Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File: SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier: 0h3THQiy5L4MMzHxjTwkzIwD4omXHPoojfakhVyedDs=
Subject key identifier: 68:AF:BB:E2:88:4F:E6:40:CB:09:C2:59:DA:F9:08:2D:9E:34:01:EE
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer: /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial: 062A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number: 062A
Signing time: Mon 20 Oct 2025 02:23:18 +0000
Manifest this update: Mon 20 Oct 2025 02:23:17 +0000
Manifest next update: Wed 22 Oct 2025 02:23:17 +0000
Files and hashes: 1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: xw0SvRkfcKCtSVvWZURtMXaLV73VQI6VLIgip5CKi2Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1578 (0x62a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Validity
Not Before: Oct 20 02:23:17 2025 GMT
Not After : Oct 22 02:23:17 2025 GMT
Subject: CN=68f59d16-0962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e3:2e:da:20:8d:ee:2b:8f:0e:55:37:8e:e3:
4f:0a:77:d9:b5:91:26:07:ee:c4:e7:44:28:c6:73:
02:39:2e:e6:97:54:fd:4d:34:51:df:23:b4:71:82:
a3:65:80:a6:60:5e:0e:d8:e1:b5:13:20:ae:bb:d6:
c1:0b:0a:50:52:1e:2b:58:22:bd:21:a1:54:ed:c2:
6e:26:0c:a2:a5:dd:2c:92:e9:86:cc:9e:e4:aa:95:
ea:2b:06:00:ad:a3:4b:0c:4e:7f:74:58:04:84:d9:
8b:21:48:7f:67:10:b3:f3:4f:e1:6d:10:18:e0:b6:
70:3d:43:f4:43:b0:dd:01:8c:98:f0:c6:64:a2:2f:
92:dc:dc:ab:f6:78:75:ff:26:07:f4:f1:2e:0d:06:
dc:91:68:6e:ce:90:ed:65:c7:d7:20:07:aa:ed:da:
01:a2:e3:20:30:e8:74:3a:e2:ef:4e:ea:60:a5:ca:
33:50:a2:aa:44:0e:3a:b4:b0:a1:d3:a0:ee:c6:fc:
ff:c0:4e:3c:15:ce:e9:83:3b:f5:95:d0:1e:4e:97:
87:46:a7:fd:c1:f2:fd:c8:a5:df:48:6b:84:cf:e7:
99:91:ff:a4:31:c4:aa:8c:95:f3:0b:32:9d:40:bc:
19:db:88:65:ff:d3:ba:b0:82:06:57:7a:bf:97:cf:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:BB:E2:88:4F:E6:40:CB:09:C2:59:DA:F9:08:2D:9E:34:01:EE
X509v3 Authority Key Identifier:
keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:8e:d8:f0:4a:c2:23:a8:52:77:25:b8:d4:70:01:fc:4b:31:
5f:21:1d:b2:b1:96:b1:10:e0:8b:ca:05:bc:fb:8f:be:bf:f1:
25:8f:19:84:01:e7:9d:1d:08:1b:3a:35:28:8a:44:85:4a:43:
b1:0f:c8:5c:8c:c8:2f:98:c8:3a:e7:84:58:84:ad:df:b6:d1:
e4:07:54:93:d8:37:06:f0:9f:17:62:6e:c2:11:f9:24:ec:f7:
0c:5f:e5:af:2c:1c:0a:77:29:75:17:9c:d3:64:7a:63:cb:74:
16:6e:17:68:c8:66:ab:16:ab:53:6d:c1:24:42:07:63:e6:d3:
68:f8:cd:99:8d:5d:14:d8:96:fd:bb:b6:ab:52:81:1c:1e:cf:
fc:7d:2c:f8:1c:0e:c9:86:ac:4b:89:0f:97:d8:bf:cb:ac:c8:
00:61:ae:62:93:85:91:ea:30:ee:6f:b7:3a:6c:08:61:3e:fc:
69:ec:54:d7:00:7e:63:2c:c1:73:5b:25:d8:0f:77:98:80:75:
5a:cd:90:80:88:c4:4a:02:fe:e4:48:dc:93:fe:1b:77:4d:c9:
22:72:5d:9a:d9:b4:88:22:53:c9:b8:35:d5:39:b0:51:c3:59:
a3:03:03:6d:5c:96:1b:77:fb:7f:19:14:26:c0:dd:55:fe:1e:
70:c3:7a:59
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAwREJBRjExMC8GA1UEBRMoNEE2N0Q3NUMxNDA5RDJFRTc3RjMxOTBERTczNUVD
OTdFRjYzMEQ1ODAeFw0yNTEwMjAwMjIzMTdaFw0yNTEwMjIwMjIzMTdaMBgxFjAU
BgNVBAMTDTY4ZjU5ZDE2LTA5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC04y7aII3uK48OVTeO408Kd9m1kSYH7sTnRCjGcwI5LuaXVP1NNFHfI7Rx
gqNlgKZgXg7Y4bUTIK671sELClBSHitYIr0hoVTtwm4mDKKl3SyS6YbMnuSqleor
BgCto0sMTn90WASE2YshSH9nELPzT+FtEBjgtnA9Q/RDsN0BjJjwxmSiL5Lc3Kv2
eHX/Jgf08S4NBtyRaG7OkO1lx9cgB6rt2gGi4yAw6HQ64u9O6mClyjNQoqpEDjq0
sKHToO7G/P/ATjwVzumDO/WV0B5Ol4dGp/3B8v3Ipd9Ia4TP55mR/6QxxKqMlfML
Mp1AvBnbiGX/07qwggZXer+Xz6eVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaK+7
4ohP5kDLCcJZ2vkILZ40Ae4wHwYDVR0jBBgwFoAUSmfXXBQJ0u538xkN5zXsl+9j
DVgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMERCL0Y5QjA4RjAwRjUwMTExRUI5MDk1RTYwNEQ4QTAxNENFL1NtZlhY
QlFKMHU1Mzh4a041elhzbC05akRWZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NtZlhYQlFKMHU1Mzh4a041elhzbC05akRWZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzAwREIvRjlCMDhGMDBGNTAxMTFFQjkwOTVFNjA0RDhB
MDE0Q0UvU21mWFhCUUowdTUzOHhrTjV6WHNsLTlqRFZnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEjtjwSsIjqFJ3JbjUcAH8SzFfIR2y
sZaxEOCLygW8+4++v/EljxmEAeedHQgbOjUoikSFSkOxD8hcjMgvmMg654RYhK3f
ttHkB1ST2DcG8J8XYm7CEfkk7PcMX+WvLBwKdyl1F5zTZHpjy3QWbhdoyGarFqtT
bcEkQgdj5tNo+M2ZjV0U2Jb9u7arUoEcHs/8fSz4HA7JhqxLiQ+X2L/LrMgAYa5i
k4WR6jDub7c6bAhhPvxp7FTXAH5jLMFzWyXYD3eYgHVazZCAiMRKAv7kSNyT/ht3
Tckicl2a2bSIIlPJuDXVObBRw1mjAwNtXJYbd/t/GRQmwN1V/h5ww3pZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:57:18 2025 by rpki-client