Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          h4qospS2yzn8+RcHmKl1v24dlL4Mb9Zd1uJDi/phV+M=
Subject key identifier:   D4:BC:D9:C1:76:93:FD:C6:3A:7F:72:62:13:77:67:2D:02:2E:DA:A0
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       04B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          04B3
Signing time:             Thu 26 Mar 2026 03:43:45 +0000
Manifest this update:     Thu 26 Mar 2026 03:43:44 +0000
Manifest next update:     Sat 28 Mar 2026 03:43:44 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: gs66FvlS0QEAaVzoLuOO09qmm5+iEkmckfNbrz/2DI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205 (0x4b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Mar 26 03:43:44 2026 GMT
            Not After : Mar 28 03:43:44 2026 GMT
        Subject: CN=69c4ab71-2f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:ff:f2:ff:ae:27:14:84:e6:0f:4a:f9:86:
                    03:10:60:01:f1:7a:7c:4f:d5:50:f8:d2:f9:41:95:
                    1c:a6:e2:34:d4:ac:58:d4:4a:a5:cc:89:2f:3c:52:
                    73:76:ea:55:39:17:a7:f7:25:53:3e:54:7a:12:81:
                    17:5e:4b:5a:8d:6e:cf:05:f2:b2:29:b5:8d:57:ab:
                    cb:95:26:b9:98:01:40:93:99:86:b7:4c:56:a5:08:
                    06:2d:a0:22:45:f1:3d:92:b0:fb:d7:ec:9c:ce:6e:
                    68:3c:ee:a7:f5:80:9d:b8:bd:f9:af:7f:eb:3f:d5:
                    8a:e4:e1:6b:6b:d8:e3:6f:b9:bd:a6:bf:70:78:b5:
                    f6:42:69:95:e8:80:5a:58:68:d7:26:4d:14:0b:fd:
                    a8:a1:4a:02:a6:de:08:ad:94:dc:3a:cc:ff:00:fe:
                    46:d3:8e:a3:81:fb:5b:dc:27:11:77:af:f0:81:3b:
                    40:cd:a0:02:b0:a6:67:27:c5:6f:08:bd:26:3b:d7:
                    a6:b6:c2:2e:b1:65:eb:97:29:f7:b3:66:d4:85:0d:
                    97:bb:51:49:55:67:5d:9e:08:8c:b3:1d:cc:00:7f:
                    9d:7c:ad:71:ad:21:83:25:45:02:10:10:30:e5:09:
                    72:42:94:65:9c:f1:06:04:91:b8:4d:aa:e9:77:f3:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:D9:C1:76:93:FD:C6:3A:7F:72:62:13:77:67:2D:02:2E:DA:A0
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ed:ad:26:34:d9:ed:b0:58:d1:bc:00:9e:a3:a8:07:1e:ed:
         c0:64:30:96:6d:c9:b9:92:0d:9c:53:f5:5a:ae:6b:0e:9c:ab:
         76:98:1e:06:30:60:6d:0a:ce:b7:11:22:84:f5:ec:5e:57:04:
         f5:cd:be:a1:7c:dd:40:5b:97:57:88:41:fc:5d:d9:fc:97:58:
         cc:f0:64:b6:2b:cb:a1:09:44:1f:36:e9:62:af:af:b3:32:66:
         47:5c:c1:77:ee:bc:e7:25:e1:57:42:5a:ee:05:45:e9:5f:4b:
         2f:79:ef:b1:40:76:65:e7:28:c6:9c:f2:e4:fe:53:c0:fe:85:
         46:c3:6a:07:82:20:dc:90:1f:73:67:dd:84:dd:f6:70:37:d7:
         e3:65:90:82:57:db:d1:e0:fb:49:02:42:fb:50:f4:82:de:81:
         8b:7a:58:f0:3b:36:02:3b:63:c8:76:62:33:07:b8:83:f7:51:
         74:a5:79:0e:63:d8:71:d7:ec:73:e5:3f:97:cc:62:df:e5:1b:
         1e:a8:b0:73:16:de:ff:ff:84:61:b8:66:8b:01:79:d6:2c:21:
         a6:70:0c:6d:02:72:7d:4e:ca:72:17:e3:ce:39:56:02:f4:0d:
         79:ca:11:1a:21:2b:af:a5:04:7f:5d:4c:74:51:15:2b:34:1b:
         aa:55:33:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYzMUJBRjExMC8GA1UEBRMoM0YyRTI1ODczRjkzMEEzRTJGNzVBNUMyQzYxNTYy
QjAyMjBERTY1QjAeFw0yNjAzMjYwMzQzNDRaFw0yNjAzMjgwMzQzNDRaMBgxFjAU
BgNVBAMTDTY5YzRhYjcxLTJmMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOef/y/64nFITmD0r5hgMQYAHxenxP1VD40vlBlRym4jTUrFjUSqXMiS88
UnN26lU5F6f3JVM+VHoSgRdeS1qNbs8F8rIptY1Xq8uVJrmYAUCTmYa3TFalCAYt
oCJF8T2SsPvX7JzObmg87qf1gJ24vfmvf+s/1Yrk4Wtr2ONvub2mv3B4tfZCaZXo
gFpYaNcmTRQL/aihSgKm3gitlNw6zP8A/kbTjqOB+1vcJxF3r/CBO0DNoAKwpmcn
xW8IvSY716a2wi6xZeuXKfezZtSFDZe7UUlVZ12eCIyzHcwAf518rXGtIYMlRQIQ
EDDlCXJClGWc8QYEkbhNqul389/TAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1LzZ
wXaT/cY6f3JiE3dnLQIu2qAwHwYDVR0jBBgwFoAUPy4lhz+TCj4vdaXCxhVisCIN
5lswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMzFCL0Q1MkMxODRBOTczMzExRURCNDIzNDQ4REYxMjIyNDY4L1B5NGxo
ei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B5NGxoei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUYzMUIvRDUyQzE4NEE5NzMzMTFFREI0MjM0NDhERjEy
MjI0NjgvUHk0bGh6LVRDajR2ZGFYQ3hoVmlzQ0lONWxzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB07a0mNNntsFjRvACeo6gHHu3AZDCW
bcm5kg2cU/VarmsOnKt2mB4GMGBtCs63ESKE9exeVwT1zb6hfN1AW5dXiEH8Xdn8
l1jM8GS2K8uhCUQfNulir6+zMmZHXMF37rznJeFXQlruBUXpX0svee+xQHZl5yjG
nPLk/lPA/oVGw2oHgiDckB9zZ92E3fZwN9fjZZCCV9vR4PtJAkL7UPSC3oGLeljw
OzYCO2PIdmIzB7iD91F0pXkOY9hx1+xz5T+XzGLf5RseqLBzFt7//4RhuGaLAXnW
LCGmcAxtAnJ9TspyF+POOVYC9A15yhEaISuvpQR/XUx0URUrNBuqVTMI
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:29 2026 by rpki-client