Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File: 8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier: nrEy6y20FEZ7PZA5rvJsrvI9nKLoNg+o6erWn25HHdQ=
Subject key identifier: 9D:CF:56:A1:34:21:7F:84:7B:CF:CF:45:2A:7E:1D:E5:3D:B4:AF:2E
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer: /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial: 01C6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number: 01C5
Signing time: Sun 19 Oct 2025 04:28:26 +0000
Manifest this update: Sun 19 Oct 2025 04:28:25 +0000
Manifest next update: Tue 21 Oct 2025 04:28:25 +0000
Files and hashes: 1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: Ij1dQ8mKXAJWEYC7FDy3dLT3JCQm4rU9AErWYq16C1E=)
2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454 (0x1c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36828EEAF, serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Validity
Not Before: Oct 19 04:28:25 2025 GMT
Not After : Oct 21 04:28:25 2025 GMT
Subject: CN=68f468ea-cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:a0:f8:3c:af:db:dc:da:cb:75:6f:5c:fb:
0c:bc:85:a6:49:1e:61:6d:91:32:dd:56:87:f3:db:
0f:40:0d:91:8c:d8:0e:09:bf:7c:13:f0:7f:68:cb:
55:73:d3:88:c7:ca:d2:d4:dd:f1:97:b9:c1:82:ce:
e8:47:b4:33:76:76:47:c6:f0:84:6d:9a:10:4a:bc:
32:97:09:13:80:35:bf:16:e2:b2:c1:0e:0a:6e:92:
d1:96:1d:f5:f5:92:ac:d3:83:69:fb:d8:06:5f:c1:
0e:f9:ee:64:fd:36:e6:72:d3:c8:21:9f:e7:44:b9:
cf:56:17:59:62:c5:bc:a1:9a:58:be:d9:17:71:9a:
aa:ef:70:36:d3:14:4d:de:a3:67:f1:60:43:54:3b:
16:bf:ee:d4:c9:83:7a:7c:54:30:7e:35:73:90:63:
0c:ac:c7:81:f0:1e:b4:68:4d:91:75:00:16:49:34:
84:35:2d:a9:71:6e:9b:10:13:21:77:4c:9d:50:11:
a6:82:26:77:88:f7:75:5d:a6:39:27:9c:9f:13:3e:
65:f7:ba:40:ea:fb:1a:bb:1b:3f:9c:62:7c:d4:65:
87:78:bb:e1:29:11:7e:eb:95:a8:df:4e:2a:8c:1b:
9b:6a:5a:97:b2:0a:91:1a:0b:a3:c8:d7:8c:e9:af:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CF:56:A1:34:21:7F:84:7B:CF:CF:45:2A:7E:1D:E5:3D:B4:AF:2E
X509v3 Authority Key Identifier:
keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
66:c2:f8:f8:fe:fb:57:df:de:f7:31:35:d8:77:b1:55:e6:c5:
24:de:a6:ea:5b:71:b2:b0:31:dc:98:e7:55:8d:4c:72:d4:c0:
4b:aa:b3:08:13:e6:fe:6f:c2:5e:b2:3e:99:f3:3d:59:5b:04:
f0:e9:9c:5e:d7:9c:e2:21:ff:e1:68:0b:5e:ab:d0:be:5f:ab:
b0:41:f6:49:5e:10:51:41:ef:b5:d4:c1:bd:ca:d9:7c:ae:f7:
86:db:cb:45:f8:0d:cf:df:09:56:7f:fd:ca:97:f3:56:c5:65:
41:6d:a8:ae:28:58:01:a6:ff:b7:6f:fa:bb:be:4a:a4:c4:18:
1f:da:59:f6:32:e4:f0:a7:b9:00:bf:b6:e4:aa:45:7c:3d:1a:
b3:cc:a9:8a:c4:34:b9:e6:ad:07:cc:28:e9:84:98:30:6d:38:
04:30:cb:87:32:5d:89:96:11:33:c1:c7:0f:8b:20:1f:a7:fb:
9b:db:38:5a:e5:61:12:56:41:bd:0f:32:e4:40:e8:42:ba:4d:
d7:91:53:61:23:ab:23:83:f4:e9:42:7b:25:a5:8e:05:1d:84:
20:71:8a:07:04:56:3e:a8:dc:f1:b0:c4:34:00:0a:2f:67:b5:
ea:e0:87:23:ba:06:a0:71:75:0d:ed:21:6e:a7:00:2e:30:72:
7f:fb:99:87
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI4RUVBRjExMC8GA1UEBRMoRjIxMEQxMTI3QjQxQTgwNjdFOEFFNTcwN0Y0M0Qy
MkUwODFEQzY2NTAeFw0yNTEwMTkwNDI4MjVaFw0yNTEwMjEwNDI4MjVaMBgxFjAU
BgNVBAMTDTY4ZjQ2OGVhLWNhZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYjKD4PK/b3NrLdW9c+wy8haZJHmFtkTLdVofz2w9ADZGM2A4Jv3wT8H9o
y1Vz04jHytLU3fGXucGCzuhHtDN2dkfG8IRtmhBKvDKXCROANb8W4rLBDgpuktGW
HfX1kqzTg2n72AZfwQ757mT9NuZy08ghn+dEuc9WF1lixbyhmli+2RdxmqrvcDbT
FE3eo2fxYENUOxa/7tTJg3p8VDB+NXOQYwysx4HwHrRoTZF1ABZJNIQ1LalxbpsQ
EyF3TJ1QEaaCJneI93VdpjknnJ8TPmX3ukDq+xq7Gz+cYnzUZYd4u+EpEX7rlajf
TiqMG5tqWpeyCpEaC6PI14zpr8SpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnc9W
oTQhf4R7z89FKn4d5T20ry4wHwYDVR0jBBgwFoAU8hDREntBqAZ+iuVwf0PSLggd
xmUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyOEVFLzkzOTgyM0FBNTNGMzExRUY4RUU1ODQ0Njc2MkU5NTFBLzhoRFJF
bnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhoRFJFbnRCcUFaLWl1VndmMFBTTGdnZHhtVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI4RUUvOTM5ODIzQUE1M0YzMTFFRjhFRTU4NDQ2NzYy
RTk1MUEvOGhEUkVudEJxQVotaXVWd2YwUFNMZ2dkeG1VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmwvj4/vtX3973MTXYd7FV5sUk3qbq
W3GysDHcmOdVjUxy1MBLqrMIE+b+b8Jesj6Z8z1ZWwTw6Zxe15ziIf/haAteq9C+
X6uwQfZJXhBRQe+11MG9ytl8rveG28tF+A3P3wlWf/3Kl/NWxWVBbaiuKFgBpv+3
b/q7vkqkxBgf2ln2MuTwp7kAv7bkqkV8PRqzzKmKxDS55q0HzCjphJgwbTgEMMuH
Ml2JlhEzwccPiyAfp/ub2zha5WESVkG9DzLkQOhCuk3XkVNhI6sjg/TpQnslpY4F
HYQgcYoHBFY+qNzxsMQ0AAovZ7Xq4IcjugagcXUN7SFupwAuMHJ/+5mH
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:30:43 2025 by rpki-client