Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          aLh3TCXeA+12UwsSDTP50+0BkcCyN3zaQ684NXnuYSY=
Subject key identifier:   D8:6E:F8:90:FF:D4:FF:AB:C2:C3:94:C1:BF:C4:3D:54:27:D0:E2:52
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       01B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          01AE
Signing time:             Tue 04 Nov 2025 05:54:20 +0000
Manifest this update:     Tue 04 Nov 2025 05:54:19 +0000
Manifest next update:     Thu 06 Nov 2025 05:54:19 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: 7KN4K8AysPI965vBctxkC8DxvcI8UNYXvdHlH9o+IPU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:54:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Nov  4 05:54:19 2025 GMT
            Not After : Nov  6 05:54:19 2025 GMT
        Subject: CN=6909950c-f0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9f:39:a7:d9:10:93:b4:a0:b1:6a:2d:37:61:
                    f5:02:ca:2c:0c:73:df:88:f6:70:bc:c8:d9:32:77:
                    28:08:02:f8:5e:ca:ac:7f:c8:bf:21:55:50:4e:d0:
                    31:ea:99:1b:0b:8e:a1:8c:0e:d1:4a:eb:48:98:f7:
                    b9:74:ad:d4:99:4a:1f:bd:a9:c6:6c:64:50:33:27:
                    f3:57:f9:43:f0:24:fa:c9:39:ea:a2:3a:91:69:16:
                    f4:1e:01:e1:79:d3:c2:ba:e4:9a:71:c9:b5:c7:12:
                    93:92:71:37:91:f4:de:fa:d2:ef:1e:53:54:b1:b5:
                    d1:c9:25:9c:08:c2:e9:96:ad:60:7c:75:c8:11:7f:
                    d1:4d:ab:92:3a:a9:bd:5b:b1:05:28:74:44:d1:80:
                    31:da:95:5b:44:77:45:12:12:b4:f3:b5:16:18:52:
                    78:18:41:32:63:ce:14:b8:41:6c:d1:2c:2d:a9:1b:
                    74:f4:22:0c:80:d1:c5:6b:22:27:d3:85:a1:75:ed:
                    f3:22:7e:07:ab:9b:52:20:be:ef:96:eb:b0:9b:18:
                    d4:59:ed:09:59:b9:3c:3d:1a:f8:f3:b8:f4:d9:e2:
                    b6:99:b8:a7:ca:79:47:3d:6b:8c:cd:56:9d:ad:b2:
                    c1:aa:6b:8f:f8:4d:d7:41:0a:4d:07:d0:c9:1c:39:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6E:F8:90:FF:D4:FF:AB:C2:C3:94:C1:BF:C4:3D:54:27:D0:E2:52
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:f0:51:25:87:1e:fe:b2:28:95:8c:65:e6:71:0a:bb:a3:
         23:eb:c0:2b:e0:ca:17:48:a7:e8:9e:87:bc:30:e1:94:a0:d2:
         b8:24:64:19:3d:96:5d:94:4f:02:ae:03:19:d5:ef:34:98:09:
         34:c4:3e:df:4e:56:a3:99:a6:0a:a7:50:4b:ff:d9:c6:98:2a:
         4a:0d:e7:ca:51:7c:15:1e:fe:f4:e6:12:22:ff:d7:7c:c7:68:
         91:99:b0:1a:88:b4:b5:84:ca:3f:7f:34:3a:3f:23:a6:fd:ee:
         65:d2:34:a5:43:a5:38:a5:6a:35:81:d6:e4:35:52:09:09:27:
         fd:e6:41:ee:17:97:af:14:55:02:a8:1d:70:ed:d3:db:6b:86:
         6a:48:b8:f3:88:57:4c:66:ce:0d:cd:fe:27:dc:e1:90:c8:ad:
         9b:69:55:27:53:9a:94:67:70:d0:2d:71:d8:77:5b:6b:6a:76:
         dd:43:4c:74:59:86:9c:44:d5:9e:02:19:65:ce:ab:74:2c:6b:
         48:dc:5c:e7:0f:9c:8f:64:2d:77:44:5e:1c:68:64:ad:89:67:
         f6:8f:8e:5b:fd:7b:09:eb:5b:49:da:1e:26:80:01:05:57:fd:
         6c:99:47:06:b5:d9:82:26:ee:2c:e9:74:5b:24:30:fa:04:32:
         f0:6b:64:fd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZDQTNBRjExMC8GA1UEBRMoQTcyMkQ4NDhCRUU1MUE0RDE3MkI5Q0FGQUZBNDkx
OTJCOTFEOEM2MjAeFw0yNTExMDQwNTU0MTlaFw0yNTExMDYwNTU0MTlaMBgxFjAU
BgNVBAMTDTY5MDk5NTBjLWYwZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvnzmn2RCTtKCxai03YfUCyiwMc9+I9nC8yNkydygIAvheyqx/yL8hVVBO
0DHqmRsLjqGMDtFK60iY97l0rdSZSh+9qcZsZFAzJ/NX+UPwJPrJOeqiOpFpFvQe
AeF508K65JpxybXHEpOScTeR9N760u8eU1SxtdHJJZwIwumWrWB8dcgRf9FNq5I6
qb1bsQUodETRgDHalVtEd0USErTztRYYUngYQTJjzhS4QWzRLC2pG3T0IgyA0cVr
IifThaF17fMifgerm1Igvu+W67CbGNRZ7QlZuTw9GvjzuPTZ4raZuKfKeUc9a4zN
Vp2tssGqa4/4TddBCk0H0MkcOVxZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2G74
kP/U/6vCw5TBv8Q9VCfQ4lIwHwYDVR0jBBgwFoAUpyLYSL7lGk0XK5yvr6SRkrkd
jGIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2Q0EzLzQ3M0RBRTdFNzU4RDExRUZBQTJGRDE3Qjc2MkU5NTFBL3B5TFlT
TDdsR2swWEs1eXZyNlNSa3JrZGpHSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3B5TFlTTDdsR2swWEs1eXZyNlNSa3JrZGpHSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZDQTMvNDczREFFN0U3NThEMTFFRkFBMkZEMTdCNzYy
RTk1MUEvcHlMWVNMN2xHazBYSzV5dnI2U1JrcmtkakdJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLQfBRJYce/rIolYxl5nEKu6Mj68Ar
4MoXSKfonoe8MOGUoNK4JGQZPZZdlE8CrgMZ1e80mAk0xD7fTlajmaYKp1BL/9nG
mCpKDefKUXwVHv705hIi/9d8x2iRmbAaiLS1hMo/fzQ6PyOm/e5l0jSlQ6U4pWo1
gdbkNVIJCSf95kHuF5evFFUCqB1w7dPba4ZqSLjziFdMZs4Nzf4n3OGQyK2baVUn
U5qUZ3DQLXHYd1tranbdQ0x0WYacRNWeAhllzqt0LGtI3FznD5yPZC13RF4caGSt
iWf2j45b/XsJ61tJ2h4mgAEFV/1smUcGtdmCJu4s6XRbJDD6BDLwa2T9
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:32:28 2025 by rpki-client