Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          yW6vhHpVhSuczOu+JIJ06e/88+Z5SThJmo4fJHW0KQ4=
Subject key identifier:   93:53:93:57:86:3C:98:4A:C8:D2:1F:59:76:36:8A:E4:7C:B0:75:53
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       043C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          043C
Signing time:             Tue 05 May 2026 03:29:59 +0000
Manifest this update:     Tue 05 May 2026 03:29:58 +0000
Manifest next update:     Thu 07 May 2026 03:29:58 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: 0G7L4tYW0Dy34JNf5Pr48YeG158NhDH2uhpRlTQ3P58=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 May 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1084 (0x43c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: May  5 03:29:58 2026 GMT
            Not After : May  7 03:29:58 2026 GMT
        Subject: CN=69f96437-ad71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:88:38:e5:3f:e7:cf:17:e3:ba:c4:60:2f:d2:
                    0d:7d:f9:d9:5f:99:6b:18:d3:d5:05:d1:8d:15:af:
                    77:77:a3:f7:5d:eb:de:c1:fe:05:9b:5a:d4:0d:6f:
                    81:e5:61:b3:8b:18:3a:ab:1d:87:ba:62:56:6a:72:
                    68:11:fa:5e:a7:7c:44:be:5d:62:c0:57:94:97:ff:
                    b7:b2:25:0f:fb:af:15:95:cf:5b:85:2a:4b:8f:7b:
                    17:15:68:ca:ff:9f:84:28:7e:37:40:e0:5c:fc:f7:
                    8b:d2:25:04:55:49:1f:9f:dc:78:5d:cf:19:d1:47:
                    bb:5f:00:6a:2c:d4:3b:7d:71:52:d1:d6:bf:19:1b:
                    df:1a:b8:8b:c6:7f:38:cc:49:fa:5c:26:11:67:ec:
                    00:7f:af:d6:ea:5d:c5:a7:4f:52:01:33:ee:80:0f:
                    0e:bc:54:ef:3f:74:d3:b4:34:b6:09:07:78:73:fa:
                    91:80:15:97:db:a2:73:d2:3a:9b:0f:18:c5:47:0c:
                    68:49:c1:93:99:ec:2b:57:b6:cf:6d:d5:09:65:68:
                    96:a6:a3:a6:df:fb:85:d8:d4:d0:c5:c6:99:fc:5c:
                    c8:cc:92:c2:db:28:c7:10:00:a2:75:de:93:91:1c:
                    ae:de:92:9c:67:60:de:49:b6:6a:85:5b:24:e2:8e:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:93:57:86:3C:98:4A:C8:D2:1F:59:76:36:8A:E4:7C:B0:75:53
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:72:6c:9f:60:98:fd:a5:b1:e1:ea:2a:c2:9b:24:1b:77:72:
         b2:a7:32:2c:2a:f8:ef:67:79:78:b4:d2:18:02:59:38:3d:d5:
         d7:89:92:14:9b:18:d5:22:8a:9b:c0:e5:a5:bb:cd:61:31:d1:
         c2:7e:13:e6:d6:f8:71:60:89:ac:e6:d6:27:43:e3:ae:e2:c2:
         0a:fe:33:6b:9f:f1:ab:5f:a8:cd:7d:f1:01:d9:70:18:e8:46:
         c8:86:a0:98:d6:fa:6a:7a:4e:67:ab:a0:5c:f8:70:a2:e1:8f:
         89:68:15:20:5e:1b:fa:78:86:2e:43:bd:eb:30:ad:3f:e4:e2:
         eb:cd:da:bd:77:78:38:52:c0:53:b7:4f:c1:21:be:d5:d3:00:
         85:48:d8:e0:40:79:cd:5b:92:a7:32:b4:4e:cb:38:5b:0b:9c:
         b2:b2:fc:a0:c3:5e:87:57:a4:fc:a9:4a:4e:cd:af:d0:98:67:
         48:2a:8b:93:b1:19:11:ab:47:89:ac:6c:d3:31:69:c7:c1:5e:
         89:58:7a:30:da:33:c3:a8:ef:61:9e:52:c0:5a:25:ff:6b:28:
         f7:82:5b:1d:48:e4:ef:c8:8b:1d:b0:bd:16:75:98:72:8d:8a:
         08:36:fa:83:f3:8e:aa:49:db:ef:56:a5:ed:e4:10:d0:2f:ac:
         f7:cf:08:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 22:11:23 2026 by rpki-client