Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          sCWx7dyrRbjTBvwzkJrBP6rciAwYftI1o+7WAXUhvio=
Subject key identifier:   3E:6F:48:4C:78:3E:8D:7B:BE:E4:4B:12:83:37:0F:6C:60:A5:DB:9B
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0371
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0371
Signing time:             Sun 19 Oct 2025 03:33:58 +0000
Manifest this update:     Sun 19 Oct 2025 03:33:57 +0000
Manifest next update:     Tue 21 Oct 2025 03:33:57 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: jtLsQrCENJaLupWl6LAUEtW9sWLF+hBvSaYZj7fGhUc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:33:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881 (0x371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Oct 19 03:33:57 2025 GMT
            Not After : Oct 21 03:33:57 2025 GMT
        Subject: CN=68f45c26-744f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:2e:1d:a0:a5:67:9b:e9:d4:ff:01:4b:73:
                    73:26:09:af:f2:39:3a:ca:a2:66:93:e5:ad:75:40:
                    6b:85:80:66:aa:02:43:fa:d0:a3:1a:7a:5a:23:b4:
                    3a:d3:4a:14:70:f5:7d:14:3e:35:d1:a1:0c:b1:54:
                    30:f4:a2:96:23:59:db:bf:2f:22:be:25:ba:09:a2:
                    f8:9b:3f:64:05:db:88:92:86:c5:6c:61:a0:a0:18:
                    d2:46:8a:fb:d5:57:9e:2b:ba:cd:27:92:9f:7c:93:
                    7a:85:3b:99:2f:70:11:c4:7a:dc:d0:0b:77:25:89:
                    28:52:56:b3:a8:6b:57:f0:31:5a:98:eb:c5:7c:fb:
                    78:0d:d8:7b:94:3c:e6:06:d6:42:60:14:c7:a2:ee:
                    10:39:d9:d3:93:b9:65:5b:cd:71:9c:7d:c0:90:68:
                    d6:8b:17:bb:b0:0c:ee:f9:1f:96:cc:e0:b6:a7:46:
                    41:69:cc:f4:c4:c3:78:c6:2c:b1:e0:2f:a3:4f:64:
                    33:ca:4d:7a:c4:a7:05:0c:ff:4d:9e:f5:c1:a1:25:
                    4f:2e:42:73:c1:93:61:af:d0:68:d1:52:3d:73:26:
                    cb:08:01:7a:d9:6c:8b:5c:2e:11:4c:37:7a:fe:7f:
                    0e:57:56:59:04:09:d4:24:e3:a0:ff:96:86:76:b3:
                    48:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:48:4C:78:3E:8D:7B:BE:E4:4B:12:83:37:0F:6C:60:A5:DB:9B
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:20:2a:93:c2:65:39:92:62:9b:36:ab:94:9d:b4:62:51:14:
         27:dd:95:20:1f:96:cc:11:5a:20:f7:71:98:f7:f0:2f:4c:da:
         6c:00:90:84:95:19:bf:2f:c5:79:65:e5:e9:0b:28:58:9f:f3:
         64:8a:8e:1f:55:1d:9a:07:c1:6b:ad:3f:d3:d7:60:88:c3:72:
         41:6f:0f:03:f2:db:09:12:30:80:98:61:c6:dd:1b:6c:01:32:
         a3:ea:f8:c7:d1:c2:16:9a:05:22:11:d9:cd:7b:0f:d4:d5:1c:
         d1:98:42:21:65:7f:b9:f2:35:a8:bd:c7:96:7e:2e:65:a0:f3:
         4f:83:2d:3b:20:3c:cc:d1:dc:66:50:1b:8e:26:2a:b7:c2:8d:
         e2:38:f3:98:fc:d2:71:61:ce:50:96:92:db:24:17:40:d8:8b:
         34:66:36:35:33:b2:74:ff:81:31:2e:be:a3:f2:56:af:9a:98:
         62:7c:10:30:25:85:7b:68:3c:20:f9:15:b3:6c:28:a7:f9:0b:
         40:37:0b:46:9c:ff:53:84:50:93:55:8a:74:00:d8:16:7e:87:
         bd:0b:5e:5c:35:a6:2d:43:0d:01:02:24:a2:06:31:57:7d:c8:
         b4:12:7e:01:4e:0d:f8:34:f3:a6:7c:8c:c3:f0:c7:d0:73:a0:
         71:8f:2a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:43:01 2025 by rpki-client