Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          v/4kVzfiSPuS64hfcWq/XfOQrNTFelMPEGBvSCVRAO8=
Subject key identifier:   03:13:D9:C7:D2:DE:E9:D4:65:D5:0B:62:1F:EE:CC:A9:38:FA:10:D6
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       0348
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          0343
Signing time:             Fri 17 Apr 2026 03:57:39 +0000
Manifest this update:     Fri 17 Apr 2026 03:57:38 +0000
Manifest next update:     Sun 19 Apr 2026 03:57:38 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: QvaK/vLzy+4SRvbZsm8noHqAMB5kMzBq6zugd+sh0Ps=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Apr 17 03:57:38 2026 GMT
            Not After : Apr 19 03:57:38 2026 GMT
        Subject: CN=69e1afb3-bd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:85:d1:92:7f:13:d9:3e:dc:54:05:73:77:
                    aa:33:b0:e3:9f:7d:d2:4e:f3:40:77:f7:3a:28:6f:
                    39:bb:79:0d:03:35:4b:a7:be:28:b8:80:ce:75:8c:
                    58:9e:86:ba:98:86:e2:dc:ce:a0:ff:1d:b0:1e:7a:
                    37:93:f7:59:5d:d5:47:29:c0:17:c6:53:d6:d5:0f:
                    ec:d4:4f:72:58:23:04:e3:73:b8:a9:82:66:73:92:
                    41:11:af:d7:25:25:c4:cc:6f:71:6b:d4:2f:e1:c3:
                    9d:7d:af:1c:3d:92:a6:bb:cc:11:e2:db:89:c9:78:
                    99:3b:20:f0:60:82:3b:1b:cb:37:c4:20:f4:3e:cd:
                    5e:08:d8:ac:33:b4:44:ef:1e:41:49:29:75:11:42:
                    08:52:06:61:bf:83:2b:bf:1b:e2:a7:35:fd:2e:50:
                    d3:c9:48:ec:f0:2e:4f:00:80:00:82:41:21:0e:ac:
                    cd:49:bc:42:e3:ac:cb:05:7b:66:00:d3:f8:63:a2:
                    ac:14:42:3d:4e:71:5f:84:91:7d:95:7d:33:82:81:
                    c2:98:6c:88:1d:21:1a:84:3e:1f:38:02:a9:18:1d:
                    dd:40:73:49:30:bd:d0:ed:4b:be:21:b3:b1:e1:9f:
                    d4:fa:a1:78:d6:d8:23:38:fb:2f:b9:6e:7e:9e:1e:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:13:D9:C7:D2:DE:E9:D4:65:D5:0B:62:1F:EE:CC:A9:38:FA:10:D6
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:06:78:a3:fb:5f:1c:96:13:bb:7e:9f:aa:6a:9c:77:fb:a5:
         59:c8:2e:de:78:23:6a:cd:37:c3:b6:53:64:e8:04:79:cd:b1:
         a3:1b:58:a5:54:4e:a0:1f:3c:d8:10:af:9e:fe:c0:2a:5b:9f:
         12:b1:7d:ed:4f:c4:10:82:c3:ec:05:cb:c0:7a:d1:66:95:82:
         1d:10:d7:71:cf:f4:ce:0d:cc:6a:38:f8:eb:30:d9:4b:ed:a6:
         ba:31:9d:77:59:7d:46:d1:ad:f7:f6:72:8c:11:f6:58:2f:49:
         30:eb:a9:df:7b:93:2d:fa:52:d4:f1:f4:5b:90:56:53:81:b7:
         ab:5c:0e:48:9f:01:5d:9b:c5:30:04:95:82:a3:b0:92:d7:21:
         02:eb:3c:77:0c:8a:56:66:fc:14:ad:6e:73:89:df:dd:c9:73:
         63:93:db:15:05:58:df:06:10:eb:c5:af:ab:ec:9f:d6:a1:ca:
         d1:27:e1:45:21:35:8b:cf:37:c1:72:d6:64:69:df:2b:c0:c9:
         82:9d:0e:cf:b7:89:17:1c:95:b3:ae:2d:17:5f:d4:f7:de:b3:
         ea:02:4a:ac:c7:d1:9a:72:0c:46:01:52:47:bc:a9:59:4f:4a:
         6b:73:0b:78:df:6a:af:c6:a9:bb:6c:b4:32:76:f3:2b:0c:77:
         c2:48:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:03 2026 by rpki-client