
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
File: 5VXdlA8xUBhdWRwtquKfKOrq9XU.mft (raw, json)
Hash identifier: 1TU5oA09MGpkMq/MKhnwS29sOcCpsRdMnzigkOMRYmU=
Subject key identifier: FF:D9:6A:52:EB:CD:F1:BF:05:D3:DB:E1:B9:41:9F:F3:8D:EB:E2:08
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Certificate issuer: /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial: 0DFC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
Manifest number: 0DF3
Signing time: Mon 20 Oct 2025 01:01:24 +0000
Manifest this update: Mon 20 Oct 2025 01:01:23 +0000
Manifest next update: Wed 22 Oct 2025 01:01:23 +0000
Files and hashes: 1: 5VXdlA8xUBhdWRwtquKfKOrq9XU.crl (hash: 8UIt+/WyXJmVyYBcfMZFr3Xb3dsjy2YB//Epp6317T8=)
2: E8DE0D8E3D8911ED8B8D47C8F1222468.roa (hash: 0zFAuBmeEnXNJJd7TsaHijdXotZ0h58i4YSoZ+ZY9H4=)
3: 9F8D736E78F411E68FF6A770F8AEA228.roa (hash: 7ziUZKYlHAOXobhxVsVrZSIl0QBZlFH2TqS8HbjPf4c=)
4: 6DFD15BE3F8511F0974E7BE1DAE4EC9C.roa (hash: Ke1aAoCozf92JPxbLuUxqgw/4bqlIdHTVHCl35J75Kc=)
5: 47FF373C78F311E6ABE5CF6EF8AEA228.roa (hash: PMUGcMSEGkK5VwbD/ElC2WVLlNF/LkvKddQXhWr3/S0=)
6: FC8B2EBE78F211E6870F9E6EF8AEA228.roa (hash: hEoaYDq5s+p9BJGFFQ8BOIdkwXKomCvKjmMvCCfXKFU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3580 (0xdfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Validity
Not Before: Oct 20 01:01:23 2025 GMT
Not After : Oct 22 01:01:23 2025 GMT
Subject: CN=68f589e3-7403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:b8:29:f3:50:5d:26:40:74:3e:46:fd:05:
c1:44:e1:43:87:ab:e1:23:20:77:e3:57:7a:dd:88:
c8:51:ad:7f:74:24:43:dd:f3:97:7d:d2:f0:5b:45:
2e:c7:ee:e0:05:f4:b1:9e:a2:72:7c:96:e4:2a:ba:
c6:3c:4f:82:47:ee:8c:57:15:be:4e:e3:c4:d8:59:
5f:56:90:c1:37:0a:43:09:c1:cc:5c:b6:9c:7c:bd:
34:db:38:57:87:c3:56:16:f8:bb:fd:a9:bd:65:b2:
ed:a2:44:4f:bb:99:19:6e:16:24:66:1b:c7:86:2f:
7f:3a:6e:6b:04:e4:8b:ba:87:25:09:e9:f1:a1:ef:
da:b4:21:b5:40:cd:ab:68:bf:02:0b:b4:72:48:77:
9a:87:c8:f0:5a:f0:48:40:24:52:dc:25:2b:54:ab:
a1:ef:ff:33:41:90:2f:20:52:1b:7e:19:98:2d:75:
f9:36:55:9e:97:ce:e2:0a:1b:d0:3c:17:33:6f:0f:
98:aa:5f:97:d6:6a:34:c9:90:83:b1:8b:6b:4b:5d:
67:84:af:42:5f:e1:3c:00:40:a0:de:8c:40:e9:8c:
ee:ea:15:63:40:b1:f1:8a:f5:23:32:b0:4c:46:36:
85:18:33:63:03:d2:fe:86:fa:d6:59:9d:a5:9d:8a:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D9:6A:52:EB:CD:F1:BF:05:D3:DB:E1:B9:41:9F:F3:8D:EB:E2:08
X509v3 Authority Key Identifier:
keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:00:2e:c8:7e:1f:63:69:6b:dc:4d:eb:a9:7d:96:0a:a6:43:
d0:d5:f0:a2:11:18:18:08:5c:62:e2:c1:16:9f:91:ae:2f:64:
12:d2:c7:96:1a:5a:af:ce:de:38:54:5a:b0:8b:9d:10:b1:28:
83:21:dc:67:25:87:d5:63:9d:6c:36:5c:01:e1:9c:de:d2:3c:
e4:c2:5c:a9:3e:f9:36:38:a6:73:96:a9:14:3b:d2:f1:52:a9:
64:1c:b5:df:7c:32:09:31:36:bb:d1:90:86:07:05:ca:af:00:
85:82:30:ba:90:27:c9:e6:ab:44:e5:4d:c7:42:7f:46:5b:24:
39:02:ab:69:05:40:f6:2f:c7:65:22:bb:7e:c8:6f:fd:08:81:
c9:f8:27:45:f4:f5:a0:af:5c:ba:2c:1d:96:5f:3c:7f:25:ca:
05:27:d2:d1:5b:04:b4:44:6b:ea:7e:33:37:92:a1:72:fb:ed:
9c:89:3e:06:b6:aa:4e:19:2c:16:39:3b:b5:cf:9a:47:7f:74:
d9:a6:80:f1:2e:47:a7:c5:90:73:e6:79:df:79:94:cf:e5:b2:
51:39:87:6f:db:35:93:70:a7:6c:89:e6:69:f6:34:00:89:10:
e3:71:0b:fb:7d:01:13:52:8d:ee:0d:1d:db:99:7e:8d:1c:ec:
9e:61:7d:39
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDfwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTEyNTRBRjExMC8GA1UEBRMoRTU1NUREOTQwRjMxNTAxODVENTkxQzJEQUFFMjlG
MjhFQUVBRjU3NTAeFw0yNTEwMjAwMTAxMjNaFw0yNTEwMjIwMTAxMjNaMBgxFjAU
BgNVBAMTDTY4ZjU4OWUzLTc0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDK77gp81BdJkB0Pkb9BcFE4UOHq+EjIHfjV3rdiMhRrX90JEPd85d90vBb
RS7H7uAF9LGeonJ8luQqusY8T4JH7oxXFb5O48TYWV9WkME3CkMJwcxctpx8vTTb
OFeHw1YW+Lv9qb1lsu2iRE+7mRluFiRmG8eGL386bmsE5Iu6hyUJ6fGh79q0IbVA
zatovwILtHJId5qHyPBa8EhAJFLcJStUq6Hv/zNBkC8gUht+GZgtdfk2VZ6XzuIK
G9A8FzNvD5iqX5fWajTJkIOxi2tLXWeEr0Jf4TwAQKDejEDpjO7qFWNAsfGK9SMy
sExGNoUYM2MD0v6G+tZZnaWdinrdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/9lq
UuvN8b8F09vhuUGf843r4ggwHwYDVR0jBBgwFoAU5VXdlA8xUBhdWRwtquKfKOrq
9XUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4QUVBMjI4LzVWWGRs
QTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVWWGRsQTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTEyNTQvQTFCMzIzRUUwMzM1MTFFNkE2NzUxOTc0RjhB
RUEyMjgvNVZYZGxBOHhVQmhkV1J3dHF1S2ZLT3JxOVhVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcAC7Ifh9jaWvcTeupfZYKpkPQ1fCi
ERgYCFxi4sEWn5GuL2QS0seWGlqvzt44VFqwi50QsSiDIdxnJYfVY51sNlwB4Zze
0jzkwlypPvk2OKZzlqkUO9LxUqlkHLXffDIJMTa70ZCGBwXKrwCFgjC6kCfJ5qtE
5U3HQn9GWyQ5AqtpBUD2L8dlIrt+yG/9CIHJ+CdF9PWgr1y6LB2WXzx/JcoFJ9LR
WwS0RGvqfjM3kqFy++2ciT4GtqpOGSwWOTu1z5pHf3TZpoDxLkenxZBz5nnfeZTP
5bJROYdv2zWTcKdsieZp9jQAiRDjcQv7fQETUo3uDR3bmX6NHOyeYX05
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:04 2025 by rpki-client