Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          CT+QVBgcIAoZFAOhdWvntcKCna4pljYLo3sxmYVqU+Q=
Subject key identifier:   AE:78:F2:8F:E9:B3:6F:FE:C2:08:7E:C7:C5:EC:BA:20:C2:17:D5:BA
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       083C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          083A
Signing time:             Sun 27 Sep 2026 02:00:39 +0000
Manifest this update:     Sun 27 Sep 2026 02:00:38 +0000
Manifest next update:     Tue 29 Sep 2026 02:00:38 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: RsBn/E13VU+08hD8K+v9SCcgaC/WK3l+S+sBQVdK2u0=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Sep 27 02:00:38 2026 GMT
            Not After : Sep 29 02:00:38 2026 GMT
        Subject: CN=6ab878c7-8be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a6:12:66:c3:2b:33:ae:36:50:39:80:21:dd:
                    a1:29:dc:10:10:00:d1:3e:d2:2c:e3:64:02:5c:34:
                    a4:ee:ea:b8:30:65:c7:27:c2:77:29:d8:c8:98:48:
                    76:48:aa:50:28:36:0c:84:6f:9a:6d:81:9b:b2:30:
                    1c:2d:38:9a:67:ec:6d:bd:9f:44:1b:19:d6:f5:b7:
                    1f:c8:3e:22:f5:af:3f:6e:5e:72:6b:73:47:87:55:
                    37:b2:df:1b:a8:a8:bc:90:92:c2:71:44:96:2f:69:
                    29:55:29:57:af:a8:aa:55:2c:77:e6:e3:4f:15:20:
                    d7:92:a1:7a:02:7f:07:a8:08:d9:84:20:bc:6d:7c:
                    06:9e:83:9d:f0:52:c7:46:07:f6:c9:4a:5c:ec:21:
                    04:a1:4f:93:67:b8:ca:ad:86:71:98:c8:9b:e7:3e:
                    01:a9:34:7b:75:0a:ef:76:39:a9:e7:9d:e9:9f:ef:
                    63:14:33:f6:ad:5a:40:59:54:6c:60:ae:70:67:39:
                    3f:17:7f:81:cd:03:fa:83:ec:bc:a9:ec:38:62:10:
                    9d:00:ef:14:69:b1:59:ab:90:8d:69:7b:07:b2:f0:
                    db:95:30:b2:f8:8b:42:c1:e7:d2:27:79:d2:ce:fc:
                    02:11:34:3b:7a:0d:d1:85:c3:20:51:2d:b0:dd:32:
                    e9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:78:F2:8F:E9:B3:6F:FE:C2:08:7E:C7:C5:EC:BA:20:C2:17:D5:BA
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:da:38:51:18:8f:2c:6f:14:cd:01:bd:c1:ab:60:98:86:
         e4:36:20:c8:b2:6f:85:92:88:43:25:c4:6a:24:cb:e9:4b:16:
         28:9f:e1:92:6c:e6:df:cb:e2:4e:b0:32:22:87:27:30:ad:cb:
         7a:f7:f4:4f:e4:1b:98:60:ab:aa:7d:91:ef:9a:9d:5f:d2:2e:
         0a:10:3c:d0:c2:4b:bc:82:d3:5a:14:e6:12:f5:8a:77:d3:5f:
         d7:23:73:76:72:70:83:3d:99:d1:4e:de:f6:84:c4:07:ce:8a:
         32:d4:b0:2b:da:f0:3c:59:35:76:e9:44:c1:02:e7:91:60:30:
         a4:a8:5e:df:f3:1d:1d:ee:db:91:f8:e8:67:65:d6:b9:a1:94:
         f2:f2:1c:d6:bc:ee:bd:3f:6e:bb:0f:45:7b:12:36:cf:45:42:
         4c:6c:02:ef:f4:6d:02:76:d8:dc:f5:f6:0b:4d:1e:0b:4e:6e:
         52:25:8f:d5:3d:be:96:ef:15:97:75:01:8b:1f:e5:5b:e5:97:
         26:dc:23:9a:a9:e7:d4:ad:7f:86:85:15:ee:3b:08:af:fa:53:
         38:89:34:86:d9:b6:0e:5b:85:8e:b9:89:57:5f:ce:b7:88:bf:
         3e:2d:74:66:1c:0e:e4:4f:5b:9b:5f:f4:6e:07:6f:6a:19:d5:
         4e:95:29:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODlFMTJBRjExMC8GA1UEBRMoMTI5ODkyQjU5QkVFOTBCRkE0NjhFNTQ0NUM0QUQx
RDAxNjlFMTFEOTAeFw0yNjA5MjcwMjAwMzhaFw0yNjA5MjkwMjAwMzhaMBgxFjAU
BgNVBAMTDTZhYjg3OGM3LThiZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiphJmwyszrjZQOYAh3aEp3BAQANE+0izjZAJcNKTu6rgwZccnwncp2MiY
SHZIqlAoNgyEb5ptgZuyMBwtOJpn7G29n0QbGdb1tx/IPiL1rz9uXnJrc0eHVTey
3xuoqLyQksJxRJYvaSlVKVevqKpVLHfm408VINeSoXoCfweoCNmEILxtfAaeg53w
UsdGB/bJSlzsIQShT5NnuMqthnGYyJvnPgGpNHt1Cu92Oannnemf72MUM/atWkBZ
VGxgrnBnOT8Xf4HNA/qD7Lyp7DhiEJ0A7xRpsVmrkI1pewey8NuVMLL4i0LB59In
edLO/AIRNDt6DdGFwyBRLbDdMumZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrnjy
j+mzb/7CCH7Hxey6IMIX1bowHwYDVR0jBBgwFoAUEpiStZvukL+kaOVEXErR0Bae
EdkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5RTEyLzZDNjA5NjhBNkEzODExRUJBN0M4OEMzMkY4QUVBMjI4L0VwaVN0
WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VwaVN0WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODlFMTIvNkM2MDk2OEE2QTM4MTFFQkE3Qzg4QzMyRjhB
RUEyMjgvRXBpU3RadnVrTC1rYU9WRVhFclIwQmFlRWRrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8GNo4URiPLG8UzQG9watgmIbkNiDI
sm+FkohDJcRqJMvpSxYon+GSbObfy+JOsDIihycwrct69/RP5BuYYKuqfZHvmp1f
0i4KEDzQwku8gtNaFOYS9Yp301/XI3N2cnCDPZnRTt72hMQHzooy1LAr2vA8WTV2
6UTBAueRYDCkqF7f8x0d7tuR+OhnZda5oZTy8hzWvO69P267D0V7EjbPRUJMbALv
9G0Cdtjc9fYLTR4LTm5SJY/VPb6W7xWXdQGLH+Vb5Zcm3COaqefUrX+GhRXuOwiv
+lM4iTSG2bYOW4WOuYlXX863iL8+LXRmHA7kT1ubX/RuB29qGdVOlSnt
-----END CERTIFICATE-----