Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          ChTwB2bXF0Meb6qNAO1+48rVDZ2p+zRl1k5y+Tx6fd0=
Subject key identifier:   14:3B:FB:16:B9:D6:8E:64:92:B2:6C:15:3F:63:B7:2F:5F:CF:3A:31
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       0808
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          0806
Signing time:             Thu 06 Aug 2026 02:00:04 +0000
Manifest this update:     Thu 06 Aug 2026 02:00:03 +0000
Manifest next update:     Sat 08 Aug 2026 02:00:03 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: 3oLpzhVhiomwqvY5+K+8lVO81YFe1CEIbydq1SfKPuw=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Aug  6 02:00:03 2026 GMT
            Not After : Aug  8 02:00:03 2026 GMT
        Subject: CN=6a73eaa4-f3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:b5:80:80:d9:9e:34:88:4e:4d:1d:57:e7:
                    80:e2:ef:88:f3:97:f1:db:80:5d:0e:3d:42:ea:ab:
                    3d:c8:1e:eb:8a:05:12:ee:a0:6f:63:65:11:2f:b1:
                    14:f0:09:41:c3:a6:95:08:12:ea:a0:52:d0:81:d2:
                    ca:6f:4e:85:9d:1c:20:3d:e6:37:f8:80:3e:f0:f5:
                    3a:72:c0:65:ef:45:ef:74:5a:b0:c9:d7:2d:2d:a1:
                    eb:3a:18:4d:69:18:3d:e7:4f:87:76:4e:ab:b6:a1:
                    1b:6a:55:af:e9:c6:61:ef:a6:b7:56:8a:aa:e5:77:
                    9c:bc:51:26:68:41:10:70:ea:ec:f3:67:62:05:7c:
                    d5:ca:d9:3a:13:a8:c9:4d:87:97:3e:a3:9d:a8:b2:
                    7a:1a:5f:69:07:21:25:b1:87:37:99:68:f0:de:8c:
                    ad:c2:46:49:5a:cf:b7:3b:b1:97:18:8e:fd:ac:55:
                    16:cd:a7:ee:0f:ab:8a:e6:e6:05:f7:64:d4:97:76:
                    78:8a:b3:2a:5c:00:7b:f9:02:f4:78:b4:94:7f:fd:
                    c2:d1:04:b8:f3:e0:64:7c:08:83:82:4b:99:dd:d0:
                    06:1e:d5:9a:66:4f:bb:1c:6f:0b:76:d8:44:9d:22:
                    27:64:3f:b9:58:ca:17:83:6c:c2:b6:2a:92:f1:91:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3B:FB:16:B9:D6:8E:64:92:B2:6C:15:3F:63:B7:2F:5F:CF:3A:31
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:29:81:13:21:a4:d9:96:e7:dd:29:f1:d8:bd:11:01:1d:
         aa:37:84:20:1b:a7:ff:c3:d7:0f:eb:27:59:61:00:97:4f:52:
         d3:e8:fb:e2:28:5d:20:9b:b8:43:59:8b:3e:98:88:0c:3c:3f:
         17:0d:ca:e1:56:3d:af:62:6d:5a:5e:9e:aa:59:14:6c:a0:99:
         26:60:7a:14:f4:d5:3f:40:63:d5:84:f5:47:a8:0c:37:59:85:
         c0:9a:2a:b8:85:f1:30:d0:9c:11:2c:4a:1d:c9:b4:5b:64:a0:
         a1:e5:3b:87:da:0c:fb:1f:70:87:0b:6a:d0:07:2c:a9:a9:c7:
         d5:4a:52:89:2d:af:6e:82:91:3b:9f:81:20:28:96:6e:42:18:
         4e:75:f4:ab:0e:74:c7:ed:61:4c:7a:2d:0d:17:47:ac:22:1f:
         69:0b:02:98:06:43:19:48:73:fc:62:e0:71:96:21:67:af:19:
         e2:db:e0:a5:87:be:31:17:3a:50:42:16:59:cb:ba:36:b1:5c:
         87:27:43:5f:aa:c3:22:ca:10:5a:bf:7a:f4:86:ba:8d:c5:e3:
         52:d9:75:36:d4:8c:8a:be:0f:29:3d:09:96:b7:68:f2:df:9d:
         cc:cd:64:f0:b2:72:39:f6:ed:47:62:7d:08:c5:06:42:9d:0c:
         26:0d:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:40:17 2026 by rpki-client