
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
File: hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft (raw, json)
Hash identifier: brG58pMjgb0pAbDCvfGbuzMbFQ6ePgahxu/aQVs7h2o=
Subject key identifier: EF:F0:EA:12:47:92:B5:FF:6E:EC:E9:78:D4:6D:F7:22:C0:E3:8C:BC
Authority key identifier: 87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
Certificate issuer: /CN=F3682B3AAF/serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Certificate serial: 036D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
Manifest number: 036A
Signing time: Mon 20 Oct 2025 03:39:36 +0000
Manifest this update: Mon 20 Oct 2025 03:39:35 +0000
Manifest next update: Wed 22 Oct 2025 03:39:35 +0000
Files and hashes: 1: hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl (hash: ar6FytiydYcJ4suNnyzR9pF7FFZOUPWh7AM+oxaFb2o=)
2: 55FD2498F36111EE8255797D775412E6.roa (hash: 5+TRgE4Za1lP1tBhZLXfEbMvFbNLglwsyfdbD3gRLSM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 877 (0x36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B3AAF, serialNumber=870C8E8FD43B42C5B51562D9B8944A84E43D3632
Validity
Not Before: Oct 20 03:39:35 2025 GMT
Not After : Oct 22 03:39:35 2025 GMT
Subject: CN=68f5aef8-8d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7a:00:95:f3:fd:6e:63:d9:b2:e8:4e:df:6b:
8c:49:a6:bc:09:33:7e:df:94:c1:57:6f:d3:bc:44:
6b:95:0f:92:5b:2c:11:a6:df:d3:10:23:c0:69:88:
62:ef:6d:f9:65:07:b3:52:8b:f3:95:b8:d7:40:97:
f7:9b:e7:be:5b:7a:9a:b8:94:e2:4c:64:03:5f:ef:
4e:ff:b2:2f:68:0b:81:9a:be:5a:7d:94:8d:68:71:
4a:23:d4:74:f8:2b:cb:04:63:9d:a0:7c:0d:92:14:
7b:79:88:97:0e:59:9b:7b:61:e3:7c:f0:92:5c:91:
01:c0:55:ad:07:79:4e:4a:44:7c:92:2b:22:0c:19:
1a:a8:e4:fc:54:5e:f6:78:0c:c6:c4:51:22:ee:ff:
06:c0:6b:7b:28:6b:04:41:f3:ad:7f:df:99:02:c7:
23:0f:a9:d6:b5:ec:df:c3:5c:70:66:4e:10:f5:a5:
cb:97:22:ce:7b:b4:e1:24:ff:d0:6c:5b:a6:b1:73:
a3:a3:0d:14:5a:54:6c:17:2e:e9:4c:7c:d6:22:77:
e3:6a:a6:a4:c1:b1:19:43:97:d6:3f:94:72:ca:27:
c1:cb:0a:20:23:56:53:6d:21:87:39:88:5c:0b:9f:
c2:24:55:53:6d:c8:58:10:65:7e:9d:8e:39:d2:0f:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:EA:12:47:92:B5:FF:6E:EC:E9:78:D4:6D:F7:22:C0:E3:8C:BC
X509v3 Authority Key Identifier:
keyid:87:0C:8E:8F:D4:3B:42:C5:B5:15:62:D9:B8:94:4A:84:E4:3D:36:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B3A/37E2767615B211EEB1F94D4A4AD9E6FC/hwyOj9Q7QsW1FWLZuJRKhOQ9NjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fb:e4:49:c0:d3:47:1b:a5:87:ab:81:af:67:ce:89:bc:1e:
