Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
File:                     ePyy5tDIIPu5vVgQYfogSi1R9BI.mft (raw, json)
Hash identifier:          sMRdhZ1bR5XxNiSggttYiCAj3Czq0KZWSpXWmvQe6v4=
Subject key identifier:   91:7D:83:C4:E3:0B:57:7C:67:08:1A:D8:B4:47:DF:1E:DC:32:8F:99
Authority key identifier: 78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12
Certificate issuer:       /CN=F36FABDEAF/serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
Certificate serial:       0472
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
Manifest number:          0471
Signing time:             Sun 25 Oct 2026 03:45:15 +0000
Manifest this update:     Sun 25 Oct 2026 03:45:14 +0000
Manifest next update:     Tue 27 Oct 2026 03:45:14 +0000
Files and hashes:         1: ePyy5tDIIPu5vVgQYfogSi1R9BI.crl (hash: 8yPT3U3A8ItCnabR71lu4+7cAyuOXxGhokgEeFftm8A=)
                          2: D64EDDEE6E5F11EEBF42781C4AD9E6FC.roa (hash: wwS9H3v6Oq2KT+bOS8yPt+2S5/l9UTYbItXO4BiUcNQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1138 (0x472)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FABDEAF, serialNumber=78FCB2E6D0C820FBB9BD581061FA204A2D51F412
        Validity
            Not Before: Oct 25 03:45:14 2026 GMT
            Not After : Oct 27 03:45:14 2026 GMT
        Subject: CN=6add7b4b-056c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:0e:37:21:38:26:8c:f0:a9:a0:6f:ed:b7:
                    1e:a0:0d:cf:ef:07:df:b5:87:e3:18:54:6e:ca:c5:
                    13:f5:d3:18:60:11:dd:72:cc:88:26:2d:b5:5d:2d:
                    51:f3:8c:f6:4f:e6:89:8b:06:6b:2b:64:98:97:09:
                    38:42:a1:6f:d0:ca:da:79:1c:3e:16:d2:8c:10:c8:
                    da:f8:53:78:5a:0a:3a:14:e3:59:fe:78:b5:32:98:
                    36:c9:2f:aa:9a:bd:2a:e2:b2:c0:03:a7:ef:63:e9:
                    27:0c:b4:6e:e3:3f:63:fe:64:2d:5d:4a:d5:8f:c3:
                    c4:59:4f:67:c4:a1:23:4a:5b:57:76:6a:3f:6f:8f:
                    41:cb:cd:8d:63:6a:ae:b2:32:ec:e2:d3:a7:98:76:
                    39:ab:3a:31:25:77:34:a4:dd:3f:d9:3d:c8:9b:fd:
                    58:cc:b6:49:4b:29:6b:cc:10:bd:79:9a:fe:95:df:
                    8b:3a:ac:b1:da:47:65:d6:87:29:a8:04:7f:6b:29:
                    f5:07:d2:49:2b:f7:b0:21:ac:aa:47:d0:8e:f6:90:
                    fb:fd:3b:85:c7:d9:5d:30:4c:9e:5b:43:ad:52:d3:
                    05:e2:dd:ca:a0:bb:b0:b2:70:e2:71:48:b6:b3:2a:
                    60:8a:1d:dd:83:0f:82:08:49:d4:08:fd:46:78:87:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7D:83:C4:E3:0B:57:7C:67:08:1A:D8:B4:47:DF:1E:DC:32:8F:99
            X509v3 Authority Key Identifier:
                keyid:78:FC:B2:E6:D0:C8:20:FB:B9:BD:58:10:61:FA:20:4A:2D:51:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePyy5tDIIPu5vVgQYfogSi1R9BI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FABDE/24291E08671711EE96B48F654AD9E6FC/ePyy5tDIIPu5vVgQYfogSi1R9BI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1b:81:d6:8a:3e:55:69:bc:f7:19:74:7a:4d:7a:78:85:59:
         ce:3d:33:d0:91:3e:7a:43:fe:66:92:33:aa:16:33:7c:50:d3:
         d1:63:ad:4f:e0:52:97:3f:d8:91:f3:81:ec:1f:9f:33:b1:ca:
         73:b7:c8:6a:5e:23:1a:d0:3f:28:9c:57:e5:ee:64:f5:1c:06:
         55:b1:1a:e3:55:93:18:f4:f6:c9:d5:65:f1:70:7b:c8:f4:42:
         71:c9:9c:f7:60:5f:b7:87:d1:85:79:ff:0f:be:26:fe:32:29:
         6f:f0:83:23:23:55:22:3b:ea:c9:8a:de:55:6f:78:7c:e6:77:
         d7:b7:90:c9:97:8d:d7:85:52:5d:3f:0a:c6:ac:dc:50:d2:a1:
         56:a6:fb:11:e0:24:1a:10:d7:70:a2:b4:f2:8c:78:f3:80:aa:
         2e:dd:a0:cd:80:db:6f:e1:10:3a:f3:70:df:86:04:ae:95:88:
         98:c6:f7:20:3b:c4:02:a1:0b:c2:5e:65:e4:50:2f:04:a0:d9:
         24:6e:5e:c5:21:8b:cd:f2:47:02:3b:f1:b5:42:fa:7f:fc:c2:
         45:88:14:fa:bc:7d:17:c8:c9:75:05:c1:cf:80:fd:9b:a0:d0:
         80:23:11:02:b6:96:76:34:f6:ef:82:4c:3c:27:24:7c:cf:55:
         2a:d9:cb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----