Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File: vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier: fsjJ95mm/ki6/dOqQeNrItwVnbcVGp/2qStSHejBOlE=
Subject key identifier: F0:D6:C1:25:26:B3:13:2D:5C:4D:93:61:34:EF:CB:D3:D1:16:9E:B8
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer: /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial: 0341
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number: 0341
Signing time: Mon 20 Oct 2025 03:43:20 +0000
Manifest this update: Mon 20 Oct 2025 03:43:19 +0000
Manifest next update: Wed 22 Oct 2025 03:43:19 +0000
Files and hashes: 1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: cWkxJ44qBpvF4a7EyA681O/2utO3NWB4IBwqLMrIka4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 833 (0x341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Validity
Not Before: Oct 20 03:43:19 2025 GMT
Not After : Oct 22 03:43:19 2025 GMT
Subject: CN=68f5afd8-1b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:3a:d8:bd:e9:26:ad:df:6b:ef:3d:29:7c:
e1:fd:82:c2:ad:02:95:19:69:3e:cb:16:f7:f7:3b:
46:4b:52:41:df:a7:00:d6:00:4d:18:99:64:09:3f:
df:c4:9c:d5:d9:fe:f4:76:df:98:cc:e3:c7:bf:a7:
0a:0f:f9:d6:3f:bf:ec:d8:1a:30:97:e5:e5:96:8e:
d9:d6:68:82:8d:09:ab:c8:01:0a:6c:0d:73:72:39:
a3:bb:e3:dc:4e:85:d1:7e:84:c0:54:4c:ad:4f:ce:
4c:8b:f9:31:d4:04:72:5c:d3:86:44:7a:7e:e4:20:
d1:af:24:52:5b:57:09:bd:da:90:2e:9a:5d:97:30:
df:90:3c:6b:fc:5f:e2:c0:2c:5a:fe:a4:04:5c:fb:
fb:17:c8:0b:48:00:9e:da:73:09:dd:9e:d6:d7:b7:
3b:c7:30:20:d8:ec:09:cc:a7:f9:1e:bb:ba:22:8c:
53:79:20:b2:fb:ff:fd:f6:30:d8:00:dc:d8:95:1f:
d9:c2:1b:58:e7:27:68:72:c5:90:0c:f4:ce:20:66:
72:71:d6:24:ec:9c:e6:d7:a6:3e:b0:56:01:a0:5d:
62:7b:3e:bc:64:b5:f3:1c:fb:8a:05:17:1c:cd:44:
04:ae:4d:3f:fc:25:67:31:28:00:0d:11:41:f3:6a:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D6:C1:25:26:B3:13:2D:5C:4D:93:61:34:EF:CB:D3:D1:16:9E:B8
X509v3 Authority Key Identifier:
keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d1:1d:0e:2a:f0:ad:90:62:5a:d1:e0:e1:ad:d9:9d:f4:03:
4f:ca:9e:8f:d6:d5:f2:39:4f:54:d9:41:21:b2:83:7e:b2:e4:
5c:86:20:d7:64:73:c5:06:02:59:d1:12:7f:7d:14:81:59:f3:
d9:f0:6a:af:a8:90:87:07:8b:98:90:94:cc:fd:99:68:97:88:
7d:73:2d:bc:96:db:3b:f2:48:37:91:be:f9:c8:c7:ff:3a:72:
88:57:ee:c2:e0:e3:d2:b4:44:dc:73:57:f5:fb:83:62:f8:d5:
0c:7a:d9:9b:74:f5:5e:be:f2:54:9e:5e:5a:b5:d6:29:7a:59:
17:02:a1:74:0c:47:05:38:dd:5f:ca:92:73:80:57:91:d5:a3:
97:18:f4:86:8b:28:53:55:67:78:a3:22:d4:b5:1d:7e:dd:e5:
70:71:27:a7:07:6d:31:bd:b7:60:f0:f3:f3:1c:ac:b9:5b:0f:
6d:6b:5f:5a:46:34:84:de:ae:a0:05:5e:e5:61:03:47:16:f0:
bf:b1:79:e8:42:e7:bc:16:43:ec:d4:79:2f:e3:6c:c8:65:3e:
45:6d:b3:31:e0:74:ea:ea:e0:5f:61:4c:da:0e:b1:3e:1f:a9:
15:78:92:b5:9d:13:ac:6f:a4:36:36:4a:fd:31:23:2f:5f:ea:
7e:14:52:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:17 2025 by rpki-client