Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
File: 2cDlwkl6yIv_-87Z9V1goiiYkn8.mft (raw, json)
Hash identifier: tZ5fWvXGHDelotAYQILUxC97Fgl1yJz7AqtheMwwXz8=
Subject key identifier: 0A:6E:0C:61:A9:9B:C6:08:BC:65:E2:69:83:3C:20:8A:A9:B0:59:2E
Authority key identifier: D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
Certificate issuer: /CN=F3644EA8AF/serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Certificate serial: 66
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
Manifest number: 65
Signing time: Mon 20 Oct 2025 05:08:56 +0000
Manifest this update: Mon 20 Oct 2025 05:08:55 +0000
Manifest next update: Wed 22 Oct 2025 05:08:55 +0000
Files and hashes: 1: 2cDlwkl6yIv_-87Z9V1goiiYkn8.crl (hash: kZ84WQRFL7NU2gBy7zLqSjTyfyMwO1jUTZlKXzFMwks=)
2: 696CD0C060B411F0907E96B2DAE4EC9C.roa (hash: 5bAy/PZpHx90ghvP8O3g7YznUOeX+iyLW+PI1ddCQfo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102 (0x66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644EA8AF, serialNumber=D9C0E5C2497AC88BFFFBCED9F55D60A22898927F
Validity
Not Before: Oct 20 05:08:55 2025 GMT
Not After : Oct 22 05:08:55 2025 GMT
Subject: CN=68f5c3e7-2e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:ed:65:ad:f8:f9:8d:4c:b8:5f:ad:60:06:
a4:a5:da:c3:ac:7e:4e:71:50:73:f4:d2:13:6d:ad:
63:d2:e8:5a:81:2d:7b:ac:54:2b:25:9a:0d:8a:8a:
ab:cd:60:b0:d8:e6:f1:45:eb:6e:1c:2a:89:47:cf:
d5:87:a1:fa:7a:ac:15:7a:1d:f6:b1:49:4e:2a:cd:
6c:9c:00:33:21:b4:bb:30:83:04:cf:28:3f:1e:1c:
cb:34:04:0e:6f:6b:64:cd:46:f3:1f:21:89:66:87:
db:31:2a:55:43:9c:d9:b6:24:e0:6c:13:e6:ac:7a:
fe:6d:46:92:08:88:b3:8d:12:23:06:2f:ae:a3:d4:
4f:6b:7d:13:0d:d3:af:75:4b:d3:9e:64:a1:70:3f:
83:4b:0e:43:fb:56:98:5c:f8:04:a9:53:d8:16:68:
e5:7c:30:79:03:0f:96:35:65:e5:e9:16:77:f9:56:
40:b5:19:57:8a:30:cb:6d:1f:4f:93:da:89:06:a6:
f6:b8:bf:b4:a8:9a:e5:73:5c:d8:91:78:61:f2:99:
52:14:6a:e1:53:36:03:cd:e4:7f:49:54:1e:14:e6:
bf:36:65:b7:03:6a:4a:58:1b:bd:d5:a4:50:72:92:
ac:cd:07:fc:d4:5a:b0:7f:81:a3:fc:54:47:f0:5a:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:0C:61:A9:9B:C6:08:BC:65:E2:69:83:3C:20:8A:A9:B0:59:2E
X509v3 Authority Key Identifier:
keyid:D9:C0:E5:C2:49:7A:C8:8B:FF:FB:CE:D9:F5:5D:60:A2:28:98:92:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2cDlwkl6yIv_-87Z9V1goiiYkn8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644EA8/C396ACEE60A811F0B48991E5DAE4EC9C/2cDlwkl6yIv_-87Z9V1goiiYkn8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a8:c6:82:da:be:a1:d8:d8:1e:d8:2c:d7:8e:9d:d4:35:36:
25:c2:95:91:88:c3:67:75:d8:8b:39:81:1c:7d:0e:41:36:06:
05:11:27:17:84:c1:29:07:e9:e2:9c:3a:67:33:40:01:ed:9b:
3e:63:76:65:83:96:06:fa:07:96:a0:6a:ff:af:fe:ef:a5:97:
80:d0:f1:ab:f2:5c:1c:db:97:16:dd:bb:bb:d1:5b:8e:d4:e1:
fb:50:f0:da:45:33:25:2b:34:0d:f5:24:a7:a6:70:c7:bd:42:
47:33:00:0a:5f:a7:bb:d0:7c:4a:3f:49:38:21:d6:fc:65:cd:
3e:a5:63:33:95:fe:14:02:31:7d:2d:29:96:84:3b:3f:24:3a:
c6:05:a7:d0:43:27:99:41:63:01:4b:86:d7:be:06:95:ae:86:
5d:92:c9:d9:ee:02:2f:46:1a:bd:9c:fe:fa:e1:1d:99:6a:0d:
3f:74:9b:3e:61:78:a0:ed:80:1d:08:19:16:42:f6:f7:45:10:
eb:fb:f0:9a:06:a5:75:82:8f:d8:57:7a:ec:1f:8d:8c:f4:65:
f6:f2:49:03:3e:a5:4e:52:c5:b5:c6:5e:4d:75:cd:81:36:2d:
79:9b:b5:f8:81:e2:69:03:6c:67:71:75:18:c2:e5:a8:f8:07:
db:4b:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:27 2025 by rpki-client