
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File: LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier: 43OvxMo4hRRAMOky7zx5DqZ24tKX5YsuaPm68ZZTkLw=
Subject key identifier: 0B:1B:01:95:07:B8:D0:FD:64:2D:23:03:92:C9:F0:56:0D:E9:CA:2E
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer: /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial: 0DBB
Authority info access: rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number: 0DB7
Signing time: Mon 20 Oct 2025 01:02:49 +0000
Manifest this update: Mon 20 Oct 2025 01:02:48 +0000
Manifest next update: Wed 22 Oct 2025 01:02:48 +0000
Files and hashes: 1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: cmQKAqze+4OcYnmWWDa7kIEeu1dfltUPYHZ3pBUj/+k=)
2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3515 (0xdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Validity
Not Before: Oct 20 01:02:48 2025 GMT
Not After : Oct 22 01:02:48 2025 GMT
Subject: CN=68f58a38-d7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:ce:55:e5:03:5e:91:6e:01:49:63:82:f6:
b4:95:d8:7c:e3:bb:9c:9c:85:88:aa:aa:1d:c5:bb:
51:f0:31:da:41:2f:24:08:49:47:4b:6a:b4:18:96:
8a:8e:63:65:aa:d5:b7:40:aa:7b:ae:09:bf:7f:81:
1e:67:92:92:fc:81:1c:e9:29:8a:eb:e7:e9:9b:40:
65:d6:c0:85:3d:09:e6:ba:16:63:e8:18:e6:f1:06:
24:25:0a:7a:20:a0:0f:ce:1f:a3:06:fd:38:09:e9:
52:96:83:3f:2f:d4:90:0d:8b:3c:bf:05:71:17:c1:
5e:c9:1b:e9:17:f2:f1:58:18:21:c4:1b:fa:d8:92:
ae:dc:2c:9a:fa:b6:43:d7:5d:4c:42:85:ad:67:1c:
0e:39:ee:93:fb:ce:78:bc:8c:51:da:c1:e8:6c:7e:
66:4c:50:9f:84:c5:db:0a:ca:b2:84:12:f7:f3:3d:
7e:77:41:e7:2a:7d:e2:79:f2:df:13:e5:0f:0d:c6:
13:26:a5:c1:b4:8f:2d:a5:a3:9a:a6:45:1f:df:37:
e0:06:0a:db:7c:8f:8a:53:4f:d6:cb:7e:81:65:8a:
8c:32:0f:b9:79:a0:3b:61:56:af:7c:c3:d1:8f:6f:
11:48:2c:6a:46:8b:ec:f6:2a:a9:de:5b:58:6c:69:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:01:95:07:B8:D0:FD:64:2D:23:03:92:C9:F0:56:0D:E9:CA:2E
X509v3 Authority Key Identifier:
keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:fb:88:e0:17:4f:92:84:c9:03:f6:51:0a:20:b8:67:e0:91:
73:54:ca:0b:c9:fb:5b:f1:e6:66:2a:a2:1a:f3:db:00:e5:9f:
5f:da:27:57:94:76:51:be:33:59:b4:26:37:02:cb:3f:ae:2f:
bc:1c:07:82:5f:e5:08:ea:7b:e7:11:cf:aa:3c:2d:39:a8:c6:
02:42:b6:60:a2:9f:b3:b6:3a:78:ba:6b:f4:98:04:b4:62:45:
bf:03:a2:c8:8d:d1:de:03:72:59:99:83:cb:3b:69:40:94:38:
b4:57:a3:f3:a2:9e:ca:4d:d4:66:92:9f:5a:e6:88:fd:44:0c:
d1:71:46:c5:29:e6:b1:f0:2c:fc:f4:fb:ec:69:f4:0d:5a:85:
2e:36:fe:6d:a7:43:8e:85:ee:cc:0b:0d:f2:85:08:27:a2:ce:
58:cc:af:da:b0:9c:73:dd:30:01:26:f2:40:7d:94:b1:c5:19:
75:62:3a:cc:84:64:21:16:b1:d4:d4:1e:8b:07:a3:46:88:ef:
b4:a5:1a:9d:21:1a:ba:af:5a:36:16:f9:f2:c6:b3:c4:27:0a:
c2:2a:b8:36:59:09:4f:f4:14:2c:38:f7:f7:ed:e1:d5:9f:9a:
ec:e4:2f:a1:70:a5:13:8c:e4:8b:ec:71:af:b4:51:a6:0b:bf:
dc:c2:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:21 2025 by rpki-client