Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          Kb5d8fNJFOctoWpArnt1nBo011BBwjd/C/RUVzmNTTw=
Subject key identifier:   82:67:98:38:08:28:B7:AB:C0:A8:A0:0C:8C:1B:57:19:02:F3:B6:85
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       0498
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          0498
Signing time:             Thu 06 Aug 2026 03:29:49 +0000
Manifest this update:     Thu 06 Aug 2026 03:29:49 +0000
Manifest next update:     Sat 08 Aug 2026 03:29:49 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: NfTfRkkID0kcRuj5EFDMI5Z+H8O1RRIFWJqS2yh1WYo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1176 (0x498)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Aug  6 03:29:49 2026 GMT
            Not After : Aug  8 03:29:49 2026 GMT
        Subject: CN=6a73ffad-f8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:50:05:6c:5c:a8:2d:e5:8e:5e:4d:7b:7c:
                    d9:c8:78:fe:89:13:eb:d7:39:3c:24:28:ab:6d:2e:
                    ed:56:8d:5f:16:3d:9e:c8:65:f8:38:86:c9:a0:9c:
                    0b:9e:f2:19:d6:e0:26:15:e8:d4:2f:b3:32:6f:9d:
                    42:0b:57:9b:61:71:1c:ed:6f:02:5a:f5:c2:ae:5c:
                    b9:92:fd:31:ca:3e:10:1d:b0:a4:c2:ac:55:dd:85:
                    93:74:b0:40:af:4b:94:72:43:35:02:07:01:b1:9b:
                    20:e7:a8:58:41:aa:87:fa:1f:9c:3d:27:6f:88:c9:
                    f6:04:b6:38:a0:02:11:82:f5:47:b7:58:b4:fa:c0:
                    6d:20:b9:4e:48:c6:7e:3a:6d:52:13:b0:b3:6d:68:
                    53:f5:c9:a1:4c:46:d3:6d:d4:08:dd:f1:f4:6e:8c:
                    78:c8:0a:fc:d7:a0:3f:f5:13:1a:f0:3b:a4:55:2c:
                    45:f5:17:f9:06:a4:1f:0c:5e:38:cd:e8:da:5a:c5:
                    32:b4:d8:10:10:de:c7:44:54:8e:20:c9:19:4b:e6:
                    1c:25:ba:91:c8:bd:0e:c5:2b:73:d1:b9:a3:9f:ae:
                    bf:f8:51:71:55:af:ed:67:6f:10:f5:66:ea:48:3c:
                    7e:5f:c0:bb:30:9f:95:26:62:a4:df:3d:f9:eb:f8:
                    3f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:67:98:38:08:28:B7:AB:C0:A8:A0:0C:8C:1B:57:19:02:F3:B6:85
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:3d:12:62:e2:65:e3:3e:79:93:41:23:eb:24:ba:1d:ac:
         b2:b3:0a:da:dd:ec:ac:73:32:73:40:3e:e0:6b:8d:4e:d1:97:
         4e:f3:0b:ea:9e:dd:75:eb:3c:45:7c:5f:a7:2f:8d:28:7c:dd:
         b3:e8:bb:1c:1e:ae:1f:91:f1:e4:85:0a:f4:81:7a:48:00:5f:
         fc:9e:4a:ff:fc:60:8d:42:59:21:e4:a2:d8:9f:6e:c7:47:e8:
         dd:b1:41:83:20:90:48:47:fc:83:11:f1:f2:2d:ec:f4:57:98:
         be:32:a8:55:31:95:ee:3e:5b:45:56:18:32:fd:4e:d3:59:6c:
         3f:98:94:4c:93:b6:41:8e:68:70:ee:84:94:bd:dc:63:90:8b:
         d2:7a:cd:07:2a:ba:b7:9f:89:f4:0e:e6:2a:fb:6b:32:68:66:
         f2:26:39:e5:06:44:65:4c:b6:ec:e5:ec:f6:bf:31:74:5c:92:
         a9:e2:07:17:20:b8:ac:9d:43:b6:c9:7a:24:a4:aa:8d:bd:b0:
         0b:72:e5:f3:df:3c:d9:9b:44:5c:96:f4:ab:a6:b2:3a:1d:f7:
         77:ec:06:ec:51:5f:0a:cf:63:9e:27:fb:ba:52:7c:aa:7a:3e:
         49:3b:14:f4:6e:0a:36:75:22:5a:1e:00:fa:37:6a:44:43:72:
         ae:e3:72:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:05 2026 by rpki-client