Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: vsoG6G4nDZQwLeKAEo0LZlMZ0iOapn8h7Jx3l+fW0UM=
Subject key identifier: A6:35:91:A0:6A:A5:9C:BC:B3:4C:66:E6:6C:68:BA:27:D1:17:67:1A
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: E3
Signing time: Sat 23 Aug 2025 05:05:06 +0000
Manifest this update: Sat 23 Aug 2025 05:05:05 +0000
Manifest next update: Mon 25 Aug 2025 05:05:05 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: Bja1v7/ZtZv6ri6AS6e5StJf1tIGO5R7ACAY6WD68f4=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Aug 23 05:05:05 2025 GMT
Not After : Aug 25 05:05:05 2025 GMT
Subject: CN=68a94c01-cb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:79:0a:71:97:54:71:2d:98:3d:e6:b6:bd:
37:2e:73:f7:45:f4:54:be:f8:4c:13:1e:11:39:f7:
9f:0a:b0:8c:a8:3b:e3:61:74:9c:ca:e0:d4:8c:83:
0d:05:9c:3c:1b:b6:1e:a1:07:8f:af:1f:eb:be:e4:
cb:35:5e:90:64:64:0b:1e:e6:5b:cf:09:7a:9d:2e:
c5:fa:41:f1:b5:4d:e8:1c:54:25:af:c5:51:5c:dc:
0d:08:80:ff:ad:60:9d:bd:42:b1:c1:c9:3d:23:ae:
24:72:da:31:67:92:24:79:cc:4d:cb:ea:de:7d:cc:
fa:a4:14:09:6f:3b:eb:22:0d:a1:a3:a3:4d:46:7c:
b7:60:a3:5e:5d:01:45:51:d0:bb:b5:82:a4:88:9e:
ee:2f:d2:e4:24:b3:04:e8:9b:b9:0c:2e:1c:86:00:
41:47:5b:e9:ba:fd:e2:c2:07:03:66:aa:f7:14:f8:
c3:44:a1:c3:42:9a:6d:64:6d:1f:14:c3:e1:e7:68:
07:4c:ad:ca:29:11:90:b1:1c:24:c7:e7:f7:0d:f1:
21:2f:46:00:4c:a5:2c:1e:f7:92:33:81:94:17:72:
06:66:67:03:aa:9b:da:b9:0e:d6:11:68:08:e7:5f:
66:61:2b:5e:77:69:b2:c5:f5:d7:72:49:ee:fa:e2:
e3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:91:A0:6A:A5:9C:BC:B3:4C:66:E6:6C:68:BA:27:D1:17:67:1A
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:f5:0c:a4:e5:b9:1b:e8:95:7c:d5:8d:45:70:b2:59:ff:09:
9d:16:89:eb:c1:f6:ff:94:44:52:4d:f6:42:de:c3:71:1c:1d:
c7:bd:9b:08:df:68:29:63:35:f2:f3:36:1f:3e:5a:6a:18:ff:
c0:3d:59:00:c0:45:e7:94:75:99:70:cf:b6:14:96:27:7c:fd:
58:fa:e6:bb:70:2c:44:d9:37:3f:e3:ff:fc:22:c4:57:d9:a5:
0d:2d:2a:81:b8:fe:2b:d9:ac:04:7d:1e:f0:dd:55:b3:ab:5d:
23:63:3d:7b:f6:7c:ff:16:a6:3c:6e:29:21:ba:01:f8:34:b7:
e5:42:a6:21:b9:e5:54:1d:f3:72:aa:27:bf:1e:d6:6d:cf:7b:
04:39:66:b3:51:98:24:f3:43:fa:e3:cc:e3:de:9a:eb:12:95:
19:1a:42:ba:7e:15:63:f8:4a:4b:d7:fe:79:55:e9:83:e8:24:
65:b2:22:73:28:b5:69:9b:be:5b:9c:f7:90:4f:32:f3:67:09:
da:aa:e0:78:03:47:52:d7:e0:c8:58:16:ce:9f:d4:3e:4c:58:
af:aa:da:10:e0:1a:8d:fa:0f:1e:0b:39:ba:4e:23:31:78:de:
b6:32:aa:36:7f:a4:d1:7c:42:42:12:93:96:ca:07:b5:fa:95:
8a:60:0d:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMzJBRjExMC8GA1UEBRMoOTJDQTJCNDFFRUMzRTAxQTE5Mzg5RTIyMjA4OEFD
M0ZDM0ExNDhFRDAeFw0yNTA4MjMwNTA1MDVaFw0yNTA4MjUwNTA1MDVaMBgxFjAU
BgNVBAMTDTY4YTk0YzAxLWNiM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1DXkKcZdUcS2YPea2vTcuc/dF9FS++EwTHhE5958KsIyoO+NhdJzK4NSM
gw0FnDwbth6hB4+vH+u+5Ms1XpBkZAse5lvPCXqdLsX6QfG1TegcVCWvxVFc3A0I
gP+tYJ29QrHByT0jriRy2jFnkiR5zE3L6t59zPqkFAlvO+siDaGjo01GfLdgo15d
AUVR0Lu1gqSInu4v0uQkswTom7kMLhyGAEFHW+m6/eLCBwNmqvcU+MNEocNCmm1k
bR8Uw+HnaAdMrcopEZCxHCTH5/cN8SEvRgBMpSwe95IzgZQXcgZmZwOqm9q5DtYR
aAjnX2ZhK153abLF9ddySe764uMHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpjWR
oGqlnLyzTGbmbGi6J9EXZxowHwYDVR0jBBgwFoAUksorQe7D4BoZOJ4iIIisP8Oh
SO0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTMyLzhCRkJEOTUyRDFBQzExRUZBNUQxMTY1NTc2MkU5NTFBL2tzb3JR
ZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzb3JRZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA49Qyk5bkb6JV81Y1FcLJZ/wmdFonr
wfb/lERSTfZC3sNxHB3HvZsI32gpYzXy8zYfPlpqGP/APVkAwEXnlHWZcM+2FJYn
fP1Y+ua7cCxE2Tc/4//8IsRX2aUNLSqBuP4r2awEfR7w3VWzq10jYz179nz/FqY8
bikhugH4NLflQqYhueVUHfNyqie/HtZtz3sEOWazUZgk80P648zj3prrEpUZGkK6
fhVj+EpL1/55VemD6CRlsiJzKLVpm75bnPeQTzLzZwnaquB4A0dS1+DIWBbOn9Q+
TFivqtoQ4BqN+g8eCzm6TiMxeN62Mqo2f6TRfEJCEpOWyge1+pWKYA2d
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:33 2025 by rpki-client