
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File: zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier: FPu2ODE2GzRwF3esxw0wPIU/clmXyRBQ9zPesMnGu+8=
Subject key identifier: 3E:54:35:E1:0B:56:38:6A:F1:08:9C:43:EF:30:D0:75:D2:16:27:B9
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 0287
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number: 0280
Signing time: Mon 20 Oct 2025 04:08:42 +0000
Manifest this update: Mon 20 Oct 2025 04:08:41 +0000
Manifest next update: Wed 22 Oct 2025 04:08:41 +0000
Files and hashes: 1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: qVWnKlC7hIr47hAb/halU/+nZNCqpqMgxhdF/8wIHqM=)
2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 647 (0x287)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: Oct 20 04:08:41 2025 GMT
Not After : Oct 22 04:08:41 2025 GMT
Subject: CN=68f5b5c9-412c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a5:11:00:8b:15:88:e4:a5:b6:56:11:cf:9b:
57:73:0b:0b:e2:d7:c7:70:e1:d3:f3:db:fd:f6:0b:
aa:ec:c6:44:93:d6:58:ac:5b:f6:3f:df:20:61:0e:
54:33:36:48:0d:f9:f1:a2:a5:ff:9f:63:cf:1e:92:
3e:85:cb:73:86:6f:e6:4e:de:80:79:26:6a:25:0f:
be:a2:03:b1:59:56:48:9b:db:84:df:3c:a5:24:05:
30:28:dd:41:11:ab:5c:ab:3f:f6:98:cd:f6:7c:30:
b4:1f:f1:e4:29:b5:d2:3d:67:fb:72:a0:84:f5:3b:
c7:f3:74:d5:f3:5c:1e:07:6f:f6:ed:cf:52:50:d3:
7d:a7:b2:69:c1:9c:c5:8a:21:1b:5b:bc:15:c3:ce:
ab:9d:f0:04:e0:f8:37:f8:b0:64:17:b6:60:d2:11:
a5:f4:4a:f5:27:b8:b3:b5:7e:65:71:4c:6c:dd:b3:
d1:7b:95:cd:67:11:b7:5d:f6:aa:ae:e4:47:ae:2e:
e6:ea:a2:78:ea:d7:5f:92:43:96:e9:6e:30:17:a2:
9e:d3:28:4d:4d:d9:87:c0:58:04:58:de:64:21:29:
5e:ef:b8:5e:59:bf:93:bc:f8:b0:01:0a:b1:50:2e:
83:d1:d2:74:5e:5c:ff:7a:5d:a9:0a:7f:04:2d:05:
8d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:54:35:E1:0B:56:38:6A:F1:08:9C:43:EF:30:D0:75:D2:16:27:B9
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:af:13:56:bc:35:c2:bc:29:07:8d:34:53:ae:ea:b8:08:71:
c4:56:d4:5a:f7:f1:0b:0b:54:dd:37:98:33:92:fb:88:a4:f0:
27:b0:dc:3d:4b:f5:8c:71:fa:26:2f:35:83:5a:97:a5:c4:f6:
a6:f7:f1:d4:1f:47:20:3d:e7:23:47:81:1b:dc:f2:95:25:19:
8c:e9:00:4f:a6:8f:d5:b5:87:6c:41:15:bc:ea:a9:86:ee:10:
b5:64:9d:cf:5c:46:34:32:4b:9e:8d:bc:98:c4:42:fd:81:fa:
0a:63:53:79:19:f8:8b:8f:ae:ba:1b:2a:0e:87:b2:08:49:44:
4d:8c:28:63:02:b7:a1:db:bf:e0:74:6d:4f:81:85:e7:0e:30:
7f:8a:77:5d:0f:93:b3:ee:b8:1d:87:1e:cf:fc:9f:73:21:86:
69:6c:b3:ba:21:61:b6:c3:55:86:d5:47:82:bb:72:70:a0:a8:
91:99:7e:9a:a5:70:aa:cd:3d:ec:78:61:53:9e:6d:e4:d5:2b:
57:86:7d:f3:6a:86:af:de:e8:bf:e3:f5:f0:45:50:fe:8b:2f:
5e:ea:0f:94:59:d3:25:37:6c:3a:40:eb:71:30:80:c3:cf:f8:
53:63:be:9a:ea:47:8d:5d:ee:55:e2:7f:9d:76:ab:2b:eb:b0:
7b:f1:bf:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAocwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTEwMjAwNDA4NDFaFw0yNTEwMjIwNDA4NDFaMBgxFjAU
BgNVBAMTDTY4ZjViNWM5LTQxMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNpREAixWI5KW2VhHPm1dzCwvi18dw4dPz2/32C6rsxkST1lisW/Y/3yBh
DlQzNkgN+fGipf+fY88ekj6Fy3OGb+ZO3oB5JmolD76iA7FZVkib24TfPKUkBTAo
3UERq1yrP/aYzfZ8MLQf8eQptdI9Z/tyoIT1O8fzdNXzXB4Hb/btz1JQ032nsmnB
nMWKIRtbvBXDzqud8ATg+Df4sGQXtmDSEaX0SvUnuLO1fmVxTGzds9F7lc1nEbdd
9qqu5EeuLubqonjq11+SQ5bpbjAXop7TKE1N2YfAWARY3mQhKV7vuF5Zv5O8+LAB
CrFQLoPR0nReXP96XakKfwQtBY2jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPlQ1
4QtWOGrxCJxD7zDQddIWJ7kwHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjrxNWvDXCvCkHjTRTruq4CHHEVtRa
9/ELC1TdN5gzkvuIpPAnsNw9S/WMcfomLzWDWpelxPam9/HUH0cgPecjR4Eb3PKV
JRmM6QBPpo/VtYdsQRW86qmG7hC1ZJ3PXEY0MkuejbyYxEL9gfoKY1N5GfiLj666
GyoOh7IISURNjChjAreh27/gdG1PgYXnDjB/inddD5Oz7rgdhx7P/J9zIYZpbLO6
IWG2w1WG1UeCu3JwoKiRmX6apXCqzT3seGFTnm3k1StXhn3zaoav3ui/4/XwRVD+
iy9e6g+UWdMlN2w6QOtxMIDDz/hTY76a6keNXe5V4n+ddqsr67B78b9v
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:51:48 2025 by rpki-client