Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File: dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier: rEzU8LZmAGOa1GRcCNNTcs0JDKw/r5I+FQBy5svoHTs=
Subject key identifier: C8:9D:8C:27:DF:2F:AF:9B:2B:EE:A9:33:BC:98:FC:79:75:44:2A:BC
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer: /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial: 01A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number: 01A4
Signing time: Sat 23 Aug 2025 04:38:56 +0000
Manifest this update: Sat 23 Aug 2025 04:38:55 +0000
Manifest next update: Mon 25 Aug 2025 04:38:55 +0000
Files and hashes: 1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: jpTNNS/8/wSTUW2WGVIvc9YqM1IfvsrnGtPwZgX/6d8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 04:38:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 421 (0x1a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
Validity
Not Before: Aug 23 04:38:55 2025 GMT
Not After : Aug 25 04:38:55 2025 GMT
Subject: CN=68a945e0-db50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:5f:8c:ae:c8:ff:43:e3:dd:a5:dd:fe:0f:
fa:52:ea:27:68:89:8c:26:68:df:39:3f:f5:1c:75:
f3:27:3f:a4:dd:7d:1e:ce:cc:7b:78:d0:6b:5a:d3:
cc:d9:c1:bb:e3:7a:e0:8d:23:99:c1:8b:e0:05:27:
61:fa:c9:e4:46:ec:41:e1:58:76:12:24:9b:77:c8:
66:49:82:6c:55:3b:a1:62:e0:14:ab:0a:23:18:73:
52:0a:a8:89:9a:7e:cf:a5:b6:49:a3:de:12:e4:15:
e1:8a:22:4b:a6:c7:35:