Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: ZZfpJSrxCLa5TK2TYFMeRFyD5CxNo1/xnqi4oaBjQjU=
Subject key identifier: 38:D2:8E:1B:C0:4F:F0:4B:85:21:E8:39:99:5F:C2:91:8D:2B:5D:89
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 92
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: 8D
Signing time: Mon 20 Oct 2025 05:04:23 +0000
Manifest this update: Mon 20 Oct 2025 05:04:22 +0000
Manifest next update: Wed 22 Oct 2025 05:04:22 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: MG66PDwNfhDpRhRwx9XwgytdzBVhRFcw8wfCtgLtvYY=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 146 (0x92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Oct 20 05:04:22 2025 GMT
Not After : Oct 22 05:04:22 2025 GMT
Subject: CN=68f5c2d7-207e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:e6:f3:01:69:0d:df:d9:9b:4c:f2:1b:b6:
2c:13:f2:8e:b6:5d:14:c5:dc:a9:1d:eb:43:16:9a:
99:b2:ca:25:c3:33:83:bb:80:ac:d7:db:e1:3b:a7:
57:0a:24:27:7b:dc:6b:7d:dc:6f:e9:2d:fa:27:45:
12:05:43:23:48:a7:bd:ee:0c:bb:db:8f:32:c7:51:
67:f0:ce:7f:b7:fd:9a:6a:7e:b8:04:7a:e6:22:83:
b2:d9:43:cd:6f:93:0f:b2:c6:36:9f:4a:f9:7f:8e:
8f:d1:79:84:4c:78:02:cd:73:14:6f:64:22:99:ee:
90:b4:08:62:de:07:37:1a:92:41:9f:46:d8:b5:b6:
d3:a2:0b:b1:9c:f0:9f:12:f5:31:6a:74:ef:30:fd:
8c:da:b1:5f:fa:c5:86:b3:f6:39:0c:51:5e:e2:c0:
b2:5c:52:20:33:6e:e4:91:8e:03:23:8a:77:96:75:
1c:b1:e5:8d:15:2a:67:74:d8:33:f4:16:39:c7:d9:
ee:f2:b1:7a:27:1f:80:cc:c9:ac:9d:d4:89:2b:d1:
6a:f7:15:08:3e:f9:ba:f0:4b:a1:c7:25:2a:86:97:
21:91:93:d0:26:dc:b3:19:de:09:83:6e:52:57:d7:
5c:a9:6e:f6:14:6f:59:7e:1a:6e:ab:c6:56:fa:24:
90:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:8E:1B:C0:4F:F0:4B:85:21:E8:39:99:5F:C2:91:8D:2B:5D:89
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:6c:b5:0c:8e:f6:61:0b:05:6a:a7:f0:46:3c:b5:f7:1c:88:
6b:46:95:8f:d0:32:ed:d1:e8:9d:93:d2:07:17:a0:6e:76:26:
14:30:58:1b:48:46:56:9f:9d:a0:a1:34:24:52:91:84:8f:9d:
68:79:40:3c:34:bf:b8:1f:38:33:ec:4b:43:35:11:5b:2b:c3:
96:cd:e3:43:ff:2a:ad:f6:9f:ae:a9:42:34:eb:37:be:f9:af:
59:c1:2a:93:65:f4:1f:4e:02:5b:48:5c:dc:2f:a5:63:7f:91:
fe:9e:f1:6d:72:6b:37:60:74:7d:ee:18:44:e9:de:55:8e:19:
d6:96:2a:68:27:5d:28:d4:c2:73:8c:e9:2c:de:70:2d:2a:bd:
3a:07:b2:84:da:bd:2f:6d:ad:03:99:e3:5a:18:91:4f:be:79:
cd:84:3c:b2:64:ea:88:e9:bc:48:79:04:6b:c3:21:23:37:c2:
b5:f1:3e:8b:8a:93:19:92:33:33:8d:f5:53:49:44:f0:89:97:
df:22:2d:56:3e:47:aa:9d:2c:3b:9a:d7:92:a8:3a:34:f9:21:
9c:1e:cf:73:df:6b:5b:c1:42:b7:34:c5:d0:bd:43:c0:f5:32:
a4:fb:3b:50:01:1d:7c:7f:af:57:0a:1c:5a:d0:16:9f:5a:f9:
c4:61:cc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:26 2025 by rpki-client