Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
File:                     3EJIwHspjM1rOedr4TDL0ntsigU.mft (raw, json)
Hash identifier:          HgnFzc3CZtWyeK2jrFLIHV9tkSo77hnyKnYwWzMw8TQ=
Subject key identifier:   8D:DB:32:EF:78:0C:37:8B:3B:33:41:76:D0:D0:0A:FA:52:3C:2A:9B
Authority key identifier: DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05
Certificate issuer:       /CN=F3629595AF/serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
Certificate serial:       04A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
Manifest number:          04A6
Signing time:             Sat 24 Oct 2026 03:40:33 +0000
Manifest this update:     Sat 24 Oct 2026 03:40:33 +0000
Manifest next update:     Mon 26 Oct 2026 03:40:32 +0000
Files and hashes:         1: 3EJIwHspjM1rOedr4TDL0ntsigU.crl (hash: Tnrmv7dyxrA9YXVKV8Fdd3gNHHEpV2dhUfXlSN7JX20=)
                          2: 054094BC3FF811EE81E5E73E4AD9E6FC.roa (hash: CjcOFUpPISl7bBWR1ojvxALzjkJgMeu4M9y6B2QpvRg=)
                          3: BE084E483D0C11EEA697D1784AD9E6FC.roa (hash: d3pcG470SIIHRtD4u5KMhKjkrzBNkxu/J9n0pkCnKfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629595AF, serialNumber=DC4248C07B298CCD6B39E76BE130CBD27B6C8A05
        Validity
            Not Before: Oct 24 03:40:33 2026 GMT
            Not After : Oct 26 03:40:32 2026 GMT
        Subject: CN=6adc28b1-6e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:ac:47:33:4d:d7:40:d3:2e:f5:61:c9:0d:
                    c2:bb:fb:f7:a3:e4:ad:ec:c8:32:37:c8:bc:52:f7:
                    ee:01:e8:a9:20:92:2f:23:c3:cb:f6:d8:26:12:39:
                    5c:65:f2:9b:b4:dd:a0:fb:af:67:bb:9b:0f:ff:2c:
                    e5:3b:60:72:46:0f:ab:6c:2a:ae:1b:98:af:91:da:
                    14:1c:d6:4f:52:32:76:40:c3:43:bb:7a:64:6b:54:
                    8c:8e:80:a3:a2:d4:cf:e7:46:1c:48:66:60:27:5b:
                    e0:0c:33:45:40:e7:9a:2d:72:d1:b3:3a:12:10:9d:
                    34:66:c3:cd:fa:a0:da:f5:1c:64:99:c6:33:db:18:
                    7b:5d:c4:bb:6c:4b:63:86:c5:80:8f:c5:35:7e:d3:
                    ed:9b:3e:4f:da:cb:a1:2b:d1:f0:79:85:1d:6d:0d:
                    63:e3:8d:0e:08:4a:0e:70:fc:17:09:c1:58:65:ec:
                    3d:c0:75:90:16:ab:4a:94:bd:1c:ff:52:20:82:b8:
                    3f:65:52:e2:09:de:a2:54:57:4a:43:30:27:2c:92:
                    ad:00:c1:5e:33:34:fc:0f:a6:b9:0e:d2:1f:91:37:
                    92:7a:4d:0b:94:ce:2c:06:f2:a4:cb:09:ec:d4:eb:
                    9b:6e:5b:1e:e7:f6:2c:25:81:d8:bd:77:44:40:c9:
                    ad:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DB:32:EF:78:0C:37:8B:3B:33:41:76:D0:D0:0A:FA:52:3C:2A:9B
            X509v3 Authority Key Identifier:
                keyid:DC:42:48:C0:7B:29:8C:CD:6B:39:E7:6B:E1:30:CB:D2:7B:6C:8A:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3EJIwHspjM1rOedr4TDL0ntsigU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629595/612C69843D0C11EE96559D774AD9E6FC/3EJIwHspjM1rOedr4TDL0ntsigU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:97:7e:f4:af:36:b7:04:f9:2a:db:0f:75:14:ce:94:8b:87:
         f7:b3:9b:7c:df:ca:86:3e:d4:ad:88:fa:42:1f:a8:8c:1c:cc:
         77:e8:be:59:7b:5b:4d:9c:d0:5f:86:bf:71:6c:06:12:fe:f9:
         05:f2:46:95:14:5a:5a:3b:4f:90:a8:cc:b2:92:9d:f8:14:02:
         d0:26:b1:87:db:71:18:a8:de:d0:9a:37:0c:f0:02:b9:7f:ee:
         ce:b1:2c:27:e5:67:41:1d:b8:2c:fd:82:f3:ad:00:21:a4:50:
         6d:65:34:fd:4f:11:02:27:4e:5c:b0:4f:e0:89:59:60:e4:1f:
         b2:d9:d3:13:52:b6:04:61:5a:78:ad:6f:cb:67:ca:81:e2:52:
         30:1d:86:8d:e7:d6:fb:18:95:c9:c5:c0:6a:23:d3:79:57:a9:
         d6:9e:d3:ae:d5:b6:55:38:7a:3d:56:11:e6:63:a8:e1:de:0e:
         e5:ff:22:e7:a5:55:e5:49:0f:25:81:5e:ae:74:ff:42:e4:9c:
         6f:e0:ee:67:fe:aa:f3:63:a6:56:c8:7c:e0:69:dd:8b:78:2c:
         4f:6b:01:f6:c4:50:6f:ac:c9:e4:22:ec:f0:22:f6:a3:ed:5f:
         fb:33:26:9b:12:cc:56:14:f0:2a:9e:4b:e7:dc:9f:a7:bb:08:
         bd:e6:35:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----