Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
File:                     lY7E7TST-AUYn0loFwDHngiOfrI.mft (raw, json)
Hash identifier:          PeDKv04ct2K3DYiW552SGLfG9K8EqzqlPrSmJ8O8luY=
Subject key identifier:   D1:7D:19:8C:71:86:7B:AA:52:D9:66:76:1A:7F:E5:FB:64:5C:02:B5
Authority key identifier: 95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2
Certificate issuer:       /CN=F3675053AF/serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
Certificate serial:       2A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
Manifest number:          28
Signing time:             Thu 06 Aug 2026 05:44:16 +0000
Manifest this update:     Thu 06 Aug 2026 05:44:15 +0000
Manifest next update:     Sat 08 Aug 2026 05:44:15 +0000
Files and hashes:         1: lY7E7TST-AUYn0loFwDHngiOfrI.crl (hash: a0bb6MU24CXLG45CXTdNA/BNaIg4t0bu7d/+T4Sm0fM=)
                          2: 4FE947B8748211F1BEF1D21ACF1D38B0.roa (hash: gMf5DUZWS8LRzzUKIgiaI5m52/YhBJXqXPqfDQ4cQck=)
                          3: 8D2A260C748111F19133C316CF1D38B0.roa (hash: E5OkO0hC2p5sav8EOOxzrRj7hCtcXtLqUMdK/zTMcsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675053AF, serialNumber=958EC4ED3493F805189F49681700C79E088E7EB2
        Validity
            Not Before: Aug  6 05:44:15 2026 GMT
            Not After : Aug  8 05:44:15 2026 GMT
        Subject: CN=6a741f30-6b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:ef:11:bb:1e:08:4c:b2:08:a7:d9:34:0d:
                    c2:83:cf:11:a4:ef:d9:25:b4:9d:11:b7:da:a7:91:
                    92:2e:1f:3d:f9:37:74:ff:b6:30:44:1f:0d:b1:e5:
                    62:54:bf:5d:b5:9f:74:90:5a:b2:a3:b1:80:5b:39:
                    6b:88:89:80:e6:03:ef:5f:cb:a1:ae:7e:9b:05:b0:
                    05:0e:cf:ef:75:25:a1:5e:46:1b:4c:c1:67:d3:44:
                    ed:12:d3:81:f3:71:65:af:51:99:0b:57:2c:da:5f:
                    a3:28:3f:00:63:44:27:8b:47:ec:52:52:07:64:82:
                    84:a5:b8:7a:be:51:fb:46:72:81:06:55:df:4e:46:
                    f6:63:dc:5a:1a:42:77:ef:09:84:e4:26:fe:3a:5c:
                    d6:a0:7f:dd:1b:e9:32:81:2e:d3:c9:92:a2:63:f7:
                    25:75:31:4a:8f:96:96:d5:3d:75:e9:9e:22:e8:86:
                    f5:a9:cd:82:f7:90:97:89:a7:a6:9c:de:5b:16:bb:
                    61:b7:f3:d7:28:44:b9:63:68:ae:f6:6a:6a:4e:84:
                    1e:ac:2e:65:1b:d9:b5:f7:61:c2:3f:bc:39:02:b9:
                    fd:1c:77:cb:d0:dc:91:02:0f:61:b6:be:31:e1:5c:
                    b5:ee:8d:ab:5d:6c:49:73:e9:9c:bb:0d:04:08:9b:
                    aa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:19:8C:71:86:7B:AA:52:D9:66:76:1A:7F:E5:FB:64:5C:02:B5
            X509v3 Authority Key Identifier:
