Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File: 4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier: CDIYLHjpS9r8NtMkxRY6ZBNUXbsgnYI++zMbmjWzHhU=
Subject key identifier: 50:35:C1:98:5E:4E:A6:CF:47:D6:C1:53:06:C6:89:5E:88:67:75:08
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer: /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial: 036F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number: 036F
Signing time: Sun 19 Oct 2025 03:35:50 +0000
Manifest this update: Sun 19 Oct 2025 03:35:49 +0000
Manifest next update: Tue 21 Oct 2025 03:35:49 +0000
Files and hashes: 1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: V79LPgv8eMDPEwoweszfwnaLPnwg7O0vHG7H3rjlbTA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 879 (0x36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Validity
Not Before: Oct 19 03:35:49 2025 GMT
Not After : Oct 21 03:35:49 2025 GMT
Subject: CN=68f45c96-f07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:78:43:d7:a2:36:0c:16:08:e6:42:8f:21:ac:
d5:3d:2f:b8:ea:a2:69:5c:3f:14:b8:fa:86:fd:b8:
87:48:f0:ee:cc:1d:43:24:5e:42:84:b0:cb:07:71:
be:8a:08:5f:87:4e:f7:19:e6:f6:ae:4b:b4:b4:84:
0c:c6:a4:9d:59:93:9e:3f:03:1d:e7:ef:82:7c:5f:
85:d1:77:53:28:96:d1:01:5b:ab:98:c4:59:db:0e:
42:38:25:04:49:74:08:e4:fd:59:9e:de:eb:63:11:
4d:76:e9:da:30:3a:f5:52:56:b5:44:b4:ea:9e:71:
76:f5:0e:73:67:a8:81:46:15:a3:1b:30:a4:04:8a:
d5:a5:c7:76:89:cc:73:96:fc:e0:af:63:28:60:1a:
fc:e0:71:93:fa:f2:ee:62:cf:cf:d2:02:f0:f7:f6:
c9:c5:91:cd:2a:f1:7c:e1:7e:5c:13:fd:dd:51:b8:
53:ab:60:de:3a:17:85:46:f9:5e:66:8c:ee:42:f7:
7c:be:eb:27:90:81:3e:f9:2a:e7:92:48:1c:fd:8f:
4f:fe:0c:7d:c6:d6:6a:54:ac:08:e6:0d:0d:f0:3c:
65:09:d9:17:e5:58:e8:70:64:37:70:a3:dc:4e:f4:
4c:94:f2:81:73:52:f6:d4:f9:dd:52:9a:15:a2:ce:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:35:C1:98:5E:4E:A6:CF:47:D6:C1:53:06:C6:89:5E:88:67:75:08
X509v3 Authority Key Identifier:
keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:3c:06:07:83:e0:bc:40:5f:68:da:00:62:16:b7:de:15:f3:
26:81:36:0b:a4:91:98:a9:9b:54:49:42:65:dc:84:5e:be:94:
e7:7a:36:ca:5c:54:4e:97:91:b0:aa:af:5a:1b:d7:1c:ed:84:
93:f2:66:84:70:11:b9:68:a8:d2:44:c0:72:30:1d:f6:81:0d:
b0:59:7c:51:57:ca:a3:a9:aa:c7:c7:2e:45:11:37:61:98:06:
40:9d:f5:1f:57:c6:af:94:30:63:97:04:cf:a2:c6:25:39:20:
0b:b6:45:1a:72:7f:69:cc:f5:1d:dd:54:fa:d5:12:80:e4:48:
57:1c:c2:7f:de:24:ff:00:cf:37:87:0e:53:fe:e0:5c:6f:be:
35:64:72:b5:b7:4f:a4:f8:12:e7:df:79:be:8e:02:d4:53:f4:
02:a5:44:9f:33:23:96:64:25:95:5d:3c:68:09:85:da:c7:ac:
56:63:15:36:a6:ba:f3:bc:37:fe:47:a6:46:ec:31:7f:8f:28:
60:05:de:c2:95:c4:0b:33:54:a2:9a:14:49:db:35:61:1d:aa:
d1:79:20:03:64:07:30:af:ee:8a:de:b8:00:e0:66:77:3c:86:
4e:43:a2:21:01:c5:e3:c0:cc:0a:71:da:8c:e4:30:0c:28:b5:
9c:5e:fe:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA28wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkyQjRBRjExMC8GA1UEBRMoRTJDMTE3ODIzQjcyNzdCRDJCQURFRkIyQjU3N0M2
Q0Y5Qzc2NEQ4RTAeFw0yNTEwMTkwMzM1NDlaFw0yNTEwMjEwMzM1NDlaMBgxFjAU
BgNVBAMTDTY4ZjQ1Yzk2LWYwN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNeEPXojYMFgjmQo8hrNU9L7jqomlcPxS4+ob9uIdI8O7MHUMkXkKEsMsH
cb6KCF+HTvcZ5vauS7S0hAzGpJ1Zk54/Ax3n74J8X4XRd1MoltEBW6uYxFnbDkI4
JQRJdAjk/Vme3utjEU126dowOvVSVrVEtOqecXb1DnNnqIFGFaMbMKQEitWlx3aJ
zHOW/OCvYyhgGvzgcZP68u5iz8/SAvD39snFkc0q8XzhflwT/d1RuFOrYN46F4VG
+V5mjO5C93y+6yeQgT75KueSSBz9j0/+DH3G1mpUrAjmDQ3wPGUJ2RflWOhwZDdw
o9xO9EyU8oFzUvbU+d1SmhWizpZfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUDXB
mF5Ops9H1sFTBsaJXohndQgwHwYDVR0jBBgwFoAU4sEXgjtyd70rre+ytXfGz5x2
TY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5MkI0L0JFM0Y4OUUyMEMyQjExRUVBM0E1MDE2QzRBRDlFNkZDLzRzRVhn
anR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRzRVhnanR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTkyQjQvQkUzRjg5RTIwQzJCMTFFRUEzQTUwMTZDNEFE
OUU2RkMvNHNFWGdqdHlkNzBycmUteXRYZkd6NXgyVFk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGPAYHg+C8QF9o2gBiFrfeFfMmgTYL
pJGYqZtUSUJl3IRevpTnejbKXFROl5Gwqq9aG9cc7YST8maEcBG5aKjSRMByMB32
gQ2wWXxRV8qjqarHxy5FETdhmAZAnfUfV8avlDBjlwTPosYlOSALtkUacn9pzPUd
3VT61RKA5EhXHMJ/3iT/AM83hw5T/uBcb741ZHK1t0+k+BLn33m+jgLUU/QCpUSf
MyOWZCWVXTxoCYXax6xWYxU2prrzvDf+R6ZG7DF/jyhgBd7ClcQLM1SimhRJ2zVh
HarReSADZAcwr+6K3rgA4GZ3PIZOQ6IhAcXjwMwKcdqM5DAMKLWcXv6d
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:22:11 2025 by rpki-client