Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          PXKRC2VQC6rMmckLebBq0kc9kWHW97Hs7Rls4TWG9Qs=
Subject key identifier:   C5:A3:42:06:98:B7:1B:6C:AD:5B:7C:EA:0D:6F:49:4F:20:B0:86:67
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       059F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          059D
Signing time:             Sat 14 Nov 2026 03:09:07 +0000
Manifest this update:     Sat 14 Nov 2026 03:09:06 +0000
Manifest next update:     Mon 16 Nov 2026 03:09:06 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: uIPfO6rv74fia6704DVk0fJ8sc5t+x8Zq6GuxhXE4zY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Nov 14 03:09:06 2026 GMT
            Not After : Nov 16 03:09:06 2026 GMT
        Subject: CN=6af7d0d3-cc92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:80:87:99:41:40:f3:9d:72:d2:f0:0c:24:
                    07:ee:ba:26:20:74:6e:21:16:9d:ca:d2:aa:11:fe:
                    8c:8b:af:30:30:02:31:ab:60:ee:d7:ac:2c:fc:3d:
                    0c:f2:f3:6e:c7:54:44:52:f4:71:02:29:b9:47:23:
                    66:65:7b:d3:63:4c:79:ab:76:b9:4a:73:c0:25:70:
                    ac:13:75:3e:7c:ed:4c:bf:24:8c:8f:24:11:a3:93:
                    b2:f2:a2:ec:96:59:72:6f:06:9d:77:b7:71:00:b8:
                    83:e0:7a:81:9b:ab:4e:bc:94:b2:1d:74:f9:e7:ac:
                    78:62:ae:e6:19:6a:b4:86:28:1c:80:58:5f:d6:51:
                    f9:1a:6b:5e:47:c1:75:3a:ef:f3:38:a6:82:11:9f:
                    6c:bb:8d:4c:d1:4a:03:af:70:4b:74:4e:ce:0e:ec:
                    88:47:e7:ad:74:76:75:d7:b0:ad:32:71:76:bb:99:
                    e0:de:15:f8:34:a3:ed:5c:a1:c9:67:bc:85:22:e4:
                    1f:e1:92:27:77:e9:4f:3f:78:2f:36:94:12:2e:40:
                    2c:93:ac:a1:28:17:bf:fe:69:4a:a0:37:ff:b9:c7:
                    87:53:da:07:b3:3f:21:f6:d3:c8:26:c4:a8:ed:29:
                    da:c7:87:6f:a8:1a:67:ec:d5:6a:b9:dc:b9:da:db:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A3:42:06:98:B7:1B:6C:AD:5B:7C:EA:0D:6F:49:4F:20:B0:86:67
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fa:74:3c:2e:5d:c5:6a:86:35:46:74:69:60:1d:48:d7:e4:
         70:2f:df:ba:13:99:5d:6d:c2:5c:15:af:4b:25:bf:6e:d6:ad:
         e6:88:92:c9:01:46:a8:23:24:c8:9d:c5:91:22:f2:3a:bc:fa:
         29:fc:39:97:24:2c:e2:bd:eb:30:46:46:89:2c:42:3f:24:00:
         01:27:d6:2c:0a:b5:f3:06:80:94:7a:ba:4b:6a:4c:96:44:7c:
         96:d3:e3:08:70:24:2c:30:3b:1e:9b:45:70:7b:90:7c:44:b3:
         95:74:f9:db:a2:de:a7:8e:93:47:a0:e1:6e:29:96:68:bb:be:
         b7:92:04:45:67:28:75:9f:cc:2a:82:61:c9:1d:d2:b5:63:b4:
         27:57:c2:3f:32:a9:6a:08:bf:b5:02:31:0e:04:e9:2b:34:de:
         53:e0:4d:2d:56:da:07:16:db:bd:21:a5:3a:b9:f6:91:93:6a:
         a5:02:4a:ce:33:f4:04:4d:7c:8c:e5:1d:30:cd:33:a1:b2:60:
         e8:ae:81:54:af:69:7d:ad:34:a1:0d:cf:8a:f0:65:0a:40:27:
         72:cb:20:01:b5:30:52:91:68:a0:d8:a6:d7:9e:5e:0e:92:f2:
         d1:92:bb:50:a8:57:71:b5:fe:67:f5:85:d7:7d:85:0d:93:48:
         b5:11:b8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----