Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File: Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier: ByxNG3LUII5LS8RMHd8c3ERLidxkWdye0lX8PupEcuc=
Subject key identifier: 09:3B:87:03:E0:CF:55:13:53:07:A8:85:D8:56:A6:CC:5F:85:96:8C
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer: /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial: 0414
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number: 0412
Signing time: Mon 20 Oct 2025 03:15:17 +0000
Manifest this update: Mon 20 Oct 2025 03:15:16 +0000
Manifest next update: Wed 22 Oct 2025 03:15:16 +0000
Files and hashes: 1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: TDwAusp2vV50sENIPO0z1lEG4WNXn39GYPHXKGZY06s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Validity
Not Before: Oct 20 03:15:16 2025 GMT
Not After : Oct 22 03:15:16 2025 GMT
Subject: CN=68f5a945-6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:bf:37:18:fa:7f:e3:07:4e:02:1b:e7:b7:
15:f4:26:fe:a8:19:c8:24:b8:e4:c8:05:5c:ed:3f:
63:2f:c6:b7:db:b0:c5:f2:4c:56:c1:43:21:03:54:
73:53:3c:19:12:bb:87:94:9a:4d:91:b5:f7:92:ee:
41:74:68:eb:44:20:88:24:d2:bd:69:b2:a3:3a:57:
af:5f:3d:2a:cb:3c:fd:ab:7e:a9:3b:7e:be:89:e1:
64:e6:57:7c:1a:28:e0:45:e2:5c:f1:10:91:41:b5:
e7:c1:63:ad:76:1b:b0:bc:0c:60:dc:74:1e:a3:d2:
54:50:ec:80:df:e8:fa:a4:e2:67:ba:8d:ba:ea:c6:
78:dd:08:61:0d:c7:ae:5a:29:fe:99:5a:9d:7f:77:
97:e7:fa:55:dd:8d:35:c1:a9:7e:d2:db:f7:c8:20:
5a:e7:2c:65:18:4e:f3:3d:1d:4c:28:c0:d9:ae:b0:
91:4d:89:45:d8:f5:ed:20:ed:b0:1d:b6:f4:d0:78:
c0:9f:01:fd:8a:e7:b2:e3:de:cb:73:e8:c7:c7:88:
8f:49:c1:07:eb:b3:46:3e:42:d2:5c:df:23:ca:63:
29:92:bc:33:1d:a9:a3:62:b6:0d:c9:e9:56:8a:33:
4c:bc:de:6d:bc:9a:d5:67:e7:d2:b3:a5:fa:db:86:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:3B:87:03:E0:CF:55:13:53:07:A8:85:D8:56:A6:CC:5F:85:96:8C
X509v3 Authority Key Identifier:
keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:cb:5d:ea:5c:99:f4:40:b4:bf:bd:ed:ea:8d:13:6a:6d:
5a:5c:93:30:c9:d5:2a:7c:b6:a2:69:b0:55:39:07:40:54:e0:
b3:d0:f0:58:79:ed:f3:51:a3:15:b3:5d:0d:1a:1d:7d:61:fc:
c2:78:37:0c:57:87:fa:e7:09:92:d7:ec:53:88:98:fb:b6:9c:
30:50:9f:ae:03:f6:c0:c5:ec:d2:61:fb:77:d2:84:fd:1e:3d:
56:5c:83:97:b6:93:92:1d:e7:ab:c5:07:a3:f9:0d:cc:6d:b1:
15:75:bb:81:a7:43:fb:8b:5c:a6:c7:cd:22:3d:1f:2a:9d:c5:
fa:cc:59:0a:0e:c4:54:2e:ea:ea:c3:85:ce:c1:7e:48:d0:fc:
46:19:f3:9e:36:dd:23:b1:17:cf:10:f0:ed:b4:35:3f:e8:77:
61:92:9e:4b:55:84:36:8e:76:7e:1e:cd:5b:f7:a9:9d:38:70:
8c:76:e4:f3:02:f7:7d:82:87:5c:27:50:77:47:9f:aa:cb:f8:
ce:05:8f:e0:75:46:de:d8:17:a6:54:a7:d8:78:d4:cf:51:d8:
58:55:df:1f:0e:a6:5c:06:cb:27:6e:ef:15:c9:92:93:a2:26:
47:ed:22:c5:53:7a:5a:8f:5d:50:c0:d1:24:ec:c6:49:3d:1d:
b6:70:9b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:01 2025 by rpki-client