Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          0HCgJrC63jnAvajGpkKWGsVo+dRoC0bLg/0dPuBW/ao=
Subject key identifier:   78:61:4E:1E:99:B2:A5:04:EF:2F:DC:C8:BD:BE:66:84:69:F3:BA:DE
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0350
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0350
Signing time:             Tue 16 Sep 2025 03:31:55 +0000
Manifest this update:     Tue 16 Sep 2025 03:31:55 +0000
Manifest next update:     Thu 18 Sep 2025 03:31:55 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: o0wOGt2Radn0+07uNV4AOh5eHlLQLWbS5almUXQapiU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Sep 16 03:31:55 2025 GMT
            Not After : Sep 18 03:31:55 2025 GMT
        Subject: CN=68c8da2b-db38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:3c:87:97:30:0c:36:16:66:ff:4c:3d:ad:
                    fa:40:5d:a5:39:82:b5:68:fe:dc:8e:5f:4d:0d:6c:
                    3f:32:40:78:0d:a6:10:e5:b8:d6:db:0f:b3:72:3c:
                    f8:cc:97:3e:4c:5e:7f:cd:cf:51:25:b3:63:d9:3f:
                    51:de:b3:1e:39:b8:a7:47:68:66:58:af:53:71:67:
                    de:37:e0:84:b6:51:83:0d:a2:2a:d5:70:9e:ab:e9:
                    73:12:ad:bb:46:69:40:d6:ac:cc:36:35:e5:f4:97:
                    a7:9d:74:9d:4b:99:8c:6c:7e:b9:3e:36:9e:51:be:
                    e4:24:c4:1a:37:19:26:85:b9:d8:d0:d1:0f:c5:36:
                    7f:a1:21:2f:18:7d:18:3d:78:10:6d:e1:26:99:76:
                    6c:d4:d5:0a:78:15:13:cc:12:47:93:d3:a5:05:56:
                    20:08:f0:c5:97:89:94:da:7b:6c:e1:01:16:bd:1f:
                    01:89:d2:1d:64:b3:27:86:a6:89:d8:e8:9a:66:1f:
                    27:7e:5d:5e:3a:ea:d8:62:6d:a4:a3:04:35:86:de:
                    42:60:98:87:4b:18:61:61:aa:7e:cf:e3:65:63:e8:
                    05:39:06:d0:f8:5c:fb:b3:d6:ff:e6:ab:19:92:91:
                    53:2d:12:0c:a3:e2:82:a7:7f:e9:28:60:56:4e:63:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:61:4E:1E:99:B2:A5:04:EF:2F:DC:C8:BD:BE:66:84:69:F3:BA:DE
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:45:2f:11:d8:ad:79:43:a4:4c:fb:a0:f3:af:f0:7e:d3:21:
         a3:a1:4a:95:d5:ce:2b:2e:83:a4:6a:28:54:59:5a:09:9e:fb:
         8e:d9:25:af:ea:a7:08:4b:77:75:c9:03:45:7e:58:9a:57:a5:
         91:2a:db:d5:50:d4:a6:80:25:38:7b:4d:b7:70:98:1b:97:20:
         87:55:e7:17:2a:3c:15:88:d6:64:cb:4c:b5:36:bb:95:36:66:
         a3:b5:6f:cd:66:18:08:b3:53:51:61:a9:47:ca:b8:e7:33:83:
         a1:b8:19:93:50:91:ae:22:e8:36:9a:32:bf:b0:4d:79:6c:44:
         85:fd:9f:93:68:3a:f1:1c:f1:42:dc:af:81:7b:79:40:2c:cf:
         1c:be:6e:da:3f:c2:07:96:2e:b7:89:cd:d4:0e:82:41:aa:5a:
         1c:4f:ca:4f:3f:d0:da:a3:35:92:88:72:eb:b9:35:38:22:35:
         f6:5a:7e:fb:97:32:19:c6:44:c8:7b:42:4a:88:7d:d6:8e:1f:
         d5:b9:e5:fb:f7:02:2c:ae:2c:27:89:e8:73:de:7b:4b:2f:ff:
         d5:e3:e8:51:4f:cb:d5:07:cf:f9:90:8f:15:21:cd:f3:4b:97:
         c2:fe:85:15:63:98:c4:5e:0e:df:b1:41:5f:34:92:40:7c:32:
         95:2f:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:45:53 2025 by rpki-client