Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: ilzHLubVJ6aw5pskCg+tb830XKh/jfrc9BQk9bBXl1g=
Subject key identifier: DA:85:1C:B1:40:74:29:E5:A9:78:54:C5:E8:62:69:D0:90:EB:96:16
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 04AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 04A0
Signing time: Sun 19 Oct 2025 03:03:25 +0000
Manifest this update: Sun 19 Oct 2025 03:03:25 +0000
Manifest next update: Tue 21 Oct 2025 03:03:25 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: FTxK2gKkkiV/S0bExhXrw/SfYzfQ64a9Nsr0Lhsmpn8=)
2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
5: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Oct 19 03:03:25 2025 GMT
Not After : Oct 21 03:03:25 2025 GMT
Subject: CN=68f454fd-31c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:62:c9:f3:aa:3f:60:8d:3a:63:04:0c:da:
f4:2b:3b:b8:36:67:5c:e6:4d:9c:36:4b:5d:31:6c:
d3:16:2e:8a:25:de:57:30:81:88:61:51:00:32:43:
25:b0:72:0b:65:c0:a9:3a:b1:8e:a3:21:a5:6d:d2:
8a:1b:f0:83:1e:a8:c4:f2:f6:45:80:f1:17:c0:43:
4a:6d:ec:fa:33:cb:60:3f:36:fc:bb:83:90:af:60:
1b:90:38:3d:e3:22:9b:38:6e:85:51:21:20:14:fb:
d9:b6:2c:fe:f8:19:39:93:52:fd:3f:3d:c6:21:85:
6e:0a:61:f6:68:3a:db:ea:c4:d6:82:74:99:16:99:
06:37:b2:70:ce:5c:a9:6c:85:53:6e:3b:62:80:96:
fa:82:c0:53:77:ab:f7:a7:f1:c5:f8:8a:93:23:25:
5c:43:1c:02:2e:49:0d:8d:c7:24:72:4b:cf:fb:d4:
2f:f8:42:a9:bf:77:17:55:3a:f6:09:ed:ce:6b:ed:
86:4f:10:91:ac:1a:ea:f0:02:2c:09:ac:b3:13:ab:
9b:ed:66:3b:ff:92:f8:78:f2:d7:18:eb:8e:89:eb:
1f:f4:ab:c6:e3:ed:2e:8c:5e:89:03:0c:df:e2:f3:
74:bd:4a:24:36:c2:c5:47:5f:4b:f2:b6:b0:8d:7b:
e9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:85:1C:B1:40:74:29:E5:A9:78:54:C5:E8:62:69:D0:90:EB:96:16
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:7d:9f:83:75:bc:73:8c:76:2b:fb:68:26:0b:f8:56:a2:
e6:36:d8:f9:23:94:3f:7f:08:6b:2e:21:46:e0:96:7e:8e:6e:
38:3e:2d:b3:dd:ce:31:25:23:b9:fb:30:7d:23:d6:27:02:a4:
68:1b:e2:39:b3:1c:ea:42:0c:b9:b2:03:31:f9:87:68:75:9e:
a7:db:d1:88:c6:b8:79:2b:57:92:ff:a1:26:c2:69:50:c3:2b:
11:bd:f8:4a:64:a0:b6:2f:40:2f:d5:61:40:f3:69:d4:da:0a:
2b:86:73:98:44:42:b3:83:19:30:2e:2e:c7:98:6c:3b:c6:e9:
47:e7:ad:82:3c:d5:5c:e1:54:81:41:ff:c4:da:3f:a2:8d:61:
86:2f:e4:87:1f:8f:52:34:7f:86:55:30:a7:03:02:b3:f2:8d:
6e:a6:16:c4:f9:31:65:9a:67:26:c6:7d:90:c4:ec:18:3f:65:
e0:26:1c:66:18:89:ac:c4:ff:7e:2c:e6:4f:83:89:8c:b2:ea:
bc:3e:70:f7:ef:07:e3:da:50:c5:55:f2:01:2a:0c:69:52:fd:
3c:86:e6:a7:54:0c:e5:e6:66:3a:19:25:4a:62:27:65:ee:aa:
53:d6:08:7f:f0:00:29:b7:85:dd:86:d9:85:7f:44:46:70:ca:
bd:40:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:28 2025 by rpki-client