Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          yhYohOmUV3ump6AyfRCjjMWlAsaI24TxHUYAmeZslxo=
Subject key identifier:   BB:51:70:22:A4:98:3E:AE:A6:01:66:4F:EE:7A:7C:2A:88:8B:B2:1C
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          04CA
Signing time:             Thu 24 Sep 2026 03:30:09 +0000
Manifest this update:     Thu 24 Sep 2026 03:30:08 +0000
Manifest next update:     Sat 26 Sep 2026 03:30:08 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: X7NzooQCS8MY4vhARfIifx7cdrb+FQJbxdcI5CHNtAU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Sep 24 03:30:08 2026 GMT
            Not After : Sep 26 03:30:08 2026 GMT
        Subject: CN=6ab49941-41b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:87:4e:cf:c5:cd:8a:e6:50:27:d5:3e:ea:
                    ae:d8:5e:22:82:51:23:77:23:01:96:ee:cc:6d:2a:
                    f2:5f:77:15:57:f4:ce:85:25:0c:2f:4f:cb:11:7f:
                    49:60:9a:bc:10:a4:f7:e7:09:45:66:51:4d:b2:3a:
                    d2:1f:9c:cc:11:4c:24:a0:26:03:da:70:d2:52:40:
                    36:c2:c3:16:59:06:21:2c:ed:d6:03:4f:56:f8:7b:
                    b0:b1:e5:86:16:f3:0f:d1:2f:27:57:bf:1b:ad:48:
                    22:84:59:13:3d:48:0f:04:cf:3f:2a:01:27:4a:5a:
                    be:a8:b0:9b:be:d6:31:a2:d1:e8:35:8c:9b:3c:fd:
                    8b:55:c5:a7:59:1c:16:ee:c0:26:f3:5c:30:51:2d:
                    e6:41:09:82:6c:09:e8:49:e1:12:9a:90:07:29:54:
                    48:78:70:c8:c1:eb:fe:4c:de:1a:4e:af:94:89:f9:
                    2f:5c:c7:f1:5d:e9:ca:f1:4b:bc:3b:e2:44:2a:df:
                    a7:a5:fd:28:fa:f7:aa:f7:a5:b5:6e:ce:ff:53:f3:
                    a5:7d:ae:dc:24:7d:74:f8:31:0d:b2:08:41:a6:eb:
                    af:f5:e5:93:2f:0f:3a:5c:ea:ee:3e:61:07:48:21:
                    5a:df:ac:d8:46:96:06:25:1f:f0:65:af:55:02:31:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:51:70:22:A4:98:3E:AE:A6:01:66:4F:EE:7A:7C:2A:88:8B:B2:1C
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:7e:fe:76:d6:ec:4d:ac:00:4c:1b:30:06:07:ab:4e:66:
         9f:02:34:5b:a7:53:e7:e1:7d:2d:ce:9b:80:ea:89:2b:55:fd:
         fd:f6:33:8b:bb:9a:02:01:69:90:38:46:70:94:d5:34:43:bc:
         bf:4f:ba:49:12:53:70:e9:86:fa:d5:6c:3b:84:24:c7:65:9e:
         d1:70:fa:4f:98:64:20:b3:70:68:19:48:82:c2:0f:d9:a8:12:
         2f:33:cc:41:94:07:b9:b0:53:ca:60:41:99:2a:11:fd:45:4d:
         5a:5e:bd:f0:5c:e6:7a:e3:6f:ee:1e:e1:3a:d4:4f:f9:89:e2:
         9b:15:8e:3c:a0:1e:15:9c:4b:50:20:82:79:ca:b2:a9:c6:68:
         1e:ae:2d:e4:3d:bb:1c:34:21:80:40:ab:5f:5c:27:58:c3:99:
         5d:d9:bf:a2:fe:07:41:a2:2f:4e:a5:b7:f2:f6:b2:55:af:5a:
         bc:6c:a3:f2:b6:d0:c7:db:59:f3:f2:2b:86:d1:df:27:30:b8:
         63:25:43:e8:bb:f9:2f:2c:84:ea:11:6a:fe:d5:4d:28:b1:00:
         bc:fe:07:ae:16:54:2f:76:d9:3d:8f:d6:7b:f3:0b:77:d1:66:
         a1:7d:eb:dd:5b:d2:1d:d5:a6:6c:81:97:96:ec:e0:90:9c:5c:
         7f:c9:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----