Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File: 16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier: ryjxoLrayxGYdwDy8aV8Y0mXr6eK3B2sLpJlLfSy/js=
Subject key identifier: 02:86:E7:CE:5E:33:47:92:44:B3:E3:47:7E:E6:36:1D:6F:2A:E6:16
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer: /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial: 0648
Authority info access: rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number: 0647
Signing time: Tue 21 Oct 2025 02:16:16 +0000
Manifest this update: Tue 21 Oct 2025 02:16:16 +0000
Manifest next update: Thu 23 Oct 2025 02:16:16 +0000
Files and hashes: 1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: 60QyQ5T2IXppFTnhQITJ1DGIxMfayXz+cLdcWem20Ck=)
2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Oct 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Validity
Not Before: Oct 21 02:16:16 2025 GMT
Not After : Oct 23 02:16:16 2025 GMT
Subject: CN=68f6ecf0-9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:dc:26:e2:e1:9e:15:d4:b7:6b:84:1a:0b:
2c:56:e0:14:40:c4:bb:9f:88:ac:3d:39:9c:25:a1:
cc:18:e7:55:bb:d8:c5:9f:e5:c1:1f:86:b4:49:b6:
a8:bf:b8:fc:4f:f1:2e:16:81:1e:f3:00:2b:13:6b:
ed:ec:be:de:02:4b:ea:0c:00:6c:cd:86:9d:d8:09:
e7:5c:a9:76:a7:43:b2:22:06:ee:bb:41:b2:21:b3:
a8:79:73:8c:24:08:45:a5:bc:c1:62:f8:1b:99:10:
d0:41:ae:93:c7:ff:a2:b9:6c:e1:77:79:ac:bc:ca:
36:1c:b2:0f:a3:1d:5d:e9:59:19:eb:ed:9e:94:a9:
90:1f:6f:4f:61:cd:84:25:51:81:d5:d2:8c:ae:46:
5f:0c:c6:71:c3:5a:03:56:da:64:27:02:cd:cc:36:
2c:cd:27:17:68:eb:04:b1:fb:13:10:66:c5:df:d3:
cc:5c:38:bc:75:de:2d:0b:4d:61:71:02:b2:04:9b:
91:f5:b5:a2:29:23:f3:0d:b6:ff:b5:f3:55:6c:d6:
27:09:24:c4:37:1c:32:d6:30:92:13:3b:18:d8:ae:
61:81:57:e5:55:1a:4a:ec:24:1b:9b:40:d8:a8:41:
8a:33:cb:90:5a:f7:62:a2:50:4e:d7:f2:f4:fe:f4:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:86:E7:CE:5E:33:47:92:44:B3:E3:47:7E:E6:36:1D:6F:2A:E6:16
X509v3 Authority Key Identifier:
keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2c:bc:e4:ee:1c:98:61:7d:20:86:6c:4c:bc:f4:08:b1:fc:bb:
97:37:9a:e5:3d:a9:33:26:c6:d1:d4:a8:c9:34:2a:96:09:6c:
2d:f0:12:63:d7:12:f5:01:57:b5:e5:90:49:92:f2:ac:41:52:
7b:9f:3e:94:91:e1:38:b2:24:2c:df:f5:31:eb:91:d6:53:c0:
62:fd:08:ae:55:15:f8:ea:24:87:11:fb:bd:2c:54:39:48:62:
cc:38:43:5e:40:d1:c6:57:4a:6d:8e:7c:c9:d6:eb:fa:96:47:
9c:6f:2e:24:dc:9f:59:35:e0:13:1f:43:c4:25:f2:e2:b5:be:
2a:25:11:40:ec:31:ff:06:68:5e:71:2f:47:af:05:dd:da:e8:
0e:69:0e:d4:5e:9b:93:a2:d6:f7:4b:8d:88:e3:0f:79:c6:b8:
71:14:37:0c:f4:04:30:54:de:6e:bf:a2:c3:31:c4:d7:99:67:
62:3d:3c:a1:c8:e5:ba:f3:c4:81:6e:12:0c:0a:d4:7d:51:1b:
9a:56:8a:82:04:32:1e:48:12:3e:ab:ab:03:5f:61:9b:ef:9c:
e0:e8:d4:08:de:73:fa:9f:c4:b7:2c:34:d1:d7:2f:1d:c5:24:
5d:f0:44:b4:7c:b0:c3:35:cd:34:5a:af:68:f3:63:a9:63:78:
31:87:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:17:21 2025 by rpki-client