16:7b:19:17:49:84:6a:2f:47:01:06:21:02:08:43:23:42:40:
9b:6a:92:a0:ab:20:ed:7c:87:42:1e:f9:61:0c:18:92:ef:86:
e1:60:4c:da:62:7f:a2:a7:e9:8a:c7:d8:37:31:2d:ec:4e:60:
0d:3e:42:ff:d5:e8:bc:81:7f:3c:49:7f:68:5e:72:9d:ca:22:
d8:6d:8c:b8:00:64:cc:55:54:d1:6e:f5:dc:99:22:df:1a:0c:
7a:25:1b:3b:32:bc:d2:59:de:a8:01:c6:54:20:65:78:fc:a6:
fc:00:ee:00:07:b5:f6:2a:d3:0f:cd:ee:90:64:1c:c4:db:10:
b2:fa:80:05:18:b0:a9:88:12:0d:1d:38:40:ae:f3:6d:a3:42:
70:fb:90:0a:63:70:82:b7:95:86:f2:8a:01:f5:95:c5:de:a9:
e7:39:db:aa:3d:7a:9e:95:70:0c:70:82:7a:9f:e6:f0:1f:00:
b5:89:f8:81:88:e0:2f:88:c3:5c:f6:35:8e:56:d7:37:74:45:
cc:8d:f8:d8:e8:fc:c8:82:3d:17:64:92:41:9c:d2:fc:4e:0c:
ca:9a:b6:dd:0e:f6:f4:3d:79:ce:fc:41:8a:b5:0e:19:6c:43:
f7:ab:f9:04
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA20wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCM0FBRjExMC8GA1UEBRMoODcwQzhFOEZENDNCNDJDNUI1MTU2MkQ5Qjg5NDRB
ODRFNDNEMzYzMjAeFw0yNTEwMjAwMzM5MzVaFw0yNTEwMjIwMzM5MzVaMBgxFjAU
BgNVBAMTDTY4ZjVhZWY4LThkOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNegCV8/1uY9my6E7fa4xJprwJM37flMFXb9O8RGuVD5JbLBGm39MQI8Bp
iGLvbfllB7NSi/OVuNdAl/eb575bepq4lOJMZANf707/si9oC4Gavlp9lI1ocUoj
1HT4K8sEY52gfA2SFHt5iJcOWZt7YeN88JJckQHAVa0HeU5KRHySKyIMGRqo5PxU
XvZ4DMbEUSLu/wbAa3soawRB861/35kCxyMPqda17N/DXHBmThD1pcuXIs57tOEk
/9BsW6axc6OjDRRaVGwXLulMfNYid+NqpqTBsRlDl9Y/lHLKJ8HLCiAjVlNtIYc5
iFwLn8IkVVNtyFgQZX6djjnSD9N/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7/Dq
EkeStf9u7Ol41G33IsDjjLwwHwYDVR0jBBgwFoAUhwyOj9Q7QsW1FWLZuJRKhOQ9
NjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjNBLzM3RTI3Njc2MTVCMjExRUVCMUY5NEQ0QTRBRDlFNkZDL2h3eU9q
OVE3UXNXMUZXTFp1SlJLaE9ROU5qSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2h3eU9qOVE3UXNXMUZXTFp1SlJLaE9ROU5qSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODJCM0EvMzdFMjc2NzYxNUIyMTFFRUIxRjk0RDRBNEFE
OUU2RkMvaHd5T2o5UTdRc1cxRldMWnVKUktoT1E5TmpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe++RJwNNHG6WHq4GvZ86JvB4WexkX
SYRqL0cBBiECCEMjQkCbapKgqyDtfIdCHvlhDBiS74bhYEzaYn+ip+mKx9g3MS3s
TmANPkL/1ei8gX88SX9oXnKdyiLYbYy4AGTMVVTRbvXcmSLfGgx6JRs7MrzSWd6o
AcZUIGV4/Kb8AO4AB7X2KtMPze6QZBzE2xCy+oAFGLCpiBINHThArvNto0Jw+5AK
Y3CCt5WG8ooB9ZXF3qnnOduqPXqelXAMcIJ6n+bwHwC1ifiBiOAviMNc9jWOVtc3
dEXMjfjY6PzIgj0XZJJBnNL8TgzKmrbdDvb0PXnO/EGKtQ4ZbEP3q/kE
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:35:30 2025 by rpki-client