                keyid:95:8E:C4:ED:34:93:F8:05:18:9F:49:68:17:00:C7:9E:08:8E:7E:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lY7E7TST-AUYn0loFwDHngiOfrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675053/6984D66E745B11F1B41B61B7CE1D38B0/lY7E7TST-AUYn0loFwDHngiOfrI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:1e:d4:b6:dc:91:63:e1:2e:c5:6d:9d:59:a7:47:b7:c5:
         a9:8a:9b:d8:08:5f:31:8c:92:cb:d9:53:5d:1f:43:b2:d3:1e:
         5a:84:3b:e0:fb:38:4f:12:ba:91:98:aa:09:4a:56:c9:e0:50:
         6d:7a:82:1a:83:2c:da:3a:0a:2b:d6:bc:50:70:42:69:eb:28:
         da:6c:02:0c:4c:89:a1:46:03:34:7e:f1:f1:e0:6f:24:70:23:
         9a:1a:a8:83:eb:f9:87:dc:38:82:00:43:50:93:55:23:fb:1f:
         14:42:2e:ce:7e:0b:f4:a5:0e:d4:e5:60:67:e5:75:b8:c8:61:
         db:61:53:45:87:f8:a3:69:13:21:c4:eb:1a:d5:77:15:d5:05:
         79:79:f9:80:84:4a:0d:d4:67:30:d0:7d:2d:a7:20:c8:0d:a8:
         2c:fc:c4:24:10:b6:cd:0a:f9:c1:24:38:96:c1:1a:ae:e3:dd:
         91:60:37:22:db:67:ec:ca:7d:fb:cf:8b:6e:73:cd:29:5b:d7:
         31:2e:28:c6:63:e5:68:86:24:3f:f4:c9:f7:09:b1:a6:9b:47:
         25:82:fd:27:53:e0:16:1a:5c:e2:87:2c:ee:ce:2f:5e:67:b4:
         23:87:c2:de:43:92:f9:7b:82:32:04:57:35:28:7a:0b:be:9b:
         cd:c3:be:6e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBKjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
NTA1M0FGMTEwLwYDVQQFEyg5NThFQzRFRDM0OTNGODA1MTg5RjQ5NjgxNzAwQzc5
RTA4OEU3RUIyMB4XDTI2MDgwNjA1NDQxNVoXDTI2MDgwODA1NDQxNVowGDEWMBQG
A1UEAxMNNmE3NDFmMzAtNmI5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzj7xG7HghMsgin2TQNwoPPEaTv2SW0nRG32qeRki4fPfk3dP+2MEQfDbHl
YlS/XbWfdJBasqOxgFs5a4iJgOYD71/Loa5+mwWwBQ7P73UloV5GG0zBZ9NE7RLT
gfNxZa9RmQtXLNpfoyg/AGNEJ4tH7FJSB2SChKW4er5R+0ZygQZV305G9mPcWhpC
d+8JhOQm/jpc1qB/3RvpMoEu08mSomP3JXUxSo+WltU9demeIuiG9anNgveQl4mn
ppzeWxa7Ybfz1yhEuWNorvZqak6EHqwuZRvZtfdhwj+8OQK5/Rx3y9DckQIPYba+
MeFcte6Nq11sSXPpnLsNBAibqu8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTRfRmM
cYZ7qlLZZnYaf+X7ZFwCtTAfBgNVHSMEGDAWgBSVjsTtNJP4BRifSWgXAMeeCI5+
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzUwNTMvNjk4NEQ2NkU3NDVCMTFGMUI0MUI2MUI3Q0UxRDM4QjAvbFk3RTdU
U1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbFk3RTdUU1QtQVVZbjBsb0Z3REhuZ2lPZnJJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3NTA1My82OTg0RDY2RTc0NUIxMUYxQjQxQjYxQjdDRTFE
MzhCMC9sWTdFN1RTVC1BVVluMGxvRndESG5naU9mckkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHjcHtS23JFj4S7FbZ1Zp0e3xamKm9gI
XzGMksvZU10fQ7LTHlqEO+D7OE8SupGYqglKVsngUG16ghqDLNo6CivWvFBwQmnr
KNpsAgxMiaFGAzR+8fHgbyRwI5oaqIPr+YfcOIIAQ1CTVSP7HxRCLs5+C/SlDtTl
YGfldbjIYdthU0WH+KNpEyHE6xrVdxXVBXl5+YCESg3UZzDQfS2nIMgNqCz8xCQQ
ts0K+cEkOJbBGq7j3ZFgNyLbZ+zKffvPi25zzSlb1zEuKMZj5WiGJD/0yfcJsaab
RyWC/SdT4BYaXOKHLO7OL15ntCOHwt5Dkvl7gjIEVzUoegu+m83Dvm4=
-----END CERTIFICATE-----
Generated at Thu Aug 6 11:36:51 2026 by rpki-client