
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File: lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier: mHk97yONi/VZmnL54iD/14AohPAEhmWPBE2zrcyEXL0=
Subject key identifier: B6:B6:AF:22:7D:0C:E0:5E:51:6F:36:FB:8E:88:35:93:55:5E:FE:1A
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer: /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial: 0327
Authority info access: rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number: 0327
Signing time: Wed 06 Aug 2025 03:47:21 +0000
Manifest this update: Wed 06 Aug 2025 03:47:20 +0000
Manifest next update: Fri 08 Aug 2025 03:47:20 +0000
Files and hashes: 1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: eFZYbFtJjLNg4ZUXrNoMh1rhrV/P3TWJB2aWyNNhiTE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 807 (0x327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Validity
Not Before: Aug 6 03:47:20 2025 GMT
Not After : Aug 8 03:47:20 2025 GMT
Subject: CN=6892d049-884f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:d1:4c:ed:de:a7:0f:ea:70:c1:8d:1a:d9:
41:26:0f:0a:d6:6b:41:c1:bf:b6:38:aa:4c:75:9c:
8f:51:82:27:c3:b5:d7:7d:bf:78:69:fd:e1:57:65:
ad:d1:82:24:c8:4b:5c:a9:58:b2:e3:ed:40:90:21:
cc:4c:fb:2e:43:43:ea:15:03:17:7f:72:90:08:f4:
86:81:91:1d:61:82:e5:54:09:32:51:dd:7b:de:c5:
85:f5:0f:b3:ac:8e:a1:c5:ff:81:32:9f:f0:0b:58:
4d:19:10:5f:9d:fa:d5:26:0f:49:7a:b4:9e:bc:99:
30:ef:95:1a:32:5e:36:30:9b:12:c2:72:c4:c2:27:
3d:c7:3a:c6:94:2f:8b:9c:d7:58:83:c2:e4:8e:b7:
15:da:ab:82:26:53:8c:7e:31:dc:0d:6e:ad:f1:b9:
ba:45:34:ec:c7:1d:1e:37:61:26:31:99:f2:a2:06:
6d:37:f4:54:48:f5:ea:51:a3:43:65:72:d5:fb:f6:
8f:f7:45:78:45:2a:12:87:29:57:b6:27:fb:49:6d:
a5:de:c6:c4:ae:e8:10:23:86:fa:5c:09:83:87:d6:
89:5d:12:66:6b:08:20:7c:3e:88:4d:42:c0:31:68:
38:9c:89:87:49:66:d6:39:c2:62:fc:d6:bf:8d:1f:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B6:AF:22:7D:0C:E0:5E:51:6F:36:FB:8E:88:35:93:55:5E:FE:1A
X509v3 Authority Key Identifier:
keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:de:ca:c4:ad:b1:de:f1:25:9b:ac:4b:96:10:99:63:8c:e9:
fa:54:6c:59:ca:0b:eb:1e:ef:da:dc:63:6b:36:a6:9c:e9:22:
04:15:8e:24:3a:10:fd:c5:0b:22:13:7a:de:04:14:a5:8e:a1:
c7:36:ca:6a:f9:23:52:16:5f:93:2b:d6:6a:20:96:49:89:61:
6d:12:a8:78:4d:9e:11:ea:48:72:75:af:7b:5f:ce:35:1a:f2:
a8:37:07:df:01:f5:df:87:17:78:63:9d:56:10:36:f3:ad:e7:
9c:02:db:f0:75:1a:ed:ff:5c:74:7a:13:c7:48:53:76:6e:3f:
47:7e:7e:f0:84:15:99:f4:12:6f:56:c3:d6:db:74:73:63:1f:
fb:bb:ef:b3:37:b0:17:61:19:df:3a:71:b2:ac:47:bb:2f:d3:
18:4b:d5:34:c0:c1:59:74:35:ed:79:26:e6:0f:3f:e8:16:6e:
45:29:c1:dc:53:95:cb:79:c2:10:fe:3f:ce:ef:00:c6:28:a6:
4c:f3:0e:db:a1:fb:1c:e2:0b:6c:03:97:e9:09:9a:b4:19:77:
cc:5c:6a:e2:6c:e6:02:1f:ab:85:38:d9:1a:70:6b:28:a3:58:
35:68:69:3f:11:ff:7e:0b:27:20:f2:60:e6:dc:b6:c8:b7:ee:
98:e5:07:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:33 2025 by rpki-client