
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: eYuCwPrdD37Au9cVWYIgqyA0D6MXKCej0DhB0aKtXvI=
Subject key identifier: BA:93:BD:79:37:98:9D:CB:8F:03:80:88:F5:E8:53:44:9F:2D:05:60
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 03C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 03C9
Signing time: Mon 20 Oct 2025 03:26:07 +0000
Manifest this update: Mon 20 Oct 2025 03:26:06 +0000
Manifest next update: Wed 22 Oct 2025 03:26:06 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: HREQ+osjy2zmlTo+0KjbtX2v5/sXG2BnxXLsW7MBYvg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 969 (0x3c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Oct 20 03:26:06 2025 GMT
Not After : Oct 22 03:26:06 2025 GMT
Subject: CN=68f5abcf-6228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:f8:c2:fa:b5:b9:dc:fc:77:5a:10:dd:fd:
e7:a6:60:77:c3:b1:8d:6f:fc:be:41:9a:35:11:cb:
bf:31:39:ae:99:dd:27:a6:ae:c9:51:37:63:1c:f1:
6e:cd:16:e1:3f:34:04:83:77:25:ad:94:c6:2f:84:
36:43:27:ec:a7:67:65:90:61:43:7e:f7:f7:9c:3c:
65:c0:08:ef:5c:70:10:5d:44:a8:38:5e:4e:96:6a:
64:6e:21:ad:24:92:e5:c5:61:cd:2a:71:f9:a6:d0:
a2:c5:a8:77:02:09:93:01:b1:df:6a:5c:6f:67:d8:
5b:50:91:28:01:cc:96:3c:5b:dd:d5:23:7f:ce:9d:
9c:4b:89:d9:6a:99:fc:2c:25:e9:be:0e:b1:34:8d:
0d:b5:ba:a4:8f:47:59:77:51:95:0a:87:f3:f3:55:
ac:ff:8b:da:0c:29:de:7e:b4:09:ce:8f:61:3e:e2:
ef:aa:3f:75:5a:9a:79:52:5c:c5:54:a0:f0:5a:fb:
77:4e:d6:0e:be:98:25:83:fc:a5:98:b2:ad:92:bc:
f7:88:28:c1:35:15:97:22:cc:90:b6:27:0a:96:12:
d4:04:88:b7:4b:a4:15:f8:ca:24:80:d7:56:0d:32:
5f:65:cc:89:ca:b4:18:0e:c9:35:06:79:df:2c:14:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:93:BD:79:37:98:9D:CB:8F:03:80:88:F5:E8:53:44:9F:2D:05:60
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:bd:bb:3a:cd:ca:79:08:0f:27:f0:37:f8:32:59:01:1e:d3:
f4:0c:46:5d:78:01:3e:fa:77:24:bf:73:a9:0a:03:7e:6a:26:
34:ef:c5:cb:0c:8f:7a:17:de:d5:61:b2:fd:16:27:3c:e4:59:
2d:cb:1a:b8:7f:89:e1:4d:91:85:ec:d7:01:35:0e:37:03:e9:
ef:8f:25:c5:81:2c:6c:b3:e2:b5:0f:62:88:35:4b:9f:c5:67:
19:04:73:30:73:42:53:56:73:23:55:c3:c3:d8:d6:61:5b:4b:
56:85:6e:9b:a4:11:2c:72:ee:6d:95:6e:bb:bf:4e:d4:59:92:
dc:84:52:e2:99:4f:8e:0c:bd:23:69:69:66:b9:2c:6d:94:73:
39:f9:c5:f1:37:d0:b7:d5:90:df:a5:5b:a0:58:4f:d0:d8:23:
d5:89:7d:00:7c:55:6f:5c:ab:4c:a1:9f:5f:95:9c:b8:e4:94:
bb:cf:1d:63:bc:df:3f:26:1f:d8:28:43:24:4a:55:9d:94:a5:
74:2b:db:40:06:9d:16:b8:b3:7f:c9:d9:a2:86:37:a0:b0:d2:
45:87:64:55:34:53:2d:e0:bd:d2:8e:a8:33:97:79:fc:12:16:
ee:22:66:c3:14:6f:01:b2:f8:31:18:ee:62:7c:44:ca:48:2c:
6a:9f:63:37
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCOTVBRjExMC8GA1UEBRMoQUUxMjhCMjJGNTFEQzY1OEQ1NUUyMTU2RUJBRjcz
RDZDNkFENzYyQTAeFw0yNTEwMjAwMzI2MDZaFw0yNTEwMjIwMzI2MDZaMBgxFjAU
BgNVBAMTDTY4ZjVhYmNmLTYyMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3GPjC+rW53Px3WhDd/eemYHfDsY1v/L5BmjURy78xOa6Z3SemrslRN2Mc
8W7NFuE/NASDdyWtlMYvhDZDJ+ynZ2WQYUN+9/ecPGXACO9ccBBdRKg4Xk6WamRu
Ia0kkuXFYc0qcfmm0KLFqHcCCZMBsd9qXG9n2FtQkSgBzJY8W93VI3/OnZxLidlq
mfwsJem+DrE0jQ21uqSPR1l3UZUKh/PzVaz/i9oMKd5+tAnOj2E+4u+qP3VamnlS
XMVUoPBa+3dO1g6+mCWD/KWYsq2SvPeIKME1FZcizJC2JwqWEtQEiLdLpBX4yiSA
11YNMl9lzInKtBgOyTUGed8sFI1vAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUupO9
eTeYncuPA4CI9ehTRJ8tBWAwHwYDVR0jBBgwFoAUrhKLIvUdxljVXiFW669z1sat
diowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2Qjk1LzYyNDEyQUMwQ0EyNjExRUQ5MkU5Qzk4RkYxMjIyNDY4L3JoS0xJ
dlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoS0xJdlVkeGxqVlhpRlc2Njl6MXNhdGRpby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCOTUvNjI0MTJBQzBDQTI2MTFFRDkyRTlDOThGRjEy
MjI0NjgvcmhLTEl2VWR4bGpWWGlGVzY2OXoxc2F0ZGlvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2vbs6zcp5CA8n8Df4MlkBHtP0DEZd
eAE++nckv3OpCgN+aiY078XLDI96F97VYbL9Fic85Fktyxq4f4nhTZGF7NcBNQ43
A+nvjyXFgSxss+K1D2KINUufxWcZBHMwc0JTVnMjVcPD2NZhW0tWhW6bpBEscu5t
lW67v07UWZLchFLimU+ODL0jaWlmuSxtlHM5+cXxN9C31ZDfpVugWE/Q2CPViX0A
fFVvXKtMoZ9flZy45JS7zx1jvN8/Jh/YKEMkSlWdlKV0K9tABp0WuLN/ydmihjeg
sNJFh2RVNFMt4L3Sjqgzl3n8EhbuImbDFG8BsvgxGO5ifETKSCxqn2M3
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:49 2025 by rpki-client