Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          c98kMe1yYGjfwjsn5/Ftzn6dKfn/Bv+eUNr3RHA7jlY=
Subject key identifier:   A4:35:33:62:F3:95:F4:B1:1D:60:C5:60:C4:D5:C2:58:02:11:78:94
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       03F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          03F2
Signing time:             Thu 18 Sep 2025 03:12:22 +0000
Manifest this update:     Thu 18 Sep 2025 03:12:22 +0000
Manifest next update:     Sat 20 Sep 2025 03:12:22 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: H9kA+qwAXUtq5y84sfp6qkQDsLPQ2x5F2icDExW61oA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1012 (0x3f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Sep 18 03:12:22 2025 GMT
            Not After : Sep 20 03:12:22 2025 GMT
        Subject: CN=68cb7896-c11f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:58:3e:54:63:a3:65:0c:56:f9:cd:a5:c3:62:
                    b5:5a:c6:c7:da:1d:48:1f:2a:f2:cf:97:77:6d:27:
                    eb:03:2f:40:a1:90:dd:8b:33:99:58:00:78:94:ce:
                    75:ec:a3:44:97:ce:f5:1e:d3:5f:a1:68:15:38:56:
                    d0:d4:81:54:93:40:8a:b3:47:66:ba:18:c8:99:7d:
                    dc:9e:6a:69:ce:e5:2a:83:5d:e2:c5:7b:95:85:96:
                    5b:32:7a:96:cf:ed:3c:80:d6:6f:5e:4f:74:21:13:
                    53:c5:3d:83:72:4f:d2:4e:b6:25:64:ed:ab:34:c3:
                    9c:13:07:f5:6b:35:78:78:95:8c:9e:4d:e4:7a:df:
                    6e:09:5c:04:23:e4:ea:f1:9e:17:ed:27:9f:8d:b6:
                    35:0f:3f:f4:b0:79:05:21:4f:d6:82:a9:6d:83:53:
                    7e:00:28:76:2f:ac:50:d7:bc:e0:5d:ee:48:62:02:
                    4b:7a:83:5e:3d:cb:db:5b:a7:24:c3:b4:c0:3a:fd:
                    1a:72:f1:df:68:96:c3:54:89:f9:2f:62:84:1e:51:
                    e4:a5:a8:36:8d:36:23:35:98:8a:66:9a:ae:31:fd:
                    47:ee:3d:86:91:4a:6a:5f:ca:a8:04:6d:bb:ee:77:
                    c1:f0:bd:72:e7:ac:9b:50:af:36:8f:38:6d:e2:97:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:35:33:62:F3:95:F4:B1:1D:60:C5:60:C4:D5:C2:58:02:11:78:94
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:aa:f4:9d:bc:df:19:11:cf:cc:b5:d5:a8:aa:b0:74:b6:e9:
         fa:e5:ac:23:13:2c:a1:b4:ec:76:12:50:43:8f:bd:2a:e8:cc:
         db:9a:21:21:f0:93:3b:88:77:97:63:5c:39:f2:9b:27:57:3e:
         0c:98:13:bc:8d:94:e1:ab:97:cf:e0:ee:be:b1:40:ee:6c:0e:
         3b:5c:a9:e0:14:36:1f:67:89:ee:66:ec:55:20:25:79:ce:1d:
         10:ac:b9:b0:96:65:be:c3:5b:9a:06:a7:40:d1:9c:5c:1e:1f:
         97:35:a8:7c:05:e3:32:ca:38:ba:a3:b6:00:a6:2e:a3:66:28:
         bd:79:e8:63:8a:2e:cb:93:57:62:57:fc:d4:4b:96:61:ff:b3:
         0d:e2:72:63:e6:8e:60:92:4c:54:c6:d7:e9:a6:52:dc:38:95:
         e7:7e:4d:c2:2a:91:2a:9f:df:c1:2c:b3:d5:e7:c3:12:d4:98:
         a8:4a:72:57:98:32:d9:ae:97:4b:3f:5b:35:92:ee:d8:1c:ec:
         16:3d:25:b6:cd:23:fb:5a:4c:fa:d5:03:25:01:b5:75:95:00:
         30:92:17:03:9f:ba:b4:d7:12:11:c4:bc:dc:8c:bc:aa:a7:a7:
         1f:ab:51:eb:2b:db:2c:7c:8b:8d:a9:4d:89:90:51:88:2f:b4:
         00:ef:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:53:44 2025 by rpki-client