Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: UJMLWqyrnaIRfxs0LdvvvyhbC49uKCQuGV291i36Z/E=
Subject key identifier: 3B:5F:D2:E7:FC:E9:B9:C7:33:46:52:A3:51:F3:A0:3D:8F:DD:B1:B7
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0670
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 066A
Signing time: Sun 19 Oct 2025 02:15:30 +0000
Manifest this update: Sun 19 Oct 2025 02:15:29 +0000
Manifest next update: Tue 21 Oct 2025 02:15:29 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: /YS0x8cs9IUgLWEnlrasAs38Xr7Q45qqW282ZrHHfng=)
2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1648 (0x670)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Oct 19 02:15:29 2025 GMT
Not After : Oct 21 02:15:29 2025 GMT
Subject: CN=68f449c2-2705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:ef:92:99:db:10:90:36:81:69:99:d5:e6:
f4:23:70:39:9b:a5:9f:40:d6:1a:c6:80:14:d8:2b:
b7:06:3d:ff:d3:9a:c0:8e:f8:45:3e:6c:b5:f8:a2:
41:f0:48:d7:78:ed:52:61:bc:62:99:96:9f:9a:09:
06:7e:0d:42:8b:e8:f8:fc:12:0a:2c:84:02:a2:66:
ba:a6:5f:0e:59:86:d6:20:fd:83:e7:1d:66:54:e7:
bb:59:fd:38:b2:e5:20:43:5d:0e:b4:e2:d7:3d:09:
40:bb:23:5e:4b:7c:3e:c4:ab:59:86:f9:56:ba:ae:
06:18:58:83:54:c3:18:14:a2:bf:80:68:37:a9:a5:
64:27:5d:d6:70:93:75:f3:09:e2:75:90:03:0f:12:
a7:a2:2a:86:89:26:52:0f:8a:a2:c6:df:0c:27:e5:
5f:7c:f0:2e:50:14:69:47:e4:aa:7f:8d:7d:db:d0:
ef:c0:bb:e2:25:d4:26:6b:bf:77:45:1b:18:bd:39:
64:c6:dc:04:82:51:e7:b2:39:8f:27:d4:20:26:5b:
93:f4:ef:eb:44:90:7a:4f:b1:26:67:fb:8d:05:33:
7b:10:59:b2:4a:df:c2:0d:01:89:df:34:67:7f:b7:
2b:7c:1d:0e:b2:66:3f:61:5c:22:8b:e3:67:12:74:
5a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5F:D2:E7:FC:E9:B9:C7:33:46:52:A3:51:F3:A0:3D:8F:DD:B1:B7
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:0d:c5:ce:04:a6:e8:58:19:ab:01:50:96:b0:a9:13:db:
03:7f:7c:46:0a:18:c2:d5:35:2e:36:c2:6f:ea:6f:ac:8b:43:
30:fb:d0:f2:de:f7:a2:60:5b:b2:75:94:ea:8e:26:03:92:63:
5b:f3:e3:35:09:90:b6:a8:f3:21:d7:10:65:77:8d:44:82:87:
4d:19:28:e5:90:06:8e:dd:6c:5b:01:a1:4b:a6:90:46:3f:64:
88:7a:32:18:45:c6:32:e9:f5:b2:eb:62:9b:10:ed:c5:3e:f8:
e1:8c:56:0c:2b:1f:a1:77:69:51:61:59:3f:66:56:f1:cd:da:
e6:0e:45:7d:13:48:57:37:22:70:5a:1b:d2:ce:e5:7c:40:66:
39:10:4f:75:e6:2f:d8:26:7a:6d:59:23:1d:17:5e:8f:b0:51:
cd:8a:37:fa:77:54:af:d1:e0:cf:1c:ce:f9:55:fe:99:50:98:
3e:76:f6:2c:a6:4e:5a:f2:5b:82:d9:00:01:29:57:5d:c9:14:
bc:d5:35:c0:03:7d:ba:02:da:ba:1c:cf:e3:ef:b9:db:56:08:
1c:3f:40:95:c8:b4:e0:94:7e:7a:49:30:36:3f:9c:8b:2a:8d:
49:a0:60:8d:4f:14:c2:f3:d5:f3:be:72:74:4a:bc:53:87:86:
40:33:fe:a1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUVENjNBRjExMC8GA1UEBRMoMzgyNEFDNUVFMDA0MzlFRURBMjFBMUExMDEwOUU4
QkY3NkU0RkFCODAeFw0yNTEwMTkwMjE1MjlaFw0yNTEwMjEwMjE1MjlaMBgxFjAU
BgNVBAMTDTY4ZjQ0OWMyLTI3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/Au+SmdsQkDaBaZnV5vQjcDmbpZ9A1hrGgBTYK7cGPf/TmsCO+EU+bLX4
okHwSNd47VJhvGKZlp+aCQZ+DUKL6Pj8EgoshAKiZrqmXw5ZhtYg/YPnHWZU57tZ
/Tiy5SBDXQ604tc9CUC7I15LfD7Eq1mG+Va6rgYYWINUwxgUor+AaDeppWQnXdZw
k3XzCeJ1kAMPEqeiKoaJJlIPiqLG3wwn5V988C5QFGlH5Kp/jX3b0O/Au+Il1CZr
v3dFGxi9OWTG3ASCUeeyOY8n1CAmW5P07+tEkHpPsSZn+40FM3sQWbJK38INAYnf
NGd/tyt8HQ6yZj9hXCKL42cSdFqhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUO1/S
5/zpucczRlKjUfOgPY/dsbcwHwYDVR0jBBgwFoAUOCSsXuAEOe7aIaGhAQnov3bk
+rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFRDYzL0JDNzJENkI2Q0FBNDExRUI5QzJBNEE1MkY4QUVBMjI4L09DU3NY
dUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09DU3NYdUFFT2U3YUlhR2hBUW5vdjNiay1yZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUVENjMvQkM3MkQ2QjZDQUE0MTFFQjlDMkE0QTUyRjhB
RUEyMjgvT0NTc1h1QUVPZTdhSWFHaEFRbm92M2JrLXJnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAu8g3FzgSm6FgZqwFQlrCpE9sDf3xG
ChjC1TUuNsJv6m+si0Mw+9Dy3veiYFuydZTqjiYDkmNb8+M1CZC2qPMh1xBld41E
godNGSjlkAaO3WxbAaFLppBGP2SIejIYRcYy6fWy62KbEO3FPvjhjFYMKx+hd2lR
YVk/ZlbxzdrmDkV9E0hXNyJwWhvSzuV8QGY5EE915i/YJnptWSMdF16PsFHNijf6
d1Sv0eDPHM75Vf6ZUJg+dvYspk5a8luC2QABKVddyRS81TXAA326Atq6HM/j77nb
VggcP0CVyLTglH56STA2P5yLKo1JoGCNTxTC89XzvnJ0SrxTh4ZAM/6h
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:29 2025 by rpki-client