Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          fzPbhKulHuwcFrvDvmU5DMw7xaNgFIoV9z8sCznlGqg=
Subject key identifier:   4C:0B:DE:DC:00:78:6D:FA:23:DA:78:C4:BF:CB:A1:63:0B:C8:0E:92
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       03EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          03E6
Signing time:             Sat 26 Sep 2026 03:58:40 +0000
Manifest this update:     Sat 26 Sep 2026 03:58:39 +0000
Manifest next update:     Mon 28 Sep 2026 03:58:39 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: bCdJcLWaAC6SDQpvStvyA35j21FlDyOofsh2A/Lj2ZA=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Sep 26 03:58:39 2026 GMT
            Not After : Sep 28 03:58:39 2026 GMT
        Subject: CN=6ab742f0-021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b1:c8:c9:dc:07:3f:87:7c:33:0f:c9:f4:c2:
                    21:eb:c4:08:32:1f:b8:75:52:7a:dd:f8:3b:77:85:
                    9c:99:76:58:77:e6:f2:fd:6c:09:26:ad:44:70:d0:
                    98:4a:b9:30:f9:7b:75:5a:0e:90:ea:a6:22:00:56:
                    b3:0a:d0:3c:f8:55:3f:1c:fa:cb:f0:2b:1f:b2:c4:
                    41:ae:32:ee:e0:2f:3e:64:0a:c3:17:ef:8d:87:1c:
                    e9:a6:1a:3d:77:db:70:d1:c8:59:a0:c1:99:31:25:
                    eb:6a:8b:17:96:95:bb:06:28:90:4c:fc:92:6d:36:
                    bf:97:f9:bc:de:a0:97:11:35:a3:9c:7b:bd:92:0a:
                    3e:b3:ec:3f:26:a5:57:e9:f0:5e:6d:30:b2:74:6d:
                    d1:15:6a:08:46:8b:fb:bd:a6:84:76:df:9e:0a:ba:
                    00:8f:14:63:8b:5c:18:5b:37:c3:f6:9e:de:72:52:
                    7c:89:a0:34:0b:8d:d5:45:4c:43:07:b4:20:a5:2a:
                    46:3f:5b:67:21:f8:4c:e0:57:71:12:dc:8e:f0:33:
                    f3:9a:91:0b:1b:d1:17:35:52:96:e9:b0:67:83:ae:
                    c1:97:d8:af:87:13:3d:0a:88:f7:4d:de:e4:bb:84:
                    5a:76:75:22:8a:45:0f:ba:d2:28:26:de:5e:1f:8b:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0B:DE:DC:00:78:6D:FA:23:DA:78:C4:BF:CB:A1:63:0B:C8:0E:92
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:43:af:c6:a8:c5:f9:b2:dc:2f:fa:f8:a1:f6:26:f3:5f:
         db:7e:ba:a8:31:26:20:b1:55:64:75:77:59:d1:62:96:0e:fe:
         1e:0f:f4:29:c7:f6:71:ce:a4:bf:80:6e:f9:08:68:24:cb:d5:
         78:71:5b:9f:cc:66:19:89:2e:0f:4a:38:cb:4d:89:37:2b:2c:
         43:87:6d:94:a3:84:d5:95:5d:cd:3b:48:87:4c:8c:fa:41:e4:
         bd:60:3b:6e:b9:64:10:d3:e3:43:3f:b0:19:1a:05:35:62:b4:
         ff:a9:f1:b9:54:85:9b:18:23:81:86:95:69:d5:de:dd:9c:a8:
         c1:cc:8a:03:e5:ce:5a:2f:b6:5b:66:2a:ee:78:cf:d8:42:0d:
         2d:08:28:7a:18:7a:12:36:84:c0:53:dd:d0:6d:47:88:59:ce:
         01:d4:74:ab:e1:da:88:3a:e4:00:f7:5b:ef:d1:1c:43:55:21:
         05:d3:fc:a5:dd:a0:25:e5:2e:71:fc:a6:e2:48:b6:01:7c:b3:
         00:7d:72:0e:82:b2:d8:92:e4:81:71:b9:5c:aa:8e:5f:b9:32:
         4a:39:17:4c:3f:99:d0:8b:93:20:83:66:fc:0b:62:95:49:c3:
         bb:e1:09:42:a6:70:2a:fc:dd:b6:61:29:71:30:a8:58:84:49:
         9f:97:fd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----