Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          K7NzAAQtXHtHoXqDo2lkn9nnfbJNRhL3/N6VD0fTxec=
Subject key identifier:   98:44:72:8A:27:EC:10:4D:30:69:BF:A3:5F:D4:DC:F9:D7:B4:39:D2
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       04E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          04E3
Signing time:             Tue 12 May 2026 03:08:37 +0000
Manifest this update:     Tue 12 May 2026 03:08:36 +0000
Manifest next update:     Thu 14 May 2026 03:08:36 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: yqMCfrC+Yai6kGmVlIE+asjB9I9perKBKOQfzeoDY+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:08:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: May 12 03:08:36 2026 GMT
            Not After : May 14 03:08:36 2026 GMT
        Subject: CN=6a0299b5-333a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:58:3f:73:f5:5e:63:e3:61:f7:eb:6b:d3:
                    98:ec:bf:4e:f2:82:79:36:ab:28:69:6a:47:61:04:
                    0f:95:2a:e3:2c:11:4e:9c:a7:69:df:3b:d9:a4:cd:
                    e0:7d:f9:20:9c:0d:11:60:a4:9b:5d:e1:ed:68:16:
                    61:1b:ab:bd:91:24:5d:9e:c8:b6:2a:cc:c3:77:14:
                    f6:5f:25:70:bd:92:1c:94:8e:3a:84:47:ae:fc:a2:
                    1c:e1:e1:81:61:20:c5:86:ff:51:00:16:f2:b1:47:
                    78:4c:7a:f9:5f:45:b0:5b:9f:8a:6c:41:c5:ae:35:
                    2f:c9:d0:53:df:72:f8:fe:ff:f4:9d:61:f8:6a:c2:
                    31:51:3f:ae:81:c1:3b:66:77:24:3f:9c:1f:cf:92:
                    c8:ed:d9:56:fa:0f:e4:83:42:5e:2d:74:d6:b2:16:
                    56:26:66:ca:80:d4:41:55:e7:db:38:d8:81:5a:d7:
                    f1:1a:56:c4:d5:77:5f:fa:dc:03:26:ad:99:fb:60:
                    e5:7e:ab:3c:45:59:0c:36:17:3b:d3:a5:83:a9:77:
                    9c:34:f1:d5:07:34:1a:0c:d6:1f:47:24:78:4d:02:
                    80:e1:5f:37:c4:ea:14:43:ef:5e:fb:63:03:f0:12:
                    4a:f7:83:3a:b4:8b:46:0d:8e:df:bc:08:01:d1:4d:
                    68:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:72:8A:27:EC:10:4D:30:69:BF:A3:5F:D4:DC:F9:D7:B4:39:D2
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:32:fe:6b:86:3b:8b:b5:55:bc:43:95:72:5e:d9:70:68:02:
         9a:16:dd:97:b7:f0:3c:cf:9e:17:8b:51:6d:73:69:2f:48:44:
         ea:23:30:8d:ef:fc:62:4d:d5:d4:69:e7:94:c5:53:19:24:d9:
         61:cd:4b:1f:96:ef:7b:0b:13:51:59:a1:12:39:ef:fd:88:ce:
         96:5a:c5:81:9f:ce:15:42:65:42:54:c4:b9:8f:e5:63:ca:cd:
         af:36:1d:cc:37:0b:9c:6e:c7:89:b1:cf:f6:cb:6f:dd:1b:df:
         00:13:85:47:3b:d9:40:fc:61:9b:2e:68:02:a4:e2:70:1e:7e:
         c7:64:ed:8e:6e:cb:44:62:a6:29:46:d2:b8:5f:49:55:32:84:
         dd:a7:60:5a:96:b2:f0:33:b5:62:79:39:f8:c9:59:dd:9f:99:
         3e:61:cd:0d:d0:fd:c2:1a:ec:6d:d1:0e:e8:91:91:98:20:b9:
         fd:c6:39:ab:40:e8:c6:58:78:a9:b1:b4:d9:d8:aa:2c:cc:0a:
         6b:e3:09:e5:b6:96:de:4d:e8:91:82:40:e7:a5:af:ee:7e:f4:
         fe:91:25:f9:8a:bb:b1:fb:e5:3c:8e:06:e4:3f:ab:4e:dc:d5:
         40:f2:04:65:c5:2a:13:88:93:f0:43:ff:42:c0:43:4f:09:c4:
         16:d9:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:25 2026 by rpki-client