Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: 2gj+4DieyStWrMKMIlKhI5rFXyCMl3+JdvPo3+/hQrk=
Subject key identifier: 95:2A:C8:4F:D3:B1:DA:F0:F3:B2:90:83:00:A7:D9:44:7E:EB:7F:E1
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 029B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 0298
Signing time: Sun 19 Oct 2025 04:01:26 +0000
Manifest this update: Sun 19 Oct 2025 04:01:25 +0000
Manifest next update: Tue 21 Oct 2025 04:01:25 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: nXIo3QRLbyNeIsYOFkueXXrDOiADTE5U5SQLKRxqm/8=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667 (0x29b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Oct 19 04:01:25 2025 GMT
Not After : Oct 21 04:01:25 2025 GMT
Subject: CN=68f46296-c697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:c7:00:86:4c:80:1a:0e:d8:5c:b8:01:61:
c5:b9:0c:e5:61:e2:0b:87:c3:19:60:c7:65:6a:f7:
93:69:30:38:40:2d:95:e7:cd:6a:93:c7:21:87:00:
3c:5f:31:4a:a6:dd:0b:e7:8a:06:86:4a:c6:23:7b:
da:98:48:68:9a:c5:1d:04:6f:53:a8:e4:0d:ff:13:
f4:98:e0:57:93:13:ad:63:72:c3:3f:f4:97:fa:95:
61:ee:a4:35:a6:68:25:a5:28:d3:a2:f4:c2:52:3f:
32:ab:89:22:77:15:ca:88:9f:38:54:61:c5:79:fd:
46:9a:d5:c2:30:45:78:6e:c0:02:50:a8:10:43:19:
af:4a:7f:83:ca:85:5e:7a:f6:de:b4:4e:c6:a6:5d:
fe:2b:0e:36:b6:6c:f1:bf:6c:88:8d:80:ab:27:67:
eb:d4:fc:6d:21:5e:7f:83:1a:06:03:ce:3e:82:ba:
76:e0:86:9f:98:91:3e:4c:05:2c:bb:df:42:58:38:
e5:dc:75:10:7d:0a:9c:45:14:fa:4f:b5:c7:2a:39:
b4:89:56:43:ac:47:99:fa:fd:b0:ca:11:94:81:b7:
ef:49:ac:21:a6:6b:a7:80:48:f2:f1:38:48:42:a9:
44:29:f7:66:e1:06:d9:87:80:c7:e2:fc:ab:c0:f7:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:2A:C8:4F:D3:B1:DA:F0:F3:B2:90:83:00:A7:D9:44:7E:EB:7F:E1
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:83:ba:f7:8d:5d:94:22:4b:c0:fa:84:b5:38:5c:73:32:94:
b4:53:1b:af:4b:92:90:c3:c4:7f:ca:cb:03:25:58:a3:0b:27:
08:ff:3b:2c:a2:bf:82:8c:3b:28:f2:ee:c4:06:69:82:e4:b4:
43:27:22:c7:cd:b0:c9:8c:26:1f:08:0f:67:97:18:af:58:fd:
61:73:3f:77:9e:ae:c9:a1:9b:42:65:ef:8a:be:31:07:27:99:
0d:a8:5f:74:5b:89:18:fd:50:2f:81:f6:9d:99:d8:f4:02:99:
db:0b:9a:de:5f:3f:05:dd:01:4c:01:70:8b:d9:a8:31:13:db:
b8:11:f9:c0:42:1f:8d:58:77:2e:ed:6b:99:52:6b:c8:b2:31:
64:2a:bb:31:d9:50:d5:61:9f:24:16:74:a6:84:f4:f5:89:3c:
1e:ff:41:c0:3a:5d:6d:eb:12:17:de:3e:60:ca:c8:19:13:4b:
71:73:48:23:f8:ed:91:1c:2c:36:2d:39:30:14:64:ea:39:6b:
7c:d5:d0:fa:19:87:a1:1a:f1:47:a7:86:10:ab:89:3a:8b:e9:
3c:df:9d:9f:58:57:45:1f:42:af:43:13:f7:51:3a:aa:06:7c:
90:d6:1f:25:e3:9d:99:4c:bd:31:f3:ec:3b:45:e1:50:7b:b0:
09:34:1d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:30 2025 by rpki-client