Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          h05Df90QZ3uaZDDl+MQOvN9ufj6IFFEc0dpJ1wN3WZs=
Subject key identifier:   A3:EB:B9:67:B1:1D:2B:C7:F2:F9:2F:8F:7E:19:48:D0:8D:8D:2B:65
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       083B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          0839
Signing time:             Sat 26 Sep 2026 02:00:15 +0000
Manifest this update:     Sat 26 Sep 2026 02:00:14 +0000
Manifest next update:     Mon 28 Sep 2026 02:00:14 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: QSfNwNZoQBera1MG/PgWpqmgPN83SloPTCh4aatwzN8=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Sep 26 02:00:14 2026 GMT
            Not After : Sep 28 02:00:14 2026 GMT
        Subject: CN=6ab7272f-9527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:05:4a:7f:95:c8:69:f3:d8:c7:78:05:10:c0:
                    8f:b5:e8:8b:7c:f0:1b:8d:c5:83:4c:70:cb:f1:88:
                    92:06:d7:b1:b6:39:82:73:95:54:d7:4f:04:f4:be:
                    51:2e:eb:c7:7c:94:23:ce:26:92:78:e4:01:02:0c:
                    f1:b6:2f:16:c8:65:c7:66:2d:92:b8:38:04:48:71:
                    e1:e1:b5:1b:de:d3:a2:91:4f:e6:ec:85:ec:4e:68:
                    54:5c:f7:e4:29:40:0e:de:0b:9e:cb:61:7c:1d:22:
                    1a:0f:f3:b0:bb:ac:06:74:2e:cd:43:5b:4d:68:5d:
                    bc:8c:08:a3:50:27:31:9a:b0:23:bd:e6:c3:42:de:
                    99:65:80:4a:6c:bf:ae:64:a0:92:46:00:23:e0:02:
                    a3:6d:8b:ff:16:85:8e:57:50:d8:02:35:58:f1:07:
                    1b:0f:8f:ed:c6:b6:af:c2:a8:7d:c8:e4:bf:be:c1:
                    a3:4a:20:e3:57:9e:c9:41:90:47:dd:8a:09:0b:aa:
                    9b:4f:b7:36:83:80:57:95:2e:39:08:d7:d8:79:26:
                    23:9f:03:d3:f8:90:b9:ca:ef:63:80:4a:00:67:dc:
                    79:59:8c:42:38:b0:d9:8f:d9:e4:d2:6e:ea:64:70:
                    0a:12:32:06:b1:3e:7f:47:03:4f:29:81:9c:88:4d:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EB:B9:67:B1:1D:2B:C7:F2:F9:2F:8F:7E:19:48:D0:8D:8D:2B:65
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:46:5c:7e:95:3d:7f:4e:04:e7:6f:f6:b6:d4:59:e3:44:44:
         9d:e5:57:a2:95:39:8e:a3:40:f7:b6:c8:ef:73:27:9e:72:09:
         8a:c2:6e:09:ed:b0:88:48:05:f0:6d:dd:63:34:98:f0:ff:c2:
         6a:94:22:71:bd:b5:db:a9:76:23:29:86:dc:b6:12:62:14:c0:
         ce:e6:fa:c0:08:d8:b7:fd:5e:ab:f2:7c:59:c4:c9:35:36:dc:
         c1:9f:42:02:7e:ee:69:bc:fe:b6:31:da:6a:6d:ad:12:bc:cb:
         60:13:3c:db:06:11:10:ec:a5:ff:6f:80:2a:2b:c6:d5:e2:2c:
         5e:93:27:ff:15:fa:76:80:30:42:73:c2:10:ae:32:62:da:76:
         80:85:31:48:f3:d5:0e:e6:b4:05:09:8d:c1:1e:5c:46:01:78:
         e2:ea:fb:87:98:b7:c3:bd:81:fe:5b:fd:46:73:4a:e0:34:cd:
         3c:84:36:04:33:7a:df:97:5d:46:2e:70:f2:da:31:cf:8b:3f:
         7e:e4:e1:a9:8d:a2:f4:89:17:d0:cb:ac:d5:7e:4b:83:9e:d9:
         c3:50:37:de:1d:ce:22:dd:96:d5:cc:b3:fc:5d:de:7e:2a:01:
         fc:18:4c:94:33:4c:d5:25:c2:77:56:55:8b:6a:0a:39:ae:51:
         c1:39:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----