Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          VWnyTCVggpcqrjfj0iXR7thVljaN1jlTF/6kSpk6t7M=
Subject key identifier:   EA:FC:1D:FC:E5:5C:5D:5D:BC:1E:4C:18:F1:A5:AB:47:00:32:E0:58
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       03AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          03AA
Signing time:             Tue 28 Jul 2026 03:59:36 +0000
Manifest this update:     Tue 28 Jul 2026 03:59:35 +0000
Manifest next update:     Thu 30 Jul 2026 03:59:35 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: VYwl+wkCJt/gVsKVkLUBhSpX3kdsV4TdOVGWUADKdXY=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Jul 28 03:59:35 2026 GMT
            Not After : Jul 30 03:59:35 2026 GMT
        Subject: CN=6a682927-e84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:01:81:ba:3c:3e:41:e3:90:bb:c6:6c:46:
                    57:b6:c6:e2:e5:87:68:50:fb:d0:b3:bc:7d:23:3d:
                    7c:8f:77:0e:44:25:6e:bb:21:d3:3b:c6:56:0e:9f:
                    3b:0d:4c:61:7b:e5:c2:1c:dd:a7:7b:fe:63:91:f7:
                    58:84:13:da:16:cc:41:28:4e:66:0c:50:fa:4b:ae:
                    6f:df:2b:cc:df:3f:b5:ec:0e:94:62:3d:10:8a:9c:
                    4b:77:44:30:72:29:33:57:8a:24:81:cf:f6:3f:40:
                    07:7d:3a:f3:33:3b:0a:d3:c3:a8:9e:c9:e2:7a:25:
                    60:08:9b:0d:47:6d:b4:b3:33:c7:61:0a:7f:87:7b:
                    8b:01:6f:67:64:7b:bc:6b:f4:b0:ca:a1:ec:ba:a3:
                    29:9b:69:20:12:53:85:4f:27:af:2d:93:8f:98:90:
                    68:c8:5f:4f:24:40:da:7d:60:7b:5e:37:17:7e:5f:
                    c7:90:a4:cf:2b:4c:66:f0:db:5b:37:f1:fa:9b:f2:
                    4f:ce:b0:72:3e:1b:2e:dc:3e:f5:aa:49:e5:83:0e:
                    7e:88:1f:df:09:7f:42:7e:29:94:c3:20:15:28:22:
                    64:1f:74:6a:12:6e:cd:b3:5c:f4:45:86:f2:89:e8:
                    f2:52:37:07:f6:0d:d1:2b:4c:c4:52:e2:11:53:7d:
                    46:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FC:1D:FC:E5:5C:5D:5D:BC:1E:4C:18:F1:A5:AB:47:00:32:E0:58
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:2d:2b:14:a5:72:30:41:a7:eb:de:e5:0a:e9:2a:5b:97:a3:
         6f:a6:a4:bd:11:9d:19:25:44:ed:dd:4f:e4:cc:c1:b2:75:47:
         aa:d1:8c:5e:15:8e:07:cd:9f:bb:b3:5d:e7:06:e4:57:15:36:
         40:cf:66:50:9f:ca:58:1a:6f:0c:b4:6a:12:89:9d:db:fd:02:
         7e:73:b6:ba:b7:3e:bc:e1:af:d2:c5:77:2a:f9:6a:39:54:30:
         b0:6a:c5:37:0d:84:73:93:b8:bb:db:0c:45:04:1b:be:8a:5b:
         ef:c1:40:ce:1d:d7:88:2a:19:e7:76:74:c0:57:d0:e6:88:bb:
         98:9e:e1:32:7b:19:f2:9a:08:c6:0e:7b:3f:3a:b2:76:eb:e0:
         1f:95:f8:1d:b5:44:ad:9c:c9:4d:c1:8d:c5:54:5d:34:cc:d5:
         b0:c8:52:22:4b:00:10:a3:12:52:e3:18:c3:bc:5b:90:dd:10:
         1b:f8:ae:e8:4e:5b:ca:3e:57:1e:ac:a3:c3:4d:8b:81:7a:a6:
         b8:e2:5e:de:66:71:5b:f0:2a:96:59:44:df:9a:52:74:be:1c:
         24:d2:d4:f0:71:9a:31:f7:e1:df:5e:e0:04:d4:4c:ea:c0:05:
         69:44:63:ad:02:ce:86:d8:dc:ae:78:3a:22:43:e8:e2:62:fe:
         9f:f6:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:35 2026 by rpki-client