Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier: GB/f6Bk19xS0tnupRsKDN98f+HI8evRKUsReY5kx6fQ=
Subject key identifier: 7F:63:B0:2B:1C:15:55:32:9B:54:93:8C:84:54:AB:C4:6E:76:02:36
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 0282
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number: 027A
Signing time: Mon 20 Oct 2025 04:09:57 +0000
Manifest this update: Mon 20 Oct 2025 04:09:56 +0000
Manifest next update: Wed 22 Oct 2025 04:09:56 +0000
Files and hashes: 1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: RdMkcIZgX1y5j43DYdJR3vFWbzTPaIZZtxmHCd8k7Eo=)
2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
6: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 04:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 642 (0x282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Oct 20 04:09:56 2025 GMT
Not After : Oct 22 04:09:56 2025 GMT
Subject: CN=68f5b615-a2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:61:1c:60:a8:a3:2b:e0:f3:cc:8e:77:f5:
92:2a:ed:99:60:5e:b4:e8:02:4e:f8:03:9f:59:53:
34:91:39:af:68:ce:56:39:b5:9f:20:80:7e:80:6d:
47:ef:c1:0b:fc:99:34:9e:e6:02:b2:9e:6a:b4:47:
34:36:6f:60:cf:f5:ac:c2:57:dd:bf:52:d1:75:da:
a3:24:ad:4d:27:db:0e:75:b7:64:2a:a1:9e:49:08:
bc:cd:56:32:f4:fb:0f:ac:88:dd:f3:70:7b:8e:5c:
f2:fa:f4:5b:9a:97:78:dc:a8:f6:2b:33:5c:66:f3:
d8:c9:39:62:5b:23:f9:6f:84:dd:55:cc:02:d7:e2:
af:b9:dc:65:09:b9:d4:ff:53:31:4c:eb:a2:ef:5b:
71:22:79:c1:2c:b8:da:8f:3b:c1:55:6c:bf:93:e1:
59:b1:4b:a1:01:89:e1:e7:d9:2f:b7:f3:9e:e3:56:
10:4a:47:da:16:9f:52:ff:3a:f6:66:ae:39:93:f4:
00:b0:60:1f:85:e1:df:a8:54:62:88:f4:be:56:2b:
8d:32:5b:16:f0:86:41:2e:56:99:c0:72:0a:42:9c:
87:11:a1:83:ce:76:3c:5a:b1:e3:2e:41:2a:c7:19:
eb:45:82:58:33:ed:76:60:7e:d5:c9:d9:32:86:43:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:63:B0:2B:1C:15:55:32:9B:54:93:8C:84:54:AB:C4:6E:76:02:36
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5a:fd:33:b6:ba:a1:09:75:89:b0:7b:32:09:d8:ea:55:75:
0e:b8:2f:59:c3:f5:88:91:05:ac:9e:70:84:2a:0c:0b:e4:04:
36:25:9b:e9:2c:b7:7f:b9:9f:86:3b:36:9c:89:ed:ba:de:36:
8a:bd:80:c1:cb:6d:3e:e8:a4:e0:a2:f7:17:f5:ab:39:c7:2c:
a7:31:f6:1b:b5:87:8c:95:57:6a:18:78:39:ea:10:d0:09:35:
65:d4:86:2a:58:50:cf:91:1d:a7:ce:04:ef:95:be:61:af:c5:
87:d7:82:a1:ae:3b:e9:f4:86:a6:99:c7:76:36:5d:de:a5:40:
09:5a:bc:44:e5:ac:59:ed:e4:8a:aa:a4:bd:29:6d:b8:f7:51:
6c:db:da:13:93:38:93:c2:a3:c3:8f:b2:26:49:b7:aa:1e:b8:
2a:47:b3:65:0c:59:f2:97:1b:ac:58:3c:f8:83:1e:e8:79:fa:
d0:56:09:46:e2:55:eb:c7:c7:1d:6f:4e:63:db:bd:65:7c:c3:
36:70:bd:a0:44:dd:d8:c4:cf:f7:30:ff:50:79:55:c7:33:23:
3e:7d:ef:c7:db:19:d8:f3:9e:3e:e6:a2:af:fb:4c:f0:d4:fd:
35:cd:2b:ed:cb:1e:57:33:f4:d8:05:36:f6:1c:b2:76:28:3e:
bf:cf:db:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:04:31 2025 by rpki-client