Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File: kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier: j5yFtbw2jig84jXXILI28cOxF8cerEHaQcHGIL03RBA=
Subject key identifier: D8:09:CA:99:E7:FB:2A:B2:93:25:06:D4:05:0D:36:8B:15:75:50:15
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer: /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial: 0682
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number: 0680
Signing time: Mon 20 Oct 2025 02:11:27 +0000
Manifest this update: Mon 20 Oct 2025 02:11:26 +0000
Manifest next update: Wed 22 Oct 2025 02:11:26 +0000
Files and hashes: 1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: wSEVRnLJTST4uTg88ARuULmgOmO2Ca+0F2dWYlezjrs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1666 (0x682)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Validity
Not Before: Oct 20 02:11:26 2025 GMT
Not After : Oct 22 02:11:26 2025 GMT
Subject: CN=68f59a4f-997d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:6c:77:29:21:56:fe:e2:cc:5e:a7:4d:84:
69:28:d0:e3:86:36:74:3c:8a:2f:f1:6c:88:21:9b:
cf:05:b6:b3:81:aa:61:7e:e2:7f:0d:7c:b6:7a:6e:
5d:74:e6:fc:97:7a:af:c8:78:b3:a5:b5:de:c4:18:
c6:97:81:2f:84:b3:dc:5c:2c:ec:78:6f:56:9a:3c:
33:75:28:5c:bb:51:46:be:52:27:fe:be:97:a7:d2:
7f:ac:7b:99:78:5f:c5:06:4e:09:10:c4:e4:44:62:
55:83:48:bb:43:ab:36:bb:2b:77:94:73:24:2b:4f:
03:c0:01:70:78:b4:ce:22:06:f8:08:64:8e:1c:cc:
d0:8c:2e:27:f9:09:8b:30:dd:cb:65:06:df:f7:65:
bc:b5:27:b9:9f:09:9d:e3:f3:ea:f8:de:64:01:98:
54:d5:bf:15:46:17:54:3c:05:84:59:27:9c:82:1c:
ea:2a:6e:72:66:71:37:42:79:6d:ca:bd:a9:76:b5:
5f:4a:c8:f8:dc:4f:fd:3a:4e:c5:a2:86:07:65:6a:
62:06:89:41:45:30:b3:bc:25:07:d4:27:b1:7b:cf:
96:6b:00:b2:97:81:f9:24:38:23:13:68:56:a8:16:
49:81:b0:0c:7a:e1:b4:95:c5:c8:dc:7e:f2:78:00:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:CA:99:E7:FB:2A:B2:93:25:06:D4:05:0D:36:8B:15:75:50:15
X509v3 Authority Key Identifier:
keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:d3:ce:1f:05:73:06:d6:a8:44:d3:40:80:4c:ed:5b:a5:
75:88:43:50:6b:fc:b1:bc:74:6e:eb:0e:2d:67:53:28:33:39:
c3:b0:9b:90:fe:44:53:89:bc:c0:4d:54:bc:ae:d0:29:53:a5:
ac:44:f2:ec:5e:3d:60:75:36:c3:24:df:ec:16:e0:57:ea:34:
cb:d5:ac:69:a8:b6:3d:d1:36:11:99:67:da:dd:09:a4:08:3d:
ea:7b:d1:82:e8:2c:86:62:4c:a8:31:91:ee:82:9e:cd:b8:6b:
04:d8:0d:ea:ab:40:75:b4:b1:1f:38:e2:67:1b:a2:f5:68:6b:
a3:33:7f:a2:a9:1b:13:8c:4e:61:d7:83:2e:66:a1:23:9f:50:
fc:ba:07:a1:a8:ab:30:14:ec:6c:62:88:27:d3:6a:49:31:cd:
a5:36:3d:c1:fd:34:bb:58:35:66:15:37:a3:f2:a3:c7:33:9c:
e6:63:58:2d:80:09:05:ac:09:8d:92:ee:7c:4a:b1:19:9e:50:
60:38:95:5a:15:cd:d1:8e:9a:1d:52:32:ca:1b:b5:59:1f:1c:
62:b6:12:02:3c:2d:7a:c3:ea:48:9a:e9:10:3e:c8:e6:8e:10:
53:53:28:45:e7:7f:b8:0b:36:78:84:d7:41:80:6b:c9:9e:10:
3c:60:3b:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODBFODJBRjExMC8GA1UEBRMoOTAyRTAxODc2REJDNUM2OTNCRkU2MkZCQkY2N0VF
NkRCNkE3MTgzMTAeFw0yNTEwMjAwMjExMjZaFw0yNTEwMjIwMjExMjZaMBgxFjAU
BgNVBAMTDTY4ZjU5YTRmLTk5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDy+Gx3KSFW/uLMXqdNhGko0OOGNnQ8ii/xbIghm88FtrOBqmF+4n8NfLZ6
bl105vyXeq/IeLOltd7EGMaXgS+Es9xcLOx4b1aaPDN1KFy7UUa+Uif+vpen0n+s
e5l4X8UGTgkQxOREYlWDSLtDqza7K3eUcyQrTwPAAXB4tM4iBvgIZI4czNCMLif5
CYsw3ctlBt/3Zby1J7mfCZ3j8+r43mQBmFTVvxVGF1Q8BYRZJ5yCHOoqbnJmcTdC
eW3Kval2tV9KyPjcT/06TsWihgdlamIGiUFFMLO8JQfUJ7F7z5ZrALKXgfkkOCMT
aFaoFkmBsAx64bSVxcjcfvJ4ACkRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2AnK
mef7KrKTJQbUBQ02ixV1UBUwHwYDVR0jBBgwFoAUkC4Bh228XGk7/mL7v2fubban
GDEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgwRTgyLzQwQUM0NkM0QjcyMjExRUI5RkVBODkxRUY4QUVBMjI4L2tDNEJo
MjI4WEdrN19tTDd2MmZ1YmJhbkdERS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tDNEJoMjI4WEdrN19tTDd2MmZ1YmJhbkdERS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODBFODIvNDBBQzQ2QzRCNzIyMTFFQjlGRUE4OTFFRjhB
RUEyMjgva0M0QmgyMjhYR2s3X21MN3YyZnViYmFuR0RFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAF9NPOHwVzBtaoRNNAgEztW6V1iENQ
a/yxvHRu6w4tZ1MoMznDsJuQ/kRTibzATVS8rtApU6WsRPLsXj1gdTbDJN/sFuBX
6jTL1axpqLY90TYRmWfa3QmkCD3qe9GC6CyGYkyoMZHugp7NuGsE2A3qq0B1tLEf
OOJnG6L1aGujM3+iqRsTjE5h14MuZqEjn1D8ugehqKswFOxsYogn02pJMc2lNj3B
/TS7WDVmFTej8qPHM5zmY1gtgAkFrAmNku58SrEZnlBgOJVaFc3RjpodUjLKG7VZ
HxxithICPC16w+pImukQPsjmjhBTUyhF53+4CzZ4hNdBgGvJnhA8YDvR
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:29:43 2025 by rpki-client