
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File: CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier: NI9bGiiNOyylDZq08VlU9ou5VV1SkYNSGK3oEkPOYns=
Subject key identifier: 38:40:DA:CE:54:A6:59:EC:E3:67:77:DC:A8:91:00:89:E9:CE:0B:B3
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer: /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial: 08A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number: 089C
Signing time: Mon 20 Oct 2025 01:42:11 +0000
Manifest this update: Mon 20 Oct 2025 01:42:10 +0000
Manifest next update: Wed 22 Oct 2025 01:42:10 +0000
Files and hashes: 1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: SGG5h/oITVMglcbDJ4XFBFN/SZKGavbRgMiGbVbUuWU=)
2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2209 (0x8a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Validity
Not Before: Oct 20 01:42:10 2025 GMT
Not After : Oct 22 01:42:10 2025 GMT
Subject: CN=68f59373-59de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ca:43:97:24:d2:c7:4f:bf:d6:e8:68:6f:48:
3f:92:63:d6:a4:9a:c1:80:00:47:69:f4:1a:0f:b1:
46:88:a7:b1:be:54:ad:4e:af:dd:1e:0b:cc:71:2b:
d5:92:4d:d0:57:99:a7:16:6c:9e:4f:6b:43:a6:40:
78:dd:db:12:a0:b0:b8:b8:05:06:33:6d:8e:cd:32:
9e:93:e8:37:04:c0:8b:62:f4:b6:73:cb:86:4f:79:
c0:d9:fc:cc:e9:28:97:1f:ac:a9:b1:0e:ee:21:d6:
9e:d9:06:a9:55:67:5c:1f:25:8d:ff:d8:88:a6:92:
be:1e:47:94:2c:3e:af:03:3d:c3:2b:43:fc:37:b8:
b0:02:50:96:ce:93:15:9e:6e:37:b1:d2:96:9a:95:
5c:f0:bf:f1:92:c7:fb:53:fc:cf:3e:fb:f3:d5:cf:
9b:8f:a4:f4:70:3b:c5:a9:44:b6:35:53:56:73:bb:
da:8b:69:2b:8f:39:68:fa:20:c9:3c:ce:2f:d3:61:
a9:a6:6d:ae:6e:df:79:eb:8d:c8:98:41:2d:fb:04:
ec:c6:c1:cd:f3:f9:f6:a5:07:49:50:1c:28:b5:a5:
1a:fe:d1:ef:46:37:e2:16:91:47:76:5c:88:a6:d4:
eb:79:6b:15:9a:87:44:ee:7c:89:f7:8b:a8:7c:8f:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:DA:CE:54:A6:59:EC:E3:67:77:DC:A8:91:00:89:E9:CE:0B:B3
X509v3 Authority Key Identifier:
keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d3:0d:6c:96:80:f7:fa:a3:2d:4a:33:92:2a:5d:f9:9a:ae:c0:
e8:f3:09:e2:48:8f:6f:42:2c:39:ce:0f:05:31:9e:49:2f:a3:
a2:c5:c4:3b:c4:b0:5f:2f:43:ee:26:85:c9:26:f1:7d:47:08:
07:c5:b3:16:c9:6f:6a:e3:05:9a:f2:60:e9:1c:4a:fd:9a:1c:
3e:63:17:b8:c6:cc:c9:43:f1:8a:f9:d4:4b:18:c2:44:35:26:
86:09:ac:a8:71:83:a8:17:6f:3e:18:01:77:b6:c9:7f:28:1b:
06:a6:c4:26:70:21:af:fe:11:99:76:b8:8f:22:85:9d:29:1a:
18:5b:0f:7f:17:c4:02:7d:86:0b:39:47:65:8f:c9:1d:db:9e:
90:c9:52:cf:a9:ab:9a:84:b2:c4:d9:d5:be:7e:78:ae:e1:9e:
f7:7d:cc:bc:83:0b:58:2e:b2:8e:43:6f:53:e3:60:26:10:2f:
2d:45:d6:5c:81:07:1c:1b:48:d6:80:c7:dd:b3:50:9a:e1:d9:
f3:12:8a:99:a0:6b:3d:4f:bc:4f:e0:47:e2:55:6d:2f:1b:2f:
80:bf:93:94:de:63:f7:e7:1b:e1:14:59:fa:42:6f:93:eb:56:
a9:8f:0c:3c:63:06:17:92:77:b9:53:f3:45:48:e5:1c:98:51:
75:b3:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:21 2025 by rpki-client