Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          58rhb0OySJdZFwI6UPPTg9fX69F9SHRyNCSOOEHZdh8=
Subject key identifier:   0C:8B:21:9C:83:26:D4:AD:FF:52:C8:66:56:72:A9:10:12:86:C4:64
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0382
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0382
Signing time:             Tue 04 Nov 2025 04:50:07 +0000
Manifest this update:     Tue 04 Nov 2025 04:50:07 +0000
Manifest next update:     Thu 06 Nov 2025 04:50:07 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: qzxei9InWDYf42nSsnPLFbjWDinNeczKMbnKpfjss34=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Nov  4 04:50:07 2025 GMT
            Not After : Nov  6 04:50:07 2025 GMT
        Subject: CN=690985ff-45d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:ff:9b:7a:47:f0:9e:d5:e4:f6:f8:c4:08:
                    01:1f:a3:b5:61:f0:af:3f:cc:b9:31:92:f4:9b:a4:
                    2b:10:58:10:0e:3c:51:07:b5:74:f4:16:54:cd:4b:
                    e8:90:c9:67:c4:76:1b:83:07:9d:b4:ae:ae:62:0f:
                    14:c1:fc:f5:9b:0d:ec:1e:91:4f:f4:94:ba:ac:1d:
                    0e:5e:01:f0:19:6e:37:ae:92:7a:6a:d8:ef:c8:8b:
                    31:6e:6a:a1:45:ff:aa:70:0d:c0:89:5c:18:8a:72:
                    67:b1:9e:cf:16:0d:45:8a:44:7b:92:78:5e:f0:9c:
                    8d:1d:9a:f2:3a:87:18:b9:d5:05:ba:0b:8b:14:95:
                    e4:1e:14:a3:5f:97:3f:90:11:a3:c3:e4:ce:d2:b1:
                    9b:c5:43:51:cb:2a:a8:52:19:19:94:39:ea:f9:79:
                    2e:ff:22:bf:ec:42:3f:58:e2:3d:5e:74:5b:17:b2:
                    61:72:55:cb:39:4d:ec:d9:e3:d6:62:cc:0c:81:04:
                    6e:4b:24:94:31:b0:79:74:96:01:3f:fe:71:4c:4e:
                    38:9d:e6:9e:bf:5d:e7:5e:d9:a3:d2:79:0b:0a:e5:
                    e6:5f:d4:e9:94:d8:ba:ab:6c:d4:39:a0:b6:eb:ba:
                    b4:45:91:47:c0:db:aa:6c:c9:32:d5:25:63:ff:a5:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8B:21:9C:83:26:D4:AD:FF:52:C8:66:56:72:A9:10:12:86:C4:64
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:3d:7b:1b:fd:59:5b:11:e3:02:21:8a:ea:3e:a4:1f:17:
         12:63:e3:ad:89:6e:14:fc:09:29:b2:d9:02:73:d9:15:74:53:
         ae:35:d8:d2:43:a4:04:ca:3e:fe:16:b6:84:94:c1:67:08:e4:
         7e:5b:4f:e4:85:b8:61:b7:43:e1:00:82:e6:35:36:c3:1d:21:
         7b:60:44:fe:5a:c3:cc:95:71:25:ef:98:0a:c8:d0:04:f2:cd:
         8d:5e:80:17:12:2b:95:69:f3:17:f1:8e:a2:42:69:49:56:07:
         5a:df:3a:45:06:b4:3b:52:a3:d5:04:95:e9:bb:ad:f5:02:4a:
         75:8c:8c:22:d1:fb:2b:94:09:11:a7:36:2e:c8:ab:b0:fd:84:
         bc:c3:10:e6:4a:ca:9c:b3:26:be:a8:2e:52:7b:2b:a9:ac:12:
         b3:23:04:e3:67:e2:2f:34:9a:e1:0b:fc:a9:7e:28:cd:c4:50:
         3c:e1:23:84:ea:44:9b:10:b4:5e:80:08:c9:f9:ac:54:fc:ec:
         78:60:b5:2a:e0:b3:51:30:dc:84:b9:b7:7f:ba:3a:41:f8:99:
         85:c5:87:f3:bc:57:6c:4d:93:42:a9:0a:96:37:41:a6:84:8e:
         0c:d6:2c:0a:29:1d:51:22:c1:56:e7:29:58:61:69:bb:90:02:
         7e:d9:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:18:20 2025 by rpki-client