Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          oScjzFGazFfmHZuiX7RWzakMyKwTrBhmdTqJFrA3m0A=
Subject key identifier:   F8:4C:4C:79:77:DA:A7:C9:45:5E:99:4C:88:2F:E6:47:A3:9B:D7:56
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       0798
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          0796
Signing time:             Fri 17 Apr 2026 01:59:22 +0000
Manifest this update:     Fri 17 Apr 2026 01:59:21 +0000
Manifest next update:     Sun 19 Apr 2026 01:59:21 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: YuLwH9M0kyEt2vyY3WexNGnWrk45knZQnVK3T9atbsk=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Apr 17 01:59:21 2026 GMT
            Not After : Apr 19 01:59:21 2026 GMT
        Subject: CN=69e193fa-7a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8c:ff:2f:c2:af:12:18:87:6c:97:0a:2d:82:
                    7f:e7:c2:93:50:32:7f:31:3e:5b:cc:06:fd:bb:fa:
                    8d:11:4f:5c:8a:39:83:68:4e:4e:93:77:1d:d6:83:
                    f0:ac:a3:59:36:0e:17:be:28:9e:05:f0:bc:74:4e:
                    ef:23:2f:a6:6d:e0:77:92:ad:3d:a1:e1:5c:e2:04:
                    30:3c:20:a2:a2:af:1a:e8:58:8f:75:b9:d2:f8:cb:
                    3b:5e:82:f3:53:9f:e6:7a:d2:3d:72:5c:d2:fe:8d:
                    ed:7a:70:72:42:3b:e8:f0:82:12:8c:26:c0:31:f6:
                    e4:b3:09:b1:57:ff:20:40:58:3b:aa:ed:d5:87:29:
                    76:6b:11:0e:84:d5:e1:11:34:ea:06:92:c3:b2:21:
                    84:ca:60:99:6e:07:ce:83:64:9d:4f:1e:87:63:a5:
                    65:7b:dd:06:52:e4:6c:88:ce:93:79:49:f9:97:6e:
                    c6:b8:50:3f:1c:98:fd:62:44:ba:8e:3c:b6:0a:b0:
                    80:ae:b9:c0:2b:f0:f0:50:3f:f9:18:69:68:db:b5:
                    17:0d:13:c9:81:5a:2e:9c:4c:28:2a:64:bc:fe:79:
                    0d:80:f5:c8:d4:04:f4:c6:22:98:99:05:c1:7a:5d:
                    fe:ad:61:59:76:78:f0:9b:f1:ab:b0:de:ba:23:7b:
                    a8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:4C:79:77:DA:A7:C9:45:5E:99:4C:88:2F:E6:47:A3:9B:D7:56
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:c0:34:b4:2f:87:71:04:96:b0:6b:de:5d:c8:da:e3:c0:c7:
         93:05:9e:42:b8:11:19:1f:e8:cd:f2:de:10:b4:cd:94:6a:3c:
         b2:52:48:5e:6f:44:9e:df:9c:97:54:8a:9c:db:37:66:14:22:
         e9:b1:e8:cd:4e:96:b3:0a:9c:10:66:8d:8d:d0:f1:da:8a:5f:
         45:d4:2f:51:2b:f1:7d:52:d5:dd:85:34:5d:72:b5:df:5b:a9:
         9b:28:08:db:1d:83:7b:19:0a:c5:dc:a0:25:1e:0d:5a:8e:aa:
         cf:63:19:0b:ed:f3:99:40:12:f9:ea:bb:a3:48:1a:95:74:55:
         a3:f8:59:39:21:e2:1d:aa:ef:f7:21:f4:aa:53:61:32:85:26:
         7a:9e:e0:8b:ca:e3:51:70:0c:ea:54:ab:06:49:39:4c:0a:2e:
         8b:33:30:aa:d9:3c:3b:e7:35:06:f5:55:3b:61:3f:94:12:0b:
         57:f2:56:3c:20:fd:da:28:30:58:a4:bb:1f:03:21:88:3f:9c:
         c1:85:19:77:ca:9f:a1:25:0a:d6:f6:9a:a8:f6:ec:02:c6:78:
         bd:65:01:40:f8:eb:6a:4b:3d:bc:57:a9:d0:b9:64:51:2b:c2:
         f4:7e:fb:e6:93:7d:81:01:9a:db:6e:8a:4b:15:d5:b2:04:f5:
         60:15:a6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:48:20 2026 by rpki-client