Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File: H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier: 3JCm02bIavnsLlRrK+hTLawmPmZJZiwNJie28Yax5ew=
Subject key identifier: 64:C8:97:46:30:93:27:B5:28:6B:DF:80:6C:9C:EA:64:7E:45:7A:CC
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer: /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial: 0238
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number: 0235
Signing time: Mon 20 Oct 2025 04:16:59 +0000
Manifest this update: Mon 20 Oct 2025 04:16:58 +0000
Manifest next update: Wed 22 Oct 2025 04:16:58 +0000
Files and hashes: 1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: 3CUN9R2DV7waRVPG20IZ0EwMYgsC8h9P8GPv/a+beuM=)
2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Validity
Not Before: Oct 20 04:16:58 2025 GMT
Not After : Oct 22 04:16:58 2025 GMT
Subject: CN=68f5b7bb-f713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:94:7e:f0:93:6f:22:8f:46:73:34:66:90:
ed:5d:08:6a:02:49:8f:95:a7:c6:d0:7d:6f:ad:ef:
a0:84:2f:63:36:31:fd:c6:04:25:e6:ad:e3:93:27:
ea:32:e0:e1:bc:bf:57:cc:f3:07:3d:79:ae:af:fd:
2f:85:3f:18:30:3f:9a:07:4c:fd:fa:72:12:2f:9f:
7d:1f:70:38:68:55:fc:6f:95:ca:15:17:fb:c3:ce:
35:8a:b2:bd:f4:eb:1f:2d:bb:71:05:28:d5:75:31:
0d:17:10:66:4a:33:a7:f3:0b:11:53:df:59:75:d8:
6c:9e:ca:bb:cb:15:98:25:7d:e7:2b:14:2c:c5:f7:
31:54:e1:3f:a4:65:14:68:25:b9:d4:5e:b1:d1:56:
c6:a2:7a:cc:70:6c:a6:29:58:8f:09:f8:6a:b1:69:
a8:f2:c2:b5:a4:78:41:ff:c1:10:8b:66:5c:00:17:
85:e3:47:79:2e:bb:df:2b:bf:84:d9:7c:51:c4:4d:
d5:02:df:ec:f0:e7:8c:2a:00:67:e7:70:a1:77:6b:
36:f8:b2:f8:c3:33:78:c9:c0:00:9b:67:6c:ae:0e:
d2:19:31:33:a0:00:64:4a:e0:79:a7:f1:b1:5a:d6:
46:a0:2c:79:2c:2b:fd:6a:ed:ac:ea:96:3c:6f:dc:
18:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:97:46:30:93:27:B5:28:6B:DF:80:6C:9C:EA:64:7E:45:7A:CC
X509v3 Authority Key Identifier:
keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:d5:4b:8e:39:6f:79:aa:d4:b7:c7:fa:31:49:ad:90:da:
d4:a3:cc:30:61:34:48:92:14:69:28:52:f9:d2:0f:ae:e1:8f:
bb:e2:0f:74:f5:29:0a:53:62:d7:65:f4:31:48:f5:84:7f:15:
b8:72:f8:62:bb:8f:53:7e:49:9b:5c:e9:2b:04:b9:21:f8:ae:
32:c8:72:78:c4:5c:89:ef:2a:e5:02:e2:de:4a:42:02:57:c2:
af:ec:3b:88:aa:a4:8c:27:5a:6c:80:f3:30:e7:2c:94:86:19:
31:47:67:9d:aa:9a:77:8d:6c:d1:3e:c6:0a:77:b6:67:18:0d:
ca:31:be:84:87:b4:a1:47:d7:88:47:91:20:38:e6:44:04:8a:
51:cc:25:ef:23:9a:5a:01:21:89:18:32:da:8b:d0:2b:93:35:
07:d6:cc:89:4b:23:44:0f:be:df:50:d1:39:01:3a:a6:80:e3:
12:52:9c:2e:30:47:c3:8e:76:5a:26:84:3e:c7:ba:b5:02:86:
9e:10:0d:b8:2f:b5:d9:db:61:f7:61:1c:0f:46:57:0d:3b:60:
34:e5:46:aa:ce:bf:33:6d:f4:37:ee:6a:64:7e:ab:3b:dd:ea:
da:6b:d1:89:c7:43:1c:33:57:c1:f2:01:9d:7f:b8:e3:a3:35:
2e:0f:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:28:38 2025 by rpki-client