Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File:                     ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier:          U+pAi2DhU+r+t4G/8ZIfjtLUHFn5d7blB0uyFq/j6H0=
Subject key identifier:   EE:A7:F6:04:94:65:36:11:37:7D:EF:AE:85:39:64:5F:E2:D9:CB:F1
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer:       /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial:       0408
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number:          0403
Signing time:             Sun 25 Oct 2026 03:58:55 +0000
Manifest this update:     Sun 25 Oct 2026 03:58:54 +0000
Manifest next update:     Tue 27 Oct 2026 03:58:54 +0000
Files and hashes:         1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: 9QJsKrqrwwa2NFXmfItrrc/bC35ETg6NKoGe8H5MQZ8=)
                          2: 87EA2752EF1E11F08B7866E1DAE4EC9C.roa (hash: Q4yvfJ2PRd3f4hAg3X9HjuGU4CPdrmiZC3xQ6gffVvs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1032 (0x408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D4AAF, serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
        Validity
            Not Before: Oct 25 03:58:54 2026 GMT
            Not After : Oct 27 03:58:54 2026 GMT
        Subject: CN=6add7e7f-f6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:1a:b6:be:15:2b:54:b9:69:e3:60:21:1f:
                    d9:f4:aa:d6:c8:1e:e7:ad:0a:88:d6:ce:9d:c4:be:
                    4e:58:33:78:bf:e5:1f:33:a8:a1:45:89:2d:a5:86:
                    5c:83:ec:aa:f0:12:1c:2c:85:05:ad:fb:f2:38:a8:
                    58:29:5a:e7:db:fa:3d:cf:15:77:7c:c7:44:3b:ec:
                    f9:e7:d1:fd:dd:34:a6:1a:6d:8e:94:2f:0b:e7:11:
                    62:a5:b4:59:c7:3b:53:e3:8b:39:7a:8c:04:d1:b8:
                    96:6e:8a:4b:25:49:1a:1e:36:2f:cb:22:e2:27:98:
                    32:c2:d5:45:b0:79:c9:3b:c6:bd:6b:50:76:bb:12:
                    c2:67:ef:70:2a:7c:cd:6d:af:74:19:0c:65:fb:0e:
                    06:b0:8d:61:fb:8a:4f:6d:aa:b2:e4:0a:0c:df:53:
                    8d:25:08:57:3b:79:db:a2:5f:01:d9:ee:ff:c8:ab:
                    ea:ab:02:17:98:28:91:ee:36:30:8a:3a:91:32:80:
                    5a:f0:b8:5b:c6:f3:2f:91:2a:20:29:35:e5:24:1a:
                    6a:0d:ff:21:b0:2c:c2:c5:3f:fd:4c:70:fb:4b:74:
                    c9:45:40:61:a3:fd:29:3c:bb:99:f4:86:36:a7:bb:
                    cf:b7:1a:bb:72:f0:31:f3:77:0a:0f:8b:a4:17:f8:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:F6:04:94:65:36:11:37:7D:EF:AE:85:39:64:5F:E2:D9:CB:F1
            X509v3 Authority Key Identifier:
                keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:b4:5d:a6:92:1e:8e:5f:fd:e1:be:73:c5:7e:90:88:30:
         9f:0e:f6:29:90:bf:1c:b6:3b:48:7f:f2:fb:02:3c:3d:d3:fb:
         94:6f:2c:4d:7e:ff:a6:37:68:7a:da:c8:9f:99:ed:5f:8a:c1:
         e4:3e:d9:83:1f:31:76:9c:8b:71:8e:a8:fd:98:8d:93:d5:d3:
         68:5f:f1:67:53:21:ee:27:fe:87:7f:44:1f:3c:21:15:25:2a:
         cc:17:4f:3d:f2:e5:db:03:00:9f:1d:3d:7a:75:09:b2:4d:d8:
         28:bb:a9:be:cd:98:9c:2b:50:1a:fe:99:77:34:3f:73:da:31:
         44:d1:01:b2:cf:a3:8c:28:71:1c:dd:a7:bf:e3:48:80:d9:6e:
         16:5a:2a:c9:2f:bc:e9:81:2a:e1:92:dd:a1:6d:99:75:db:83:
         65:95:a3:8e:b5:9f:0e:36:08:5f:5b:6a:97:c8:50:22:17:c3:
         8d:1e:3d:3a:b4:58:27:db:07:4d:1a:9f:cf:f4:fc:c6:53:d8:
         23:db:8c:7e:ed:19:56:67:c6:e5:3f:31:63:54:a7:d5:8a:c6:
         6d:89:ac:6d:1d:b4:c8:a4:7a:bb:48:cd:ea:7d:1c:fd:29:80:
         81:3a:fe:72:f4:e8:ac:e9:f1:ea:ec:92:ad:6a:1a:80:f5:c4:
         2d:55:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----