
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File: lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier: 9rD2c57BcaRlQDmPrUQ+xEoUzWqTamAIJ9GeK3rXm1k=
Subject key identifier: 8A:2E:7B:04:B3:DD:F9:4D:BC:4D:20:14:E3:E7:8C:A0:F8:DB:21:4B
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 094D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number: 0949
Signing time: Sun 19 Oct 2025 01:30:52 +0000
Manifest this update: Sun 19 Oct 2025 01:30:52 +0000
Manifest next update: Tue 21 Oct 2025 01:30:52 +0000
Files and hashes: 1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: DtqPL+QN24uyX6yn2dzhrf1Knmpw90oeDvbvlOFWwh4=)
2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2381 (0x94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Oct 19 01:30:52 2025 GMT
Not After : Oct 21 01:30:52 2025 GMT
Subject: CN=68f43f4c-f1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9e:f5:aa:1b:b0:7b:7f:88:ec:4d:e2:98:a7:
ad:dc:1a:d1:ce:45:dd:ea:4b:54:fb:c7:97:ca:17:
88:e8:26:28:07:5b:ae:55:c9:38:96:cf:61:f1:38:
ca:03:e6:d4:8a:55:99:e3:c4:f8:a4:26:b2:70:c9:
a5:89:7c:e0:9e:5f:9b:b5:a4:ab:29:06:80:1e:10:
96:1b:bf:d9:e4:64:8e:83:2c:54:1a:5e:36:24:46:
02:4f:d4:03:dc:7b:33:87:5d:95:76:00:b2:c0:50:
59:0f:de:ab:b4:54:28:56:46:a3:4e:94:ed:b9:95:
1f:ea:4a:4f:35:28:d4:19:26:88:24:af:19:27:b4:
63:f6:d2:07:10:34:27:10:24:72:86:ac:16:f3:0d:
3e:64:f3:62:aa:5b:e4:2a:ed:37:9d:f8:fb:29:4e:
e5:fa:75:ae:f2:5d:6a:f8:6e:48:41:86:c2:1e:40:
a1:13:d8:fd:59:a9:9f:46:8f:31:31:49:63:04:c6:
05:b2:eb:7d:dc:f0:cf:fa:1b:ea:2f:86:e9:a5:83:
fb:44:bc:01:23:dc:25:5a:29:c9:5b:21:d4:49:56:
ec:21:a5:56:bf:10:d1:0f:68:09:17:f9:77:1b:0c:
de:91:7b:44:f5:b9:2a:22:d7:f0:f1:b3:c9:49:fa:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2E:7B:04:B3:DD:F9:4D:BC:4D:20:14:E3:E7:8C:A0:F8:DB:21:4B
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:0d:1b:83:73:14:20:90:c1:37:17:7c:6b:23:56:ab:1c:fb:
d6:bd:7e:06:9b:b9:5c:b6:c3:63:20:89:fd:3a:0f:5c:f4:db:
1f:6c:66:7c:8f:dc:f1:a1:5f:af:23:7e:ce:0d:02:c4:dc:a7:
af:f5:e7:c6:b0:9d:81:79:aa:c5:d6:0d:79:2f:33:f3:2d:36:
53:a6:3d:00:bc:08:c4:1f:90:d1:e1:5d:b4:d8:2e:24:1f:65:
6b:08:84:0f:8f:1a:19:1e:41:43:ee:6a:7c:62:8c:d0:c1:d4:
87:b6:53:3d:99:d2:de:d1:93:5c:1b:7f:da:f5:91:dd:78:44:
d6:e7:d9:f7:44:8c:03:7a:83:df:52:cd:10:8d:6d:b7:0d:72:
b5:f5:36:75:7d:ed:aa:3f:37:63:e5:dd:9c:07:d9:89:33:86:
11:b6:50:b6:da:4f:56:29:07:16:0d:01:d0:22:68:df:6e:e8:
3e:9d:7b:a0:19:4e:49:b7:28:78:e0:b9:71:5f:1e:b6:4b:26:
b0:b2:bd:af:9b:14:ff:79:20:e0:5f:b0:17:70:35:5e:99:87:
72:86:fc:0f:90:a8:24:90:a2:18:18:4b:16:00:dd:8e:ce:c2:
99:8a:9a:7c:04:03:f2:b5:5d:cf:cb:ac:8d:af:c5:77:cf:2d:
48:3d:55:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:42 2025 by rpki-client