Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File: pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier: K6DVbghCAcTLIC2Djv5bdKEGqR4T9t2sdPhH+Iw24YU=
Subject key identifier: A8:96:41:A1:5E:E2:FF:14:65:2A:DA:1E:F7:A2:FD:A7:23:E9:0C:CA
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer: /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial: 01A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number: 019E
Signing time: Mon 20 Oct 2025 04:39:30 +0000
Manifest this update: Mon 20 Oct 2025 04:39:29 +0000
Manifest next update: Wed 22 Oct 2025 04:39:29 +0000
Files and hashes: 1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: 0gaWyGxMylQVb1xwhkcYEHU3AOzyU6gtI2GFhmuRwDo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 417 (0x1a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6CA3AF, serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Validity
Not Before: Oct 20 04:39:29 2025 GMT
Not After : Oct 22 04:39:29 2025 GMT
Subject: CN=68f5bd02-cf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:e1:49:a4:27:6e:66:6b:44:df:55:68:66:
a0:33:12:a9:cf:73:be:65:41:ff:d8:f1:c8:f5:aa:
46:99:7c:33:4f:c3:9b:86:07:a4:0c:09:c9:82:06:
0b:d5:7f:0c:64:bb:4b:77:ba:a0:64:8f:4f:be:93:
66:3d:2d:68:7b:62:9c:bb:d2:9d:a5:a8:5f:24:7d:
ff:dd:5d:4e:38:a9:00:df:29:72:97:02:2b:b2:6b:
2f:cd:86:09:61:80:b1:05:59:90:44:66:a8:eb:4f:
10:2b:d5:1f:24:44:9d:ca:ca:64:69:92:0e:1a:d4:
1f:c2:1a:95:f8:05:55:85:60:53:14:dd:b1:2b:83:
dc:83:66:b7:3f:03:79:b3:04:63:5c:f1:bb:dc:fc:
e4:9c:84:4c:46:58:1c:7d:2f:95:50:e4:7a:5c:8d:
c7:b9:12:60:91:52:88:7e:ac:88:48:1a:12:ee:e0:
9e:7e:08:c0:83:62:0d:56:85:70:60:1b:58:bc:2b:
98:de:f0:43:83:aa:f2:60:86:d6:9e:e9:ba:14:ef:
67:dd:70:24:14:c1:60:e4:16:fc:f4:2a:57:cd:23:
52:01:ec:5f:4f:10:b4:7e:b8:b3:db:e2:fa:37:3a:
1a:8e:65:d3:74:ed:35:82:49:eb:a3:d9:9d:38:95:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:41:A1:5E:E2:FF:14:65:2A:DA:1E:F7:A2:FD:A7:23:E9:0C:CA
X509v3 Authority Key Identifier:
keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:a7:89:2b:54:43:ab:10:70:81:70:ea:17:5f:d3:2c:1a:ce:
39:c4:1a:17:75:5b:d7:59:44:ff:81:91:84:00:e4:d3:4d:16:
33:56:14:b4:31:b0:e2:94:9c:03:bc:7b:e8:ce:b9:91:d6:5e:
5c:ac:a9:44:66:9d:be:83:6f:52:96:7d:4b:24:b0:a7:08:ee:
4b:80:42:fa:0f:74:aa:de:93:12:87:11:d3:d5:69:42:00:34:
50:a8:f6:19:98:38:2e:04:ad:71:bd:f9:a2:d5:ad:0b:ae:2f:
58:97:5e:c6:7c:50:6d:21:0a:df:e9:1e:5e:a0:d0:dc:b7:65:
20:7c:58:03:d3:c6:0f:cb:60:ba:9f:94:9d:52:f7:d3:dd:7b:
d9:ee:cf:19:f1:f8:05:c3:83:8a:c7:ce:bb:d6:8d:74:a2:0a:
b4:8d:03:43:7a:77:b3:38:56:86:79:66:27:c7:f3:f4:6b:4f:
d5:96:e6:47:6d:c3:70:df:f5:74:a2:4a:f7:10:78:12:13:20:
e2:36:57:5c:fd:2a:34:0b:ca:ca:46:59:b2:2e:06:a0:5d:06:
d9:5f:eb:76:ff:09:57:fe:66:2d:de:55:50:f9:1a:fd:da:d4:
99:1b:e9:c6:64:79:da:d9:2f:ae:88:4f:42:a6:3c:19:68:11:
16:8c:75:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:25:31 2025 by rpki-client