Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: Vc9PgHclAVsnMoUt0UZUp8x+tRPslUY4f/4Z1KCc2to=
Subject key identifier: F0:28:5C:25:26:7E:1B:BF:57:2B:C8:7B:FB:F8:90:D4:1F:C4:D8:32
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 04F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 04F7
Signing time: Mon 20 Oct 2025 02:49:50 +0000
Manifest this update: Mon 20 Oct 2025 02:49:49 +0000
Manifest next update: Wed 22 Oct 2025 02:49:49 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: crmqHfAYP1un/TVBz24F4nA1bkHZtx1A/1mg1Gxfg64=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Oct 20 02:49:49 2025 GMT
Not After : Oct 22 02:49:49 2025 GMT
Subject: CN=68f5a34d-0eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ad:32:1c:74:e7:8c:8b:37:69:1e:c3:37:9f:
8c:dc:55:86:a1:e6:84:31:97:09:7f:14:6d:d9:22:
8a:eb:82:68:85:63:ed:b0:ae:d3:0c:e1:cf:a0:65:
fd:c1:33:cf:59:75:b2:0d:02:3d:23:ce:a2:a5:89:
4b:35:b2:ed:ce:d9:b2:61:45:1b:12:d9:a2:d2:10:
4a:e2:3d:6b:10:75:4e:3a:34:77:d4:86:3f:37:c2:
59:5b:6c:bb:d3:87:37:46:37:ad:31:81:2a:4f:41:
f3:67:69:f1:18:3d:a0:ba:a7:2c:30:52:61:52:36:
4c:2f:02:ad:ac:3d:57:ce:b0:40:da:90:0e:4b:20:
9a:8a:47:52:a9:7b:1d:0f:3c:fd:8f:05:a1:68:4e:
5a:c7:f2:29:a2:14:34:2a:67:64:25:a4:e5:fd:d6:
50:79:aa:b2:da:92:60:51:66:c8:76:60:52:dd:dd:
dd:f3:43:be:60:75:26:b6:2a:13:3f:c1:c6:83:2f:
67:4d:55:f3:f5:77:71:13:c3:59:ab:5c:5d:98:91:
52:1d:d7:d4:ef:cb:8a:92:91:34:68:e5:c6:84:2d:
9a:6b:c9:54:ab:34:62:d1:80:94:7a:c2:f9:84:23:
92:90:52:97:25:81:68:51:29:a3:ef:de:21:57:63:
b8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:5C:25:26:7E:1B:BF:57:2B:C8:7B:FB:F8:90:D4:1F:C4:D8:32
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:e5:5d:ae:20:16:70:d8:16:34:fb:bf:4c:0e:1c:df:a9:82:
22:83:51:79:39:00:12:81:67:f7:96:22:5a:83:05:fe:8b:48:
1c:20:95:9d:a4:95:3d:73:4c:ae:41:27:43:c0:a1:a8:c8:3e:
8a:48:5f:e9:3b:2e:e0:85:fe:ad:51:fd:3e:79:04:25:4e:55:
fa:ae:2e:3e:75:11:03:df:06:9e:c0:7b:63:48:75:f0:be:c2:
25:b6:01:0c:5b:92:52:ef:53:f1:5b:5e:5a:35:9b:56:5b:00:
27:f5:5d:1e:41:e1:65:d6:b0:08:07:91:b2:9e:45:e4:9a:15:
26:92:54:d0:ed:37:92:bb:56:7b:63:00:13:12:2c:71:c2:0b:
93:df:9a:d6:f0:70:d3:0d:a7:2b:aa:2f:ea:62:1c:7c:de:72:
3f:4d:0f:7b:31:a1:2f:af:3b:5d:6c:c5:ac:de:19:fb:3f:19:
df:c3:02:cb:3b:53:73:5b:6a:c0:b9:0c:4b:80:c7:1b:d9:06:
3f:f6:61:5e:d5:6c:f3:8e:d4:7d:ae:27:ed:9d:ab:df:0d:1b:
5e:87:9a:9d:09:14:3e:23:35:ce:80:de:28:7a:da:f8:b9:71:
5a:e7:73:92:6e:5e:ee:0e:14:2b:9d:1f:64:9c:91:02:d6:1c:
b0:b1:b6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:50 2025 by rpki-client