Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File: h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier: 7KabKdzTxARqAsvBB99r6/knmRUvLVS/IO0K0bdU88Y=
Subject key identifier: 07:DC:AA:37:49:A7:B5:53:A4:1A:11:B1:67:21:A5:54:EA:04:00:D9
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer: /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial: A2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number: 9F
Signing time: Mon 20 Oct 2025 05:01:30 +0000
Manifest this update: Mon 20 Oct 2025 05:01:29 +0000
Manifest next update: Wed 22 Oct 2025 05:01:29 +0000
Files and hashes: 1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: G89D2t3t4jUtx7/03QMOMAiET5czlWFr06T3rjp+h6s=)
2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
Validity
Not Before: Oct 20 05:01:29 2025 GMT
Not After : Oct 22 05:01:29 2025 GMT
Subject: CN=68f5c22a-59dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:59:42:fe:08:0d:5d:68:52:5d:00:ba:c6:
30:a6:66:c7:62:92:e0:ab:72:7e:8d:90:d1:a5:ef:
ce:8d:e5:cd:03:8d:ee:37:44:5c:90:11:5f:e8:6a:
94:1b:02:7a:db:29:6b:6f:2d:15:0b:1c:fe:1b:86:
eb:ef:8c:25:b7:ed:25:5f:d3:a8:71:66:48:9f:72:
f3:29:d9:04:b4:f2:09:4f:e6:70:1a:8a:f5:f9:3d:
d9:90:dd:2f:77:e1:f0:96:3b:b7:bd:65:9f:f3:88:
6e:ee:aa:cf:f4:0a:c3:dd:f5:e3:81:34:8e:4d:b6:
a7:10:96:d1:80:7d:4f:b1:6a:0d:02:b7:bb:bf:2c:
52:03:b8:a6:65:a3:3e:f3:6d:6c:e2:53:81:8a:ea:
75:41:97:f5:86:88:a1:7b:e7:c0:27:17:22:9e:06:
88:a3:37:0a:5a:4c:ea:cc:5e:90:71:06:60:83:79:
89:32:71:c1:7d:bd:1b:ac:c8:12:6e:87:d6:dc:77:
7c:0e:7b:98:b2:14:bc:b6:fe:17:0b:a9:ca:7a:87:
79:91:01:d8:53:53:16:fa:8e:51:54:06:9c:2a:fb:
aa:7f:4b:4f:f7:38:cb:60:61:62:1c:18:9f:d6:33:
76:b1:ec:ae:42:3d:22:4c:96:c7:c8:a3:fa:6d:87:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DC:AA:37:49:A7:B5:53:A4:1A:11:B1:67:21:A5:54:EA:04:00:D9
X509v3 Authority Key Identifier:
keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:e4:3a:6a:8d:52:f4:41:ad:0e:b7:af:3e:25:50:da:f8:16:
76:2c:d3:ac:85:13:82:9c:2a:ba:27:98:6f:21:eb:23:d4:c4:
f7:a9:4e:c8:81:08:36:52:e0:0a:bc:ff:24:d5:6a:73:d4:ac:
e9:41:46:04:48:cd:e7:dc:74:30:d1:83:97:20:7b:44:fc:84:
4e:ca:06:c2:db:e7:3e:26:3b:1d:91:06:06:db:c9:04:c0:59:
de:49:f3:37:5b:20:4a:71:71:51:e4:ad:db:91:3f:65:29:19:
8e:7a:d4:04:67:58:85:8a:42:8f:04:d8:9c:84:3c:5a:cf:75:
d2:e2:82:e3:dd:54:14:6f:9e:5f:3b:56:40:36:2e:47:8b:6c:
34:83:bb:b5:a1:23:ec:48:65:44:7b:ed:78:2c:94:b2:83:ef:
bb:0c:77:5a:7d:74:3e:26:04:a6:3f:82:2f:4b:26:24:07:af:
84:f0:9d:6c:0b:a2:19:20:f1:13:9b:06:9d:88:48:ba:91:f6:
37:a5:cc:bc:60:e1:8a:2d:f7:48:92:95:79:b7:45:b8:dd:64:
bb:9e:77:87:1a:de:ac:76:e1:99:5e:2a:c1:39:af:86:3d:39:
d9:b5:76:76:62:a0:4a:12:5b:e5:82:96:33:17:32:0d:e1:2e:
b9:e5:d0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:37 2025 by rpki-client