Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          Q+WnMMpKiKjQ5jRBi2CTC9D0yxkRTnSC/LqwB+v9Fuc=
Subject key identifier:   8F:BE:49:A5:4C:B3:2C:C8:C1:A6:A9:E4:8F:5A:4A:DC:9B:ED:D0:00
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       06A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          06A5
Signing time:             Sat 23 Aug 2025 02:07:13 +0000
Manifest this update:     Sat 23 Aug 2025 02:07:12 +0000
Manifest next update:     Mon 25 Aug 2025 02:07:12 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: jN14djHFr3aSMB/KsMiTJP5qHPeiP1y0RHy7OV5g2d4=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF, serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
        Validity
            Not Before: Aug 23 02:07:12 2025 GMT
            Not After : Aug 25 02:07:12 2025 GMT
        Subject: CN=68a92251-c05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:b8:95:10:21:6d:7b:de:cf:0f:58:f3:79:
                    73:2a:e5:52:b2:cd:72:2b:1f:36:0a:42:9e:47:1e:
                    ec:a7:ca:e1:7a:4c:cf:ca:dd:66:aa:b9:ae:49:f0:
                    0e:77:77:05:38:9c:cf:2c:8f:c3:80:25:32:0b:f5:
                    49:03:12:7e:d8:9a:61:25:94:20:8d:90:3a:96:a6:
                    47:31:23:61:c5:43:c3:81:be:f9:cf:ee:d1:38:bf:
                    52:16:f8:f2:19:30:e3:66:94:40:6f:4e:a4:14:a4:
                    a1:71:66:82:d4:74:ae:56:cc:fc:b1:f8:06:85:d8:
                    f4:3e:d6:18:76:ac:0a:c8:32:12:d8:33:e9:f8:56:
                    94:d0:90:b3:ce:5c:95:9e:a2:04:9c:12:e9:a9:28:
                    19:83:aa:41:d4:c4:9b:88:2a:96:c5:21:28:38:ce:
                    12:30:93:f2:4e:07:bc:63:2b:e8:3f:45:83:5f:c8:
                    bb:4c:3d:b1:21:1f:79:f1:cf:d0:70:5c:ee:ee:62:
                    91:5d:3c:0a:94:6d:f7:ad:69:56:43:1f:de:38:d2:
                    04:05:9b:5f:df:8b:19:74:60:f5:11:a8:21:91:90:
                    dd:82:89:fe:ef:87:6d:20:80:7d:5a:95:9f:d8:bc:
                    5d:6f:ab:e6:eb:ee:54:ac:bb:3d:ff:51:c5:81:be:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BE:49:A5:4C:B3:2C:C8:C1:A6:A9:E4:8F:5A:4A:DC:9B:ED:D0:00
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d4:cd:58:41:72:2f:6b:f9:96:56:b6:09:92:05:40:ec:9e:
         48:2e:cd:63:25:9a:4a:26:15:14:e9:f5:6f:3e:60:fa:f0:b5:
         a6:bb:31:de:4a:ef:09:d8:13:ff:d0:12:2f:61:fc:d1:ec:30:
         f7:cd:91:9f:35:b6:7d:4d:cd:88:ce:33:8a:bb:da:53:d5:10:
         4a:47:b5:79:61:7d:05:d0:16:cf:6d:e6:5a:0b:6c:9e:22:1d:
         f1:b5:9d:c5:b6:0d:4c:68:ef:e4:18:ff:a4:c9:c4:e3:68:20:
         07:2f:19:b5:4f:0f:92:b0:b5:d4:5f:64:e6:76:ae:8a:ea:f6:
         b0:3b:35:fd:29:5f:c6:aa:cd:84:1f:3f:f4:14:a5:59:a3:41:
         a1:97:d5:64:d1:7c:8d:fd:85:9d:d9:a5:e2:53:a8:fc:de:96:
         5a:67:eb:f0:0d:98:f1:52:bb:94:8f:de:58:c1:19:16:6a:fb:
         7f:96:83:62:e1:8e:19:59:7b:d8:b6:82:14:6e:2d:24:60:ae:
         ed:5c:42:47:29:ba:aa:7c:dc:55:96:30:91:da:1f:3a:64:6a:
         dc:c0:3b:db:9a:d9:ce:dc:b1:51:82:ba:0b:de:99:ac:f7:a6:
         43:d3:1f:4c:3b:d2:11:05:9b:e4:0b:8a:20:0b:37:09:d1:b8:
         03:d7:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:00 2025 by rpki-client