Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          VhSNWqnTLfWGXqA17sdIXl7ilUIvUS8XzmsKIAe0ZKE=
Subject key identifier:   06:63:71:80:4B:45:54:CD:D5:84:47:C8:B8:A2:14:6E:10:B9:9F:71
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       07FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          07F9
Signing time:             Fri 24 Jul 2026 02:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:14 +0000
Manifest next update:     Sun 26 Jul 2026 02:00:14 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: hTMWhE1VwZJSOo53cLKXFWvNGvyEy25IcPlcJ2VMhl0=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2043 (0x7fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Jul 24 02:00:14 2026 GMT
            Not After : Jul 26 02:00:14 2026 GMT
        Subject: CN=6a62c72f-491d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b2:f7:2a:97:74:dd:38:d2:aa:69:3d:e7:5b:
                    93:cf:1f:38:ab:91:96:9b:69:ce:59:55:3c:79:ec:
                    6b:74:35:ed:7f:21:7a:c1:11:c6:89:4b:22:a0:7e:
                    82:ed:a2:1d:19:08:7f:95:b9:d2:f4:cb:14:6c:bd:
                    82:64:34:e4:71:10:c0:c0:5f:8f:ca:81:9c:10:a8:
                    32:1e:a3:0b:33:87:a1:c6:aa:53:4b:11:fc:d0:38:
                    60:f0:a8:bf:e1:3c:0a:5b:4a:3b:33:12:70:7b:df:
                    7b:61:46:7e:2c:8f:1c:f8:bb:8a:25:b4:31:d8:8a:
                    1b:bb:a2:5a:1a:11:9b:45:4d:68:7f:cb:ab:1a:55:
                    d1:b0:ff:da:e1:95:7a:dd:d2:4f:ad:2f:c5:37:1c:
                    52:0b:ec:5b:ac:c9:f8:c9:59:15:c5:60:dd:ce:23:
                    7c:b8:ec:74:eb:3c:04:9d:96:a7:a8:5b:41:4f:24:
                    44:72:7f:a7:28:f8:51:0d:98:d0:c4:75:fb:e0:4e:
                    02:c9:9f:40:d4:05:e4:a1:54:c0:b7:c7:f8:4e:ab:
                    70:b6:09:f8:a8:f6:bb:e0:4f:77:bb:b9:d3:11:49:
                    ed:05:3f:45:8a:1c:56:23:e4:18:3a:7a:af:5b:80:
                    0c:83:10:39:c2:93:48:8a:16:37:7c:86:ed:61:a8:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:71:80:4B:45:54:CD:D5:84:47:C8:B8:A2:14:6E:10:B9:9F:71
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:85:5a:95:c1:73:6a:cf:c7:91:7e:65:d8:54:b5:98:51:63:
         07:9f:18:04:5e:1d:e2:54:5b:81:a2:84:bf:87:de:76:88:c5:
         5c:3f:8b:ae:a6:e9:b1:3a:4b:a9:25:47:81:09:dd:59:8a:e7:
         ab:85:58:0b:88:50:3d:8f:ca:ca:33:bd:45:15:f1:b6:2c:4f:
         de:c4:fe:ab:6e:f5:29:81:d1:3d:7f:50:0b:4e:6d:cf:64:1f:
         a1:9c:a6:13:18:4e:6e:b2:ad:44:6a:21:d1:65:2d:25:9f:16:
         75:1a:45:2e:30:14:ef:2d:dc:52:db:d4:14:a0:f2:7b:76:7f:
         df:c2:7c:ee:66:14:d8:94:2c:5a:93:dc:3c:3e:88:f6:81:23:
         26:53:6b:8a:eb:ad:5f:b9:d1:55:b3:bd:f4:e4:18:27:8d:8f:
         b0:1e:71:a2:87:f5:86:b8:f5:78:8f:aa:32:e1:a2:7e:9d:94:
         75:14:9a:30:25:dd:3b:a0:98:95:1a:d1:72:c1:b1:4d:df:32:
         68:da:a4:9f:e8:24:c9:0f:39:fb:aa:ff:d8:9e:25:2b:45:5b:
         75:38:47:6d:85:24:82:75:85:55:ea:40:a8:30:9a:06:c7:8f:
         65:c7:5e:af:30:1e:2e:51:3d:60:9c:2e:09:33:57:2e:74:82:
         1f:3c:95:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:52 2026 by rpki-client