Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          pgZ4/wEvCrvFhlkGyakedVQAagxJcLXH/TgSQ8qwcV0=
Subject key identifier:   4E:B3:C7:D9:DA:89:78:8D:B2:2C:9D:66:AF:3B:66:14:06:A6:3E:66
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       0241
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          023E
Signing time:             Thu 26 Mar 2026 05:25:35 +0000
Manifest this update:     Thu 26 Mar 2026 05:25:35 +0000
Manifest next update:     Sat 28 Mar 2026 05:25:35 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: aAU5lmnGsWp4Rv+gIGOTRe63GD3k7iMtMwzwBXZj8Io=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577 (0x241)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
        Validity
            Not Before: Mar 26 05:25:35 2026 GMT
            Not After : Mar 28 05:25:35 2026 GMT
        Subject: CN=69c4c34f-4984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:90:a8:9e:b0:c8:1b:e9:eb:35:b0:86:a6:
                    5b:f8:c6:5f:c0:a0:40:7c:ce:d4:af:5b:57:30:9c:
                    6a:e8:92:4d:a0:71:cb:a8:34:b9:0e:32:57:91:8a:
                    9d:99:ee:e9:68:45:2b:ba:45:c7:d4:48:8d:a7:eb:
                    be:b0:d3:78:e2:0c:45:12:a4:f8:1e:8e:09:af:e1:
                    06:b3:23:d0:36:6c:5c:82:e9:66:3d:4c:ae:e0:f1:
                    83:ce:e6:b2:ce:d9:c2:88:8b:d8:c2:f6:71:53:86:
                    38:b9:12:52:3b:02:5b:88:d6:91:f5:1f:e3:7d:20:
                    0f:cf:2f:06:df:73:c0:ba:82:59:97:3e:a4:96:aa:
                    b4:74:67:9f:90:55:3d:b2:8f:b4:7c:77:2a:43:52:
                    7f:ad:14:db:1c:7e:ca:a1:a4:74:60:43:6d:b7:0b:
                    7c:17:96:cd:a9:df:b2:c6:2f:e9:15:83:1c:38:ba:
                    5c:e2:ab:8f:ff:45:5b:11:d7:4e:fd:7d:e6:3b:ba:
                    d3:93:57:2b:02:23:45:88:d6:89:13:4c:4b:3b:b8:
                    26:92:4a:cd:40:5a:ec:b2:d5:40:49:23:3a:70:cd:
                    16:6d:58:26:81:55:82:ec:3e:bb:31:71:e8:c8:5d:
                    30:40:e1:f8:72:86:5f:3a:25:5c:52:14:ac:2b:37:
                    3b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B3:C7:D9:DA:89:78:8D:B2:2C:9D:66:AF:3B:66:14:06:A6:3E:66
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:82:ef:4e:94:3d:af:90:cf:89:a1:13:bf:4a:aa:9f:15:f5:
         ca:bf:c0:b6:92:68:9b:da:3b:d4:cc:1f:06:2b:2d:37:2f:4f:
         7f:35:1b:7a:65:ff:31:f7:7c:a4:49:25:8a:9c:cf:b1:11:a8:
         53:eb:a3:ae:62:80:25:fe:ca:5b:70:6a:f7:e3:04:0f:9f:2a:
         f5:82:85:fa:2b:77:09:5f:d1:e2:a4:2b:09:9e:8f:2a:55:d9:
         9f:22:65:25:ab:6f:c2:9a:24:b1:9e:ae:64:bf:71:e3:fe:c3:
         cb:24:17:7d:9d:88:53:42:b6:77:d4:50:33:0a:96:4b:68:87:
         fa:01:0d:34:cb:fd:17:64:a4:ba:a4:e5:79:0f:b6:f0:14:c9:
         e3:6d:ba:ed:fe:e0:ac:e5:c4:52:43:7f:d7:f3:2d:2e:8b:a4:
         5b:77:95:f0:6d:c5:32:b5:da:a6:5b:55:39:04:43:f7:ef:b0:
         cf:34:a9:f2:c9:1a:e7:2c:a8:dc:71:3e:3a:fd:83:83:b6:44:
         3e:ff:6d:f6:7c:27:7f:8d:28:00:63:92:4c:b8:b3:6d:d9:e4:
         cf:f9:29:bf:bb:d4:fc:16:45:e7:c2:c8:4f:f3:c2:3b:b6:28:
         3d:9d:50:e4:b8:60:eb:70:ba:fe:13:57:85:11:61:9b:9c:9a:
         bc:58:bc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:04:36 2026 by rpki-client