51:81:3d:b5:b6:b3:35:88:42:9b:
         85:54:1c:48:d1:b1:d2:b5:4e:12:13:8d:d1:fa:70:3f:d1:0c:
         92:54:91:bb:cc:63:3a:29:79:32:7a:4b:09:a4:c4:18:f9:07:
         91:d2:cf:a1:59:0b:eb:a0:75:cd:d3:31:99:4a:d6:8a:22:0b:
         8a:1a:1e:31:57:ff:79:28:e5:21:d0:b2:d0:26:31:90:97:a7:
         fa:00:13:20:03:cb:55:39:dc:65:a5:cf:e0:4c:7f:ad:17:70:
         84:ff:f2:49:bd:17:a3:7e:79:f7:18:f3:85:b7:7f:48:67:15:
         1e:40:b1:fa:fa:de:cf:4e:81:f1:70:a3:04:f0:07:61:14:62:
         f0:41:6c:9f:fa:e5:64:49:25:ca:68:90:0b:90:d6:83:0c:15:
         a1:d8:73:19:aa:6f:9c:e4:34:79:eb:32:d9:06:d5:7f:a7:9f:
         b9:cb:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----