Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: EMOSS51J4pE1hSAAA/TX2v/zys+MfImZMdx6i4hPlXs=
Subject key identifier: F7:40:4B:53:A2:33:ED:3E:5C:DE:22:A3:5A:7F:FD:9B:32:C2:61:AC
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 043A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 043A
Signing time: Mon 20 Oct 2025 03:11:18 +0000
Manifest this update: Mon 20 Oct 2025 03:11:17 +0000
Manifest next update: Wed 22 Oct 2025 03:11:17 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: KBI+SyMHjfwewi9YZLehUQdkxe4r4hX1TPxdBKl8gIA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1082 (0x43a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Oct 20 03:11:17 2025 GMT
Not After : Oct 22 03:11:17 2025 GMT
Subject: CN=68f5a856-43e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:fd:51:81:64:51:1e:56:eb:b4:76:c3:b1:
e7:f4:a6:b3:1e:f5:93:05:4d:a2:e1:ba:b4:f1:64:
d3:e8:e4:b0:73:c0:fb:34:cc:00:5a:39:f1:f8:71:
ae:79:2d:f1:d0:8c:01:47:6c:1d:c0:71:32:bb:0e:
17:71:de:f1:c2:f1:26:21:8e:bb:28:da:33:31:d2:
a1:d7:7c:71:89:59:7e:6a:f3:b4:5d:b2:f5:57:5b:
8e:9b:00:f0:c7:05:cc:48:40:c9:68:20:f3:c6:d2:
a9:6c:86:03:0c:aa:d6:b6:b2:f2:e1:fd:b2:87:f8:
f0:62:bb:86:c0:cb:33:83:89:c3:05:f9:43:7e:77:
8d:e3:5a:62:d2:0d:04:38:95:95:c9:15:a2:8f:55:
19:f4:37:4c:2f:e7:1b:02:70:a5:f9:99:da:3d:a2:
59:45:c7:0d:36:51:b0:65:34:c3:43:d0:10:5c:a3:
01:b7:1c:ac:c1:7f:0f:25:e3:81:6f:9b:16:73:f3:
fe:30:af:2e:1e:79:10:ff:1d:b2:a8:1f:f7:13:89:
90:52:04:5e:17:eb:7f:f5:a4:37:96:6c:23:d3:4f:
8a:2f:ce:00:13:0d:6b:21:65:d3:2c:07:9a:b3:91:
16:95:66:6c:7d:01:8a:7b:81:9d:fc:6d:23:37:8f:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:40:4B:53:A2:33:ED:3E:5C:DE:22:A3:5A:7F:FD:9B:32:C2:61:AC
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:84:0a:b9:ff:a3:b7:da:ff:fa:1f:db:5d:38:ce:09:35:12:
ad:e4:ec:f1:87:66:7b:17:ca:81:b1:f0:44:20:0c:e3:97:ca:
25:a2:c0:57:0e:c6:a3:7a:87:73:22:48:bf:30:b0:d2:01:4f:
d3:05:dd:b4:c5:6f:f6:27:5b:56:a5:e8:a5:00:54:59:e6:c7:
63:84:d1:10:19:f6:8d:a0:d8:37:6c:d3:7a:07:57:e4:3c:f0:
89:e8:1f:e6:3b:66:49:8b:88:d4:3d:28:fd:51:05:c5:fe:52:
d5:79:29:b6:91:a0:f9:63:6b:f6:16:cb:69:3d:46:97:ca:0b:
fc:5e:18:a2:b7:6e:37:8c:3c:1f:d3:96:44:8c:8a:94:72:a0:
2a:cb:60:84:0a:96:44:16:1d:67:54:1b:ff:15:cd:bd:5e:d7:
3e:ff:a4:b6:5a:d9:83:a6:70:44:ea:a7:fd:88:ee:c2:67:06:
1b:c4:06:13:88:86:13:93:52:c1:97:8b:a7:ab:46:72:77:0c:
14:84:71:d2:ee:dc:bb:ac:cc:ea:d5:b1:7a:b0:b9:d3:07:6d:
d3:bf:e1:42:80:66:90:77:0e:cb:a3:1e:27:a6:a1:5f:75:cb:
b9:0f:fe:e2:96:78:3c:35:02:ea:b8:bd:03:40:74:86:3d:ec:
38:33:9b:a7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBRjExMC8GA1UEBRMoMDc0QUU0Q0JDQkNFNkY0RDk4ODZGRUYyMTE1MkIx
M0E2QURBNzNENjAeFw0yNTEwMjAwMzExMTdaFw0yNTEwMjIwMzExMTdaMBgxFjAU
BgNVBAMTDTY4ZjVhODU2LTQzZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8Xv1RgWRRHlbrtHbDsef0prMe9ZMFTaLhurTxZNPo5LBzwPs0zABaOfH4
ca55LfHQjAFHbB3AcTK7Dhdx3vHC8SYhjrso2jMx0qHXfHGJWX5q87RdsvVXW46b
APDHBcxIQMloIPPG0qlshgMMqta2svLh/bKH+PBiu4bAyzODicMF+UN+d43jWmLS
DQQ4lZXJFaKPVRn0N0wv5xsCcKX5mdo9ollFxw02UbBlNMND0BBcowG3HKzBfw8l
44FvmxZz8/4wry4eeRD/HbKoH/cTiZBSBF4X63/1pDeWbCPTT4ovzgATDWshZdMs
B5qzkRaVZmx9AYp7gZ38bSM3j4cZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU90BL
U6Iz7T5c3iKjWn/9mzLCYawwHwYDVR0jBBgwFoAUB0rky8vOb02Yhv7yEVKxOmra
c9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzMyMUIwMjAyN0EwOTExRURBQ0E2NDg4NUYxMjIyNDY4L0Iwcmt5
OHZPYjAyWWh2N3lFVkt4T21yYWM5WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Iwcmt5OHZPYjAyWWh2N3lFVkt4T21yYWM5WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTlGOUMvMzIxQjAyMDI3QTA5MTFFREFDQTY0ODg1RjEy
MjI0NjgvQjBya3k4dk9iMDJZaHY3eUVWS3hPbXJhYzlZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzhAq5/6O32v/6H9tdOM4JNRKt5Ozx
h2Z7F8qBsfBEIAzjl8olosBXDsajeodzIki/MLDSAU/TBd20xW/2J1tWpeilAFRZ
5sdjhNEQGfaNoNg3bNN6B1fkPPCJ6B/mO2ZJi4jUPSj9UQXF/lLVeSm2kaD5Y2v2
FstpPUaXygv8Xhiit243jDwf05ZEjIqUcqAqy2CECpZEFh1nVBv/Fc29Xtc+/6S2
WtmDpnBE6qf9iO7CZwYbxAYTiIYTk1LBl4unq0ZydwwUhHHS7ty7rMzq1bF6sLnT
B23Tv+FCgGaQdw7Lox4npqFfdcu5D/7ilng8NQLquL0DQHSGPew4M5un
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:09 2025 by rpki-client