Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          RzCVsHZQRf3BpMZY6Mgk4j1hxfB7KU5CXHQiJOOpLgo=
Subject key identifier:   70:6B:3F:A3:F1:64:18:C7:1E:0E:B9:07:C8:AA:FF:09:ED:FD:1D:9A
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0290
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          028D
Signing time:             Fri 12 Jun 2026 04:31:04 +0000
Manifest this update:     Fri 12 Jun 2026 04:31:03 +0000
Manifest next update:     Sun 14 Jun 2026 04:31:03 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: W3T5g5CSWRkdHYra37TDC3GPOuGawMnLd74qb2zzuGE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Jun 2026 04:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Jun 12 04:31:03 2026 GMT
            Not After : Jun 14 04:31:03 2026 GMT
        Subject: CN=6a2b8b88-2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:e1:36:d5:05:33:82:e3:00:1f:46:df:0a:
                    1e:c9:e3:6d:2b:cc:e3:d7:01:4b:23:23:dc:53:63:
                    d3:7e:b0:70:50:f7:86:eb:42:db:e6:4f:70:24:b8:
                    1e:ce:a8:20:eb:32:4a:29:ef:64:20:0c:5b:5b:c8:
                    b8:29:38:39:85:1f:e0:be:4a:35:72:7c:50:0a:5c:
                    de:b7:32:fc:b2:75:00:e8:b1:3a:e0:76:b6:ad:4c:
                    42:88:5c:04:39:ae:b6:d6:e5:bb:f8:ce:d9:58:e1:
                    1f:8a:a6:9b:90:34:99:29:27:5c:ea:70:9c:8c:5c:
                    71:fa:e7:9f:1f:50:8b:e5:c4:fd:05:12:9a:9b:bf:
                    e1:50:ec:9c:ad:f9:53:08:bf:6c:1b:da:8c:37:8e:
                    e7:c6:15:f0:c5:90:c4:30:f0:83:f1:ae:5b:f3:08:
                    d7:92:52:86:9b:ef:4f:b0:bd:45:e6:13:7a:d2:cc:
                    9f:cb:5e:30:6c:26:c8:8e:a2:c4:81:e4:e7:2d:34:
                    e1:22:d8:29:db:2a:25:8c:1c:4e:a2:0a:91:d2:48:
                    55:d6:c0:57:81:c8:3e:3b:74:7b:9e:23:a3:56:29:
                    18:00:40:af:eb:2e:52:dd:f8:14:79:54:86:b1:58:
                    75:47:5b:76:7f:ff:ae:8c:df:78:8b:52:3c:04:cc:
                    4e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6B:3F:A3:F1:64:18:C7:1E:0E:B9:07:C8:AA:FF:09:ED:FD:1D:9A
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:50:8e:0c:0c:0c:51:6d:6d:dd:05:46:54:bb:2d:4d:86:11:
         43:98:5f:83:6f:14:6a:c1:aa:d9:50:1f:f5:f1:46:50:85:a6:
         62:27:9f:7a:32:4c:7e:4b:cd:26:98:1f:4c:2a:3a:46:9b:61:
         30:3b:c5:d1:ff:1d:9f:c9:f4:37:da:13:77:be:81:20:c7:5f:
         56:dc:6b:39:35:3a:81:52:22:06:b3:28:fe:5c:9a:eb:13:ce:
         e4:7f:15:24:8b:cf:e6:62:7c:7e:95:ec:75:74:da:25:c1:52:
         39:41:65:fc:11:c1:da:c6:a7:1d:ac:de:4f:da:f8:3e:7d:d1:
         14:49:fb:2f:90:7a:53:e0:d2:b4:e3:67:63:92:a9:2e:39:94:
         2b:ef:e1:db:f8:71:e3:fa:8b:da:6a:bd:f3:b5:e9:90:57:60:
         17:da:0d:77:08:49:44:1b:8e:95:22:89:24:31:27:0d:aa:ac:
         80:f4:4c:0f:c6:04:4e:7a:b1:93:af:b2:cc:6e:b1:82:73:4c:
         d1:c5:4f:43:c7:49:88:cb:8e:bf:5a:bb:8d:bf:8d:e0:ed:8a:
         cc:68:25:8a:c1:bd:4d:ee:fd:22:fe:f1:06:de:c3:38:95:f2:
         96:b0:f6:df:76:51:62:b5:9a:a8:5f:2d:8f:99:c7:5a:6e:77:
         04:42:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:31:54 2026 by rpki-client