Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: SYeJOxqMEpdjM3Z91de0VLCQmBtbiao5syYC+wc0qTw=
Subject key identifier: 1F:99:4C:89:AA:04:8C:18:E3:F2:DE:B5:14:42:7B:BF:4F:79:19:D3
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 0677
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 0676
Signing time: Mon 20 Oct 2025 02:12:18 +0000
Manifest this update: Mon 20 Oct 2025 02:12:17 +0000
Manifest next update: Wed 22 Oct 2025 02:12:17 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: KuJY1/BL1gkTW+pT0A6Ji2qn7BKE0ilR9wPLZp0pTt8=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1655 (0x677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Oct 20 02:12:17 2025 GMT
Not After : Oct 22 02:12:17 2025 GMT
Subject: CN=68f59a81-1245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:10:8c:1f:78:0b:b8:56:b7:17:e7:c8:71:
da:e0:40:47:e5:f5:be:11:e8:df:a2:66:82:f3:db:
a4:38:6f:06:22:e6:64:0e:fb:83:f1:34:e6:53:e2:
10:c0:9b:5c:95:28:54:dd:18:a3:c2:08:ae:0d:40:
5a:e2:16:35:ee:61:09:06:87:a2:8e:43:0e:1f:a0:
87:1e:05:81:a3:10:29:0c:e5:61:00:bf:d8:23:31:
de:de:b2:15:81:e3:70:25:a5:29:7d:15:29:19:70:
5c:ba:4b:8c:5b:3c:32:02:0f:9a:50:f0:bb:11:84:
7c:6c:0d:41:af:45:5c:2b:e7:9d:ca:ce:04:27:bf:
81:6c:6a:96:72:ac:f3:b4:6b:c7:c4:31:ec:f1:d6:
f2:bc:4e:3c:6f:ab:b9:ba:ae:ae:d4:c0:a4:d0:59:
e5:1e:e8:8b:6e:d7:b5:df:18:2b:34:6e:ac:be:e0:
ab:d1:b3:2d:01:de:99:c3:1a:c7:4c:15:fd:f1:7b:
d7:17:f0:d7:fc:e1:ed:be:23:1c:ee:b9:3a:05:3d:
b7:81:e9:02:64:0c:69:4a:39:c7:14:a8:97:7d:c4:
67:f1:46:c9:17:b0:87:76:26:e1:fd:5d:40:6d:7a:
22:d4:ba:be:16:ee:25:d7:43:5c:4d:93:a7:66:42:
10:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:99:4C:89:AA:04:8C:18:E3:F2:DE:B5:14:42:7B:BF:4F:79:19:D3
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:0e:b3:84:4a:87:cf:c4:21:c2:e5:bc:28:e2:1c:f6:fd:
b3:30:71:0d:b5:40:25:d8:ed:28:4c:80:34:20:9b:73:88:5e:
8a:20:fe:f8:42:0b:c0:d0:57:37:5d:05:d6:39:e5:f5:ea:23:
ce:5b:47:cd:21:c9:7a:5d:a0:03:0d:f5:64:f5:11:a2:12:a1:
e0:7a:d7:77:71:bc:1e:a9:5a:0d:02:75:c2:04:89:3a:07:02:
b5:dd:56:0c:be:d9:5e:94:56:ad:c2:98:34:86:83:ce:02:8f:
1f:43:42:98:02:6e:6c:95:23:b6:3c:99:b9:31:16:3f:69:7c:
c3:1e:ec:5a:24:cc:01:e5:cc:b9:23:0b:82:5c:e6:2e:3f:05:
e5:a7:76:0f:e1:88:6c:e0:ef:10:2d:05:f5:1b:a3:89:41:06:
86:f4:dc:17:35:b9:44:40:0c:35:79:30:a0:d5:f5:10:56:f5:
9d:fd:db:5f:93:4d:5c:09:de:99:ea:f0:4b:ac:79:bc:4a:3a:
e9:b7:a3:7d:d6:23:97:1c:be:2b:ac:5d:da:fb:d3:69:76:33:
ca:8f:7d:b7:f2:fa:a4:39:e5:0b:02:0b:a8:8e:59:1a:1c:22:
a0:0e:c8:85:64:ba:a8:ff:52:66:1e:8a:7f:da:2f:47:39:49:
9b:37:86:31
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBncwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUJERDdSSTExMC8GA1UEBRMoOTcyQ0ZEQUVFQjEyNkY2RkNENDY5NkE1OTBGNzAx
ODgzN0FBNUZGMjAeFw0yNTEwMjAwMjEyMTdaFw0yNTEwMjIwMjEyMTdaMBgxFjAU
BgNVBAMTDTY4ZjU5YTgxLTEyNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCeMRCMH3gLuFa3F+fIcdrgQEfl9b4R6N+iZoLz26Q4bwYi5mQO+4PxNOZT
4hDAm1yVKFTdGKPCCK4NQFriFjXuYQkGh6KOQw4foIceBYGjECkM5WEAv9gjMd7e
shWB43AlpSl9FSkZcFy6S4xbPDICD5pQ8LsRhHxsDUGvRVwr553KzgQnv4FsapZy
rPO0a8fEMezx1vK8Tjxvq7m6rq7UwKTQWeUe6Itu17XfGCs0bqy+4KvRsy0B3pnD
GsdMFf3xe9cX8Nf84e2+IxzuuToFPbeB6QJkDGlKOccUqJd9xGfxRskXsId2JuH9
XUBteiLUur4W7iXXQ1xNk6dmQhCFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUH5lM
iaoEjBjj8t61FEJ7v095GdMwHwYDVR0jBBgwFoAUlyz9rusSb2/NRpalkPcBiDeq
X/IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVCREQ3LzY3RjAwNEM2QkUxRDExRUI4NTc2Qjk0MkY4QUVBMjI4L2x5ejly
dXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2x5ejlydXNTYjJfTlJwYWxrUGNCaURlcVhfSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUJERDcvNjdGMDA0QzZCRTFEMTFFQjg1NzZCOTQyRjhBRUEy
MjgvbHl6OXJ1c1NiMl9OUnBhbGtQY0JpRGVxWF9JLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBlJA6zhEqHz8QhwuW8KOIc9v2zMHENtUAl
2O0oTIA0IJtziF6KIP74QgvA0Fc3XQXWOeX16iPOW0fNIcl6XaADDfVk9RGiEqHg
etd3cbweqVoNAnXCBIk6BwK13VYMvtlelFatwpg0hoPOAo8fQ0KYAm5slSO2PJm5
MRY/aXzDHuxaJMwB5cy5IwuCXOYuPwXlp3YP4Yhs4O8QLQX1G6OJQQaG9NwXNblE
QAw1eTCg1fUQVvWd/dtfk01cCd6Z6vBLrHm8Sjrpt6N91iOXHL4rrF3a+9NpdjPK
j3238vqkOeULAguojlkaHCKgDsiFZLqo/1JmHop/2i9HOUmbN4Yx
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:45:00 2025 by rpki-client