Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          mcv33H2ozFW5x8cVm7uP0PZBPUCLIKY080OSXltzpN0=
Subject key identifier:   6C:18:18:4B:07:14:50:F7:B4:18:0F:FF:81:BC:B2:09:4A:EE:08:AB
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       04C8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          04C8
Signing time:             Tue 22 Sep 2026 03:29:13 +0000
Manifest this update:     Tue 22 Sep 2026 03:29:12 +0000
Manifest next update:     Thu 24 Sep 2026 03:29:12 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: 89fsZukHckdDa8UoSj0FlKP1PewdxcA8aKTp8FxSWFo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Sep 22 03:29:12 2026 GMT
            Not After : Sep 24 03:29:12 2026 GMT
        Subject: CN=6ab1f609-8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:23:e4:d9:c7:52:09:40:13:58:00:e3:28:93:
                    4c:93:94:e3:76:5b:11:d2:6b:25:b4:a9:03:9f:21:
                    15:e2:ed:18:99:16:d4:67:dc:6c:1a:fd:f8:10:1d:
                    15:c8:8b:17:f8:21:22:5d:69:8b:0a:b2:6d:39:f1:
                    79:f2:3a:59:4d:29:91:9a:4c:7b:a0:c6:e8:30:c5:
                    8e:b0:74:bf:f0:48:d4:45:c1:07:db:c7:29:f9:11:
                    4c:be:69:e9:16:ac:ee:63:fe:01:3a:09:4e:be:25:
                    65:5d:46:f5:1c:26:d2:00:0d:e1:25:78:20:3b:64:
                    52:2e:dd:a7:b9:f8:70:d9:f2:92:85:88:48:1c:23:
                    92:ff:94:f8:1d:f3:ac:20:f5:79:45:7f:9d:ce:a0:
                    0b:19:09:5f:e1:85:9a:3d:b5:08:6f:16:8b:c2:71:
                    a4:1b:4c:65:ba:8d:18:65:d1:6b:b8:21:8f:af:f8:
                    ab:11:6a:d9:ea:c4:5a:8b:16:54:24:67:fb:d5:67:
                    4f:3b:dd:1e:3a:1f:d6:36:9e:f4:73:2a:a6:c2:92:
                    bc:05:d5:b9:6f:4f:e2:1e:27:18:d1:4a:7e:9d:0b:
                    38:f2:a7:5c:61:d2:67:06:d3:a0:92:4a:c6:28:53:
                    8f:dd:b1:4d:18:d1:d2:be:fd:f5:6d:0a:a5:21:73:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:18:18:4B:07:14:50:F7:B4:18:0F:FF:81:BC:B2:09:4A:EE:08:AB
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f2:ad:7e:03:b7:20:34:3c:66:93:b6:ff:31:41:f8:4c:28:
         d6:f2:e8:7a:19:df:f2:fa:47:3f:17:ea:33:b8:41:bf:37:99:
         6d:8a:8f:e4:c7:be:0c:fd:86:67:d5:59:16:2a:5c:25:17:5f:
         c2:d8:08:ff:e8:cf:67:b0:bc:0c:5e:4f:b2:17:b6:77:33:26:
         bc:00:61:bb:ec:f3:31:f6:fc:09:cc:ea:40:4d:0a:2c:8c:82:
         f2:ac:a0:20:19:21:c7:08:44:6c:b7:5a:dd:14:1e:62:99:cc:
         8b:1d:2b:eb:50:a0:07:14:29:1c:43:b6:18:f4:d9:be:71:4e:
         6f:79:b3:99:eb:47:51:12:1c:83:07:0b:43:db:95:75:fc:db:
         92:3b:bb:e3:0f:06:78:c7:5d:2a:52:30:4c:fd:90:0e:f8:36:
         a6:ea:62:ea:85:4b:95:ae:57:cc:a7:6c:8c:26:06:49:de:ef:
         65:89:10:31:f8:af:89:92:64:67:6d:98:1e:d1:b8:f8:70:eb:
         9d:18:2b:7d:95:b6:86:d1:20:ad:cc:c4:45:64:d9:bd:fa:eb:
         44:eb:ff:9e:da:2c:e5:4b:16:08:b1:da:c1:96:e1:4b:7b:36:
         c4:68:11:7e:30:2b:cb:ac:00:ef:a4:ff:b2:3a:e0:a3:5b:d9:
         5c:ed:3f:96
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjZDRkZBUjExMC8GA1UEBRMoOTcyNkJCNkY0OUUwQzdGMTU1MzdFMkY2RjlGMjY2
MDk1RDRFQTQ5MTAeFw0yNjA5MjIwMzI5MTJaFw0yNjA5MjQwMzI5MTJaMBgxFjAU
BgNVBAMTDTZhYjFmNjA5LTg3MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJI+TZx1IJQBNYAOMok0yTlON2WxHSayW0qQOfIRXi7RiZFtRn3Gwa/fgQ
HRXIixf4ISJdaYsKsm058XnyOllNKZGaTHugxugwxY6wdL/wSNRFwQfbxyn5EUy+
aekWrO5j/gE6CU6+JWVdRvUcJtIADeEleCA7ZFIu3ae5+HDZ8pKFiEgcI5L/lPgd
86wg9XlFf53OoAsZCV/hhZo9tQhvFovCcaQbTGW6jRhl0Wu4IY+v+KsRatnqxFqL
FlQkZ/vVZ0873R46H9Y2nvRzKqbCkrwF1blvT+IeJxjRSn6dCzjyp1xh0mcG06CS
SsYoU4/dsU0Y0dK+/fVtCqUhcxGnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUbBgY
SwcUUPe0GA//gbyyCUruCKswHwYDVR0jBBgwFoAUlya7b0ngx/FVN+L2+fJmCV1O
pJEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2Q0ZGLzFFRUUyNDY2MEFBMDExRUVCRjJBRjEzQTRBRDlFNkZDL2x5YTdi
MG5neF9GVk4tTDItZkptQ1YxT3BKRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2x5YTdiMG5neF9GVk4tTDItZkptQ1YxT3BKRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjZDRkYvMUVFRTI0NjYwQUEwMTFFRUJGMkFGMTNBNEFEOUU2
RkMvbHlhN2Iwbmd4X0ZWTi1MMi1mSm1DVjFPcEpFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJ8q1+A7cgNDxmk7b/MUH4TCjW8uh6Gd/y
+kc/F+ozuEG/N5ltio/kx74M/YZn1VkWKlwlF1/C2Aj/6M9nsLwMXk+yF7Z3Mya8
AGG77PMx9vwJzOpATQosjILyrKAgGSHHCERst1rdFB5imcyLHSvrUKAHFCkcQ7YY
9Nm+cU5vebOZ60dREhyDBwtD25V1/NuSO7vjDwZ4x10qUjBM/ZAO+Dam6mLqhUuV
rlfMp2yMJgZJ3u9liRAx+K+JkmRnbZge0bj4cOudGCt9lbaG0SCtzMRFZNm9+utE
6/+e2izlSxYIsdrBluFLezbEaBF+MCvLrADvpP+yOuCjW9lc7T+W
-----END CERTIFICATE-----