Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          Kboet0Gzo2j4VUxZjDalpvsdDBnD+Sd3ip2QbiqTpOg=
Subject key identifier:   34:CA:59:43:C8:97:BD:0E:16:4D:54:66:31:6B:D3:29:7B:D3:02:98
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0412
Signing time:             Wed 25 Mar 2026 04:07:51 +0000
Manifest this update:     Wed 25 Mar 2026 04:07:50 +0000
Manifest next update:     Fri 27 Mar 2026 04:07:50 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: T7jCK2yELRfFf2N939dsWKR2CgPVxchJFrjB0uRN9ZE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 27 Mar 2026 04:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Mar 25 04:07:50 2026 GMT
            Not After : Mar 27 04:07:50 2026 GMT
        Subject: CN=69c35f97-a691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d4:f5:3d:9a:fe:d1:a6:04:f7:4a:47:08:65:
                    df:8b:f2:f7:67:f4:fa:78:f3:d1:eb:37:f2:b0:aa:
                    c5:43:7b:c6:49:0f:b4:b2:67:f3:14:ed:55:1a:34:
                    49:8b:60:0b:6a:66:4b:8a:c1:49:74:86:6e:93:c0:
                    70:45:fe:6a:76:67:dd:a0:72:1b:be:3c:68:d1:68:
                    b7:f7:73:ef:3d:db:f6:b9:84:32:e1:61:ca:1e:ad:
                    d2:04:8b:4b:d5:55:e9:3e:7d:97:4f:72:ca:29:3d:
                    83:ce:47:47:a5:f8:d1:65:00:90:21:db:b0:c5:f1:
                    84:df:9d:fd:2d:a6:11:e6:66:02:0e:b1:e8:36:b4:
                    fa:ed:fc:72:06:0c:53:9d:a9:43:a0:2a:e2:6f:e9:
                    c3:5c:ae:a5:62:bf:d7:39:57:80:92:48:3e:5a:fe:
                    a4:01:e2:c0:fd:b7:ea:6e:59:23:74:e0:ed:eb:0e:
                    16:9f:24:bf:06:a9:38:4c:e7:f1:4e:34:b2:28:83:
                    c0:bb:50:5a:cf:ff:db:26:93:f0:ad:f3:37:00:0b:
                    35:20:53:a9:ad:69:89:fb:21:d3:e5:98:d9:30:7d:
                    a9:4c:70:3a:17:0c:a8:0e:25:0b:bf:86:13:1f:9c:
                    63:db:a4:0a:0b:d0:b3:09:39:54:cc:94:b6:da:e2:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:59:43:C8:97:BD:0E:16:4D:54:66:31:6B:D3:29:7B:D3:02:98
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:65:28:e5:49:3a:b5:a9:fb:1b:a2:8a:39:a4:bd:74:9c:
         a1:1b:b5:d7:ed:11:fd:c8:5b:0b:f6:7e:72:fd:3a:ea:28:7f:
         f2:09:9b:f9:65:45:05:cf:4c:6f:3a:5e:e3:26:f9:0c:46:dd:
         f1:40:a5:14:0e:89:f8:05:90:d0:8f:03:c1:28:45:62:da:14:
         da:ec:56:82:5a:2b:00:5a:3d:93:8f:32:71:2b:1e:68:d3:70:
         b6:1e:0e:ae:f2:da:46:af:9f:70:80:7b:de:b7:a8:7b:6d:9b:
         29:53:f8:d5:99:ee:84:f6:99:f7:3c:0b:e3:6f:c6:d1:75:a9:
         40:28:59:2c:17:c4:d1:70:a3:a6:a6:1c:23:61:94:bb:2b:e9:
         48:31:e3:b9:ed:52:ba:11:c0:4d:d4:09:34:58:2c:df:24:c0:
         c3:95:8a:3f:99:0c:2b:a2:ad:c6:86:c1:58:18:ae:aa:01:ec:
         72:43:91:4c:d0:58:d7:e2:fc:88:c4:fa:10:6f:82:4b:50:3d:
         c3:72:82:2d:f4:b9:36:17:f9:37:f6:3d:b3:4a:ab:1a:8f:a2:
         80:6b:c2:d6:b6:38:6a:a6:bf:e9:57:23:89:26:9f:8c:ae:4f:
         21:63:e9:81:ed:ad:09:05:da:17:da:f4:2e:91:03:bd:a5:56:
         ad:49:18:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:11 2026 by rpki-client