Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File: jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier: 5/p/U1Yoi7cZTwJQO6nCFeGorcBtnOEF+RxpRD00JTI=
Subject key identifier: 5E:7B:81:72:CF:9E:DC:89:5A:46:20:C3:D0:15:0E:92:5F:87:73:67
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer: /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial: 0476
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number: 0474
Signing time: Sun 19 Oct 2025 03:05:29 +0000
Manifest this update: Sun 19 Oct 2025 03:05:29 +0000
Manifest next update: Tue 21 Oct 2025 03:05:29 +0000
Files and hashes: 1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: jDaVMLipKwEgVssHEGwJw9lpaFsUFUYP1BYdt4KPtFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Validity
Not Before: Oct 19 03:05:29 2025 GMT
Not After : Oct 21 03:05:29 2025 GMT
Subject: CN=68f45579-cb2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e8:a0:ab:2b:a5:61:43:a6:86:33:4f:c1:9b:
44:52:97:fc:9e:f9:b3:55:c6:26:ae:e5:c7:bf:59:
7a:9e:71:98:48:4f:95:4e:3a:9a:d8:11:a5:35:f2:
40:04:4d:af:9d:eb:cd:cf:f8:04:cf:4d:e3:8a:fb:
c2:ae:68:ad:da:1d:59:c8:f8:f1:8c:61:48:3a:0a:
19:cb:af:a9:24:91:b4:ed:08:3f:31:f4:39:89:a0:
bf:eb:6a:08:02:02:2b:61:eb:55:95:b5:57:1b:22:
be:3c:6b:7c:e4:28:a8:19:9d:4b:1e:b1:13:c7:53:
75:89:98:6f:c1:21:29:fa:ad:48:f7:5b:e4:de:1a:
d6:a9:6c:96:9f:06:7e:de:46:c2:5d:b8:33:bb:58:
c0:54:92:0b:6e:d4:e6:85:1d:cb:3c:17:09:34:b0:
e5:4c:08:68:17:05:e2:f1:b1:79:bd:ff:7e:2e:e9:
99:34:e2:54:a0:10:49:aa:38:27:e9:46:e2:ea:5f:
57:1a:19:6f:6a:5a:3d:d0:93:1a:de:84:c2:3f:69:
a7:5e:9d:0c:63:d6:78:b8:fa:d0:99:8a:03:5c:12:
4d:86:a0:0e:da:79:82:c8:06:30:52:2b:b3:5c:3b:
00:23:52:4f:97:75:6e:30:4a:91:a1:06:10:fc:bb:
0f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:81:72:CF:9E:DC:89:5A:46:20:C3:D0:15:0E:92:5F:87:73:67
X509v3 Authority Key Identifier:
keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:0a:ed:9d:7b:a6:94:f9:5e:5f:ff:ff:b1:5d:6b:31:c9:00:
ab:69:8e:97:58:4d:fa:c6:1b:08:14:10:72:a8:0f:f6:f7:87:
f0:30:d4:36:ba:4c:be:6a:ef:70:a4:43:e7:89:4b:d4:5d:b9:
b9:8d:ea:c1:59:af:76:fd:8b:2c:fd:0f:4c:de:83:3a:d6:60:
39:b4:81:ee:b1:48:0c:87:29:97:59:67:17:e7:b4:eb:3e:ab:
00:1f:98:b8:a0:9f:91:ab:f8:d4:e8:3b:7b:a1:7f:69:01:85:
67:34:38:6d:39:f1:8e:ae:f9:dc:ad:8e:f8:88:ff:d3:ae:c0:
d4:78:44:36:88:ae:06:8a:5d:56:af:54:16:7d:86:11:80:a5:
81:ab:8a:31:06:78:e2:9e:59:65:f7:66:82:f9:5d:82:40:20:
c9:f4:b6:48:63:37:39:0b:1a:13:c0:16:ac:e6:53:e6:a3:e0:
92:34:e4:72:7e:88:90:0d:9f:1d:c4:71:3e:55:a9:a6:90:66:
16:2f:85:4d:57:1d:69:16:c1:01:92:4a:b3:9a:61:c6:f9:64:
a2:64:ee:54:fc:cf:22:99:ff:4a:72:1e:75:a6:49:49:db:f6:
88:0c:c9:71:69:c9:16:5a:77:50:9e:36:81:ab:42:de:71:fe:
1d:cd:f6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:04 2025 by rpki-client