Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: nGR+1OPUUFwP7iiFkNkBCG+crXjzo7T4OfDWXxlGXbk=
Subject key identifier: 7D:03:B9:2B:F7:02:8F:55:DB:CA:E2:95:58:82:4C:49:E7:47:84:8B
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0D34
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0D34
Signing time: Mon 20 Oct 2025 01:06:26 +0000
Manifest this update: Mon 20 Oct 2025 01:06:25 +0000
Manifest next update: Wed 22 Oct 2025 01:06:25 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: dAK9xulBy7wNSMlcdPhAh1PS2sOYqKyu8U6uqxLe81I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3380 (0xd34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Oct 20 01:06:25 2025 GMT
Not After : Oct 22 01:06:25 2025 GMT
Subject: CN=68f58b12-aad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:ba:92:21:0f:00:b6:46:71:22:90:6f:3b:
ec:e4:83:9e:87:1a:9f:a2:cd:f6:fd:dc:35:3d:3b:
38:0e:17:51:97:02:ef:2e:1c:ad:66:b3:57:66:f4:
52:b7:f6:07:8c:fd:61:b5:22:74:ae:9c:2c:b5:0d:
58:28:17:35:c9:fe:e0:5b:04:95:d4:fb:f1:ef:b7:
f6:57:aa:57:7e:ee:f9:61:07:5f:b4:d6:9e:83:99:
b6:ca:72:35:fe:c5:4d:73:bb:3a:9e:14:c8:3d:c4:
21:54:20:63:6c:be:3a:dd:14:81:b1:e8:3d:58:58:
d8:ca:c7:99:3e:00:f6:dc:ea:34:84:14:95:10:70:
4c:9b:29:d6:a3:9e:6f:9f:2b:6e:eb:07:8d:36:7c:
34:d7:d5:51:dc:2d:2e:59:f0:fb:5a:83:bd:b4:e0:
d9:74:b7:a4:fe:34:30:e7:7f:b8:c8:49:f9:e9:5a:
26:d9:8c:36:79:7e:4e:79:1a:7f:1f:68:e3:06:59:
dc:9b:f3:08:1c:8b:11:9f:10:53:09:11:2f:41:7a:
c5:7f:38:6b:de:a3:e6:a8:e2:01:64:d4:af:86:69:
81:9b:6e:1c:ab:34:cb:9b:07:01:07:db:f3:e6:4c:
b7:59:b9:1b:32:19:6a:87:01:ca:fb:3d:28:47:29:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:B9:2B:F7:02:8F:55:DB:CA:E2:95:58:82:4C:49:E7:47:84:8B
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:9f:13:5a:df:98:9a:b4:f3:37:06:83:02:c9:e9:c5:57:
6e:29:8e:35:52:3e:b0:5b:d8:13:8f:fe:ed:89:dd:61:45:a2:
a2:08:87:87:a2:17:42:06:fa:72:22:e7:0a:17:5c:90:da:eb:
a8:b4:cc:cc:b9:df:ff:12:6e:17:71:cd:3c:02:1f:e2:cf:d6:
3c:2d:26:42:93:5c:67:1b:88:51:be:2e:07:dc:69:c4:29:68:
08:5a:a1:ae:bc:74:4c:84:bb:c8:b2:cc:eb:78:a5:ab:05:05:
94:ce:b7:1f:8a:da:0d:3b:a1:13:e0:16:c9:1e:98:ca:6e:6b:
01:13:3a:87:af:82:b2:a0:7b:31:16:c2:b1:a9:7d:48:b0:a2:
a9:b8:a2:df:32:5f:48:eb:59:3d:f8:1f:78:1c:fa:f3:08:8e:
27:dc:45:75:e4:45:8f:7a:fb:00:63:0e:50:b9:15:f3:2f:71:
46:7e:f6:5e:6a:c1:34:1f:e9:c7:dd:cc:2a:26:34:ec:1f:8b:
99:5d:af:67:46:92:44:d4:f3:1d:93:ab:d4:9b:05:c2:a0:da:
25:19:86:b5:7f:5f:59:52:57:50:d6:5d:8b:2e:b5:59:28:6b:
bb:e7:ab:cb:ac:26:11:b3:ee:86:0b:66:f9:09:90:07:9b:3f:
4f:a6:23:a6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDTQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTUwQzFBRjExMC8GA1UEBRMoNjM2MDVBOEExMjRGOEVDQTI2REY2NkE3MzFBNjQ1
RENDODMxOTQ5NTAeFw0yNTEwMjAwMTA2MjVaFw0yNTEwMjIwMTA2MjVaMBgxFjAU
BgNVBAMTDTY4ZjU4YjEyLWFhZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmabqSIQ8AtkZxIpBvO+zkg56HGp+izfb93DU9OzgOF1GXAu8uHK1ms1dm
9FK39geM/WG1InSunCy1DVgoFzXJ/uBbBJXU+/Hvt/ZXqld+7vlhB1+01p6DmbbK
cjX+xU1zuzqeFMg9xCFUIGNsvjrdFIGx6D1YWNjKx5k+APbc6jSEFJUQcEybKdaj
nm+fK27rB402fDTX1VHcLS5Z8Ptag7204Nl0t6T+NDDnf7jISfnpWibZjDZ5fk55
Gn8faOMGWdyb8wgcixGfEFMJES9BesV/OGveo+ao4gFk1K+GaYGbbhyrNMubBwEH
2/PmTLdZuRsyGWqHAcr7PShHKYHZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfQO5
K/cCj1XbyuKVWIJMSedHhIswHwYDVR0jBBgwFoAUY2BaihJPjsom32anMaZF3Mgx
lJUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1MEMxL0YwNEY2QThBODU1MzExRTZCQTM1Mzc0QkY4QUVBMjI4L1kyQmFp
aEpQanNvbTMyYW5NYVpGM01neGxKVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1kyQmFpaEpQanNvbTMyYW5NYVpGM01neGxKVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTUwQzEvRjA0RjZBOEE4NTUzMTFFNkJBMzUzNzRCRjhB
RUEyMjgvWTJCYWloSlBqc29tMzJhbk1hWkYzTWd4bEpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgOZ8TWt+YmrTzNwaDAsnpxVduKY41
Uj6wW9gTj/7tid1hRaKiCIeHohdCBvpyIucKF1yQ2uuotMzMud//Em4Xcc08Ah/i
z9Y8LSZCk1xnG4hRvi4H3GnEKWgIWqGuvHRMhLvIsszreKWrBQWUzrcfitoNO6ET
4BbJHpjKbmsBEzqHr4KyoHsxFsKxqX1IsKKpuKLfMl9I61k9+B94HPrzCI4n3EV1
5EWPevsAYw5QuRXzL3FGfvZeasE0H+nH3cwqJjTsH4uZXa9nRpJE1PMdk6vUmwXC
oNolGYa1f19ZUldQ1l2LLrVZKGu756vLrCYRs+6GC2b5CZAHmz9PpiOm
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:26:25 2025 by rpki-client