Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: 5BeV6MX8Eyg+RBD7HZCUCDkTXKP2UMwuSLNTgfGsLlg=
Subject key identifier: 66:F0:FD:D3:F3:6F:22:37:4D:12:0F:65:13:AA:87:E0:C5:09:7A:6D
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 59
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C6
Signing time: Wed 15 Oct 2025 11:40:10 +0000
Manifest this update: Wed 15 Oct 2025 11:40:09 +0000
Manifest next update: Sat 22 Nov 2025 11:40:09 +0000
Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: GUcZ7k7588rywKcVpxjRvrV4gohAPoWnriFwa/vf0EE=)
5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 22 Nov 2025 11:40:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Oct 15 11:40:09 2025 GMT
Not After : Nov 22 11:40:09 2025 GMT
Subject: CN=68ef881a-d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c5:cb:04:ec:29:c6:76:dc:07:b0:ef:0d:04:
40:5d:d3:87:ff:52:01:80:ea:ef:1a:70:55:34:bb:
4b:1f:80:d1:9a:18:99:41:fb:7a:57:4d:e1:32:e9:
5d:33:5d:69:93:f3:30:5e:e4:72:b9:54:0f:d1:39:
01:05:0d:cd:5a:a4:72:8e:b1:fc:71:30:d9:78:73:
c8:b6:bf:d1:51:50:d5:6b:14:65:90:d8:f0:fb:15:
06:63:60:45:e7:4e:d5:34:fe:a5:e5:f9:b3:e1:23:
5f:ed:be:46:71:bd:3f:66:9d:cf:9f:82:60:df:bc:
24:6c:ab:78:96:bf:70:ff:d9:99:74:b9:37:29:52:
da:33:29:ce:d7:a0:0a:74:89:b2:72:cd:e1:2d:d9:
8a:8b:50:99:98:d9:b3:20:16:b9:d2:87:75:7a:b0:
2f:47:0e:8c:45:7a:70:b5:d5:47:0b:41:42:70:cd:
86:a6:b8:11:59:08:1e:6c:f1:29:23:a2:c4:fd:f8:
e4:3b:6e:fb:fd:0e:00:26:d1:7d:1b:12:41:6c:a8:
01:5a:f4:7d:81:f7:28:69:7c:bf:a1:f4:75:1c:f7:
57:1c:19:a4:d5:2c:38:34:2a:60:78:01:82:27:4c:
3b:41:46:c2:72:6c:3c:19:c8:18:96:02:9d:18:2d:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:FD:D3:F3:6F:22:37:4D:12:0F:65:13:AA:87:E0:C5:09:7A:6D
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:c6:40:97:a4:d7:98:ce:7b:dc:cd:cb:f2:a4:23:91:80:91:
14:55:dc:d0:67:b5:ae:6a:64:7f:e2:a6:a0:bf:f0:03:3b:29:
ea:9b:a4:e2:a2:67:1f:88:1c:82:8a:1c:6b:8b:b4:6d:80:0b:
56:d2:1d:e5:c1:ad:c0:27:d4:c4:29:c7:3a:09:7e:09:f1:4c:
0e:8a:25:0a:30:5f:9b:e7:e4:70:f9:a1:be:c9:e8:b1:3e:6f:
d6:f6:8c:c3:55:e4:47:58:8d:94:dc:74:a8:1b:28:85:17:4c:
c7:97:12:5d:c1:6a:9a:56:f5:8c:3e:4b:55:bc:b6:a5:66:b0:
15:e2:a8:32:61:94:62:07:8e:0a:1e:ba:25:eb:5a:c1:2c:ec:
5a:0f:83:a2:f2:60:55:bb:57:70:ba:5f:6e:82:6c:fd:5e:14:
5e:e2:ca:b9:f9:16:f6:ac:d2:98:19:76:c6:21:e2:69:03:4f:
cf:12:4b:ac:db:09:df:76:bf:43:1e:8f:6d:9c:68:0a:14:53:
09:a3:42:15:e7:bb:2e:5c:4d:64:4c:f2:6a:70:5e:3e:e4:2b:
36:28:fe:7d:2b:8f:57:4a:d8:01:80:0d:6e:64:a3:14:29:b4:
11:aa:63:60:39:17:af:0b:da:f9:e5:3b:b6:80:50:c0:ed:18:
9b:61:46:2d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAjMSEwHwYDVQQDExhBZnJp
TklDLVJvb3QtQ2VydGlmaWNhdGUwHhcNMjUxMDE1MTE0MDA5WhcNMjUxMTIyMTE0
MDA5WjAYMRYwFAYDVQQDEw02OGVmODgxYS1kNzFiMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAr8XLBOwpxnbcB7DvDQRAXdOH/1IBgOrvGnBVNLtLH4DR
mhiZQft6V03hMuldM11pk/MwXuRyuVQP0TkBBQ3NWqRyjrH8cTDZeHPItr/RUVDV
axRlkNjw+xUGY2BF507VNP6l5fmz4SNf7b5Gcb0/Zp3Pn4Jg37wkbKt4lr9w/9mZ
dLk3KVLaMynO16AKdImycs3hLdmKi1CZmNmzIBa50od1erAvRw6MRXpwtdVHC0FC
cM2GprgRWQgebPEpI6LE/fjkO277/Q4AJtF9GxJBbKgBWvR9gfcoaXy/ofR1HPdX
HBmk1Sw4NCpgeAGCJ0w7QUbCcmw8GcgYlgKdGC2pLQIDAQABo4ICXzCCAlswHQYD
VR0OBBYEFGbw/dPzbyI3TRIPZROqh+DFCXptMB8GA1UdIwQYMBaAFOtoDzj11scb
tLEGuL0GWFAS2jG2MA4GA1UdDwEB/wQEAwIHgDB1BgNVHR8EbjBsMGqgaKBmhmRy
c3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBGNEQx
MUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFNYlku
Y3JsMEsGCCsGAQUFBwEBBD8wPTA7BggrBgEFBQcwAoYvcnN5bmM6Ly9ycGtpLmFm
cmluaWMubmV0L3JlcG9zaXRvcnkvQWZyaU5JQy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgbkGCCsGAQUFBwELBIGsMIGpMHAGCCsGAQUFBzAL
hmRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC82MmdQT1BYV3h4dTBzUWE0dlFaWVVCTGFN
YlkubWZ0MDUGCCsGAQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90
aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEBAIXGQJek
15jOe9zNy/KkI5GAkRRV3NBnta5qZH/ipqC/8AM7KeqbpOKiZx+IHIKKHGuLtG2A
C1bSHeXBrcAn1MQpxzoJfgnxTA6KJQowX5vn5HD5ob7J6LE+b9b2jMNV5EdYjZTc
dKgbKIUXTMeXEl3BappW9Yw+S1W8tqVmsBXiqDJhlGIHjgoeuiXrWsEs7FoPg6Ly
YFW7V3C6X26CbP1eFF7iyrn5Fvas0pgZdsYh4mkDT88SS6zbCd92v0Mej22caAoU
UwmjQhXnuy5cTWRM8mpwXj7kKzYo/n0rj1dK2AGADW5koxQptBGqY2A5F68L2vnl
O7aAUMDtGJthRi0=
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:03 2025 by rpki-client