Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: tO4hDa5JMyU76nHaYCgg/y42J+2F65EdF7QSpL0Cqd8=
Subject key identifier: BA:1F:D3:FC:C6:61:6E:5A:6D:27:24:79:F8:C0:9D:47:1D:58:2C:E1
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 0645
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 0645
Signing time: Mon 20 Oct 2025 02:18:31 +0000
Manifest this update: Mon 20 Oct 2025 02:18:30 +0000
Manifest next update: Wed 22 Oct 2025 02:18:30 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: KexAFzI3PqbLPm2Cirw7sI91s6gMLSgkjPrLYeLs44U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1605 (0x645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Oct 20 02:18:30 2025 GMT
Not After : Oct 22 02:18:30 2025 GMT
Subject: CN=68f59bf7-7b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5b:ff:b3:a9:e2:f2:19:77:7e:06:f8:32:69:
c3:dd:48:a9:60:6b:ce:49:a5:2c:cf:7b:07:e2:b3:
c5:c6:24:dc:84:4b:3d:3c:f2:d0:7a:c8:30:98:31:
f4:e5:fe:2e:98:c9:4b:21:b9:38:f2:75:25:e3:a3:
dd:b8:c9:31:af:d1:ca:ce:cc:c6:5d:fa:31:f1:1c:
2f:0a:6a:26:07:9c:aa:11:86:77:ef:cd:33:9a:32:
4b:39:a8:8e:c8:25:83:ad:f6:46:e5:d4:71:b8:48:
2e:05:4b:a9:ea:f7:79:bf:d3:99:0b:3d:71:97:f1:
50:a5:32:a5:80:4d:52:a0:ce:3e:4e:0d:e3:74:75:
af:54:b6:4c:42:1b:37:f9:b1:3f:fd:0a:fa:e6:a3:
9f:e6:25:5c:de:cf:bf:c7:5b:24:16:bf:72:fe:a9:
5c:37:ea:85:10:01:de:fd:b2:1f:fe:83:fe:ab:a7:
ae:38:c5:8f:0f:b2:1c:22:8f:7f:2f:fe:f3:5a:98:
3e:73:14:5a:95:a7:ee:86:78:bc:c1:ff:bf:b8:73:
3d:b7:a5:e1:71:f6:de:ef:ed:2a:5c:26:ca:54:48:
0d:44:f1:8c:3c:ea:f6:4e:ed:15:b6:86:e1:e6:89:
47:a5:a7:54:82:60:3f:7e:ca:b6:f9:50:26:60:01:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1F:D3:FC:C6:61:6E:5A:6D:27:24:79:F8:C0:9D:47:1D:58:2C:E1
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:bb:f8:c5:9f:87:9e:67:e1:30:16:03:f7:c0:79:2b:2c:
bb:7f:80:d6:a2:b1:a5:af:0d:02:a2:c9:5b:64:d5:86:3c:cd:
ff:6a:19:1b:93:24:31:78:e3:ac:21:d6:e5:81:4b:9c:b7:52:
55:35:6f:8d:d8:77:8a:74:3b:e1:0d:e3:a1:60:80:6c:04:df:
d0:94:f5:ad:96:66:6b:fc:59:29:87:cb:5a:c1:2f:7f:ea:6e:
c0:1d:90:59:02:5f:5b:bd:e1:62:e7:a8:32:06:fa:32:34:92:
73:c0:8d:31:b6:7d:67:31:43:85:d7:7b:ef:92:e5:dc:c2:e8:
c4:36:a5:09:80:03:27:66:c0:c1:c0:fd:4a:7a:f8:ce:54:db:
c4:62:5b:e9:83:c1:1a:40:9a:80:ea:68:b1:03:29:ee:76:da:
6a:87:9d:18:5e:9b:b8:7d:d0:ac:cf:8b:8a:ad:3f:12:d3:f7:
63:0b:fb:c0:ec:0c:4e:9c:ca:78:f8:88:61:ca:16:83:a7:ab:
07:67:ba:02:22:a4:95:91:0c:85:4e:75:bd:40:cf:c4:52:ab:
dc:67:93:93:c1:77:e4:3e:e5:58:a9:3c:79:64:df:18:fe:56:
2d:a1:5a:d0:06:9b:f5:a3:95:3d:90:c6:42:a4:f2:3d:dd:2d:
3d:9e:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:02 2025 by rpki-client