Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File: osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier: jyqucbZ5jAwWeZD/yUlPOtdte/plM8rByYlk3m5cD6w=
Subject key identifier: 91:2B:06:E9:70:11:FA:6B:50:6E:AE:21:8F:58:23:26:62:53:3E:D6
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer: /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial: 0DCA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number: 0DBE
Signing time: Sun 19 Oct 2025 01:02:27 +0000
Manifest this update: Sun 19 Oct 2025 01:02:26 +0000
Manifest next update: Tue 21 Oct 2025 01:02:26 +0000
Files and hashes: 1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: Wen4v5DTrAiXVIwAjol8s324WGKE82IXuX7sRrbU/Lg=)
2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3530 (0xdca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Validity
Not Before: Oct 19 01:02:26 2025 GMT
Not After : Oct 21 01:02:26 2025 GMT
Subject: CN=68f438a3-ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:75:e4:2f:bc:67:99:4d:60:ee:a6:8a:5c:
53:e5:12:fc:9f:27:3a:41:00:7e:ac:28:19:98:dc:
a5:58:4b:38:b0:40:0f:bc:34:6c:a3:45:c7:44:45:
21:20:17:76:79:cc:e6:de:30:8b:fc:11:c0:32:bf:
27:3f:09:58:e7:8f:51:4c:7c:c2:60:f2:7b:a8:29:
b7:d4:3e:18:e0:83:15:05:9b:6f:f4:a1:7e:3f:45:
90:10:50:d5:77:3d:aa:ad:09:95:ec:8e:08:bc:b3:
e7:ac:8b:aa:06:a0:f8:14:0a:d7:a0:f8:3c:52:a5:
68:9c:11:1c:aa:81:fe:af:54:fa:9f:89:1b:93:a8:
39:53:76:42:97:77:ad:e0:95:5e:a8:bb:54:db:f8:
61:09:1b:0e:59:4d:dd:41:d8:21:74:88:72:38:ee:
41:e8:8c:9d:f7:f0:e1:ae:55:72:52:b4:12:a4:d7:
32:7d:ed:c6:44:eb:b4:e8:e8:7a:3e:b4:a5:5d:2c:
60:12:8a:b1:4c:56:ae:e9:f5:cd:7b:77:70:8f:ad:
61:9a:77:01:2e:81:e7:88:ae:7d:07:40:98:6d:b7:
83:0f:10:3f:ee:23:2a:43:47:84:a7:85:3e:93:2f:
0d:94:e1:30:fc:9a:ba:97:6e:8a:2a:04:1a:32:a0:
01:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2B:06:E9:70:11:FA:6B:50:6E:AE:21:8F:58:23:26:62:53:3E:D6
X509v3 Authority Key Identifier:
keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:48:4b:82:52:b5:37:42:8a:0b:44:16:47:43:3a:bf:7e:
f7:34:c2:d4:1a:f7:28:af:cd:f3:06:fa:e8:28:6d:01:97:7e:
70:6f:15:d5:a3:78:4a:95:7a:b9:21:da:ad:7a:5e:71:3f:d6:
0a:9e:3f:35:aa:3b:25:a8:c3:51:b4:77:96:4d:88:d4:2d:1b:
ed:b6:97:3a:13:d8:64:b2:85:55:ec:64:47:93:dc:68:a8:0a:
85:77:8b:4d:bc:a8:43:07:2a:35:14:3b:36:e3:c5:3a:8f:ed:
19:4e:72:f3:c5:b7:52:80:6d:f7:9b:5b:85:cb:0d:07:b4:df:
21:7a:c7:6b:b8:10:e4:d8:f7:99:d8:05:8d:d9:02:9f:be:f0:
a8:f2:4c:f9:a6:35:c0:53:7f:25:66:26:9f:3c:e2:95:ec:91:
41:b8:1b:1c:d2:75:83:4a:f4:fe:9f:ec:09:97:00:65:3a:00:
11:08:c9:ec:dd:9c:a2:06:cb:ab:10:26:75:60:34:4f:22:9e:
1a:42:91:f6:8c:4c:f2:db:09:74:f5:7a:37:21:c1:de:62:f2:
f2:28:4a:2c:3b:52:a3:df:22:66:5a:ed:a8:bb:14:e3:ba:a3:
4e:0f:11:10:60:d1:06:6f:02:20:ff:cf:7d:da:d5:15:86:85:
6a:69:22:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:15:22 2025 by rpki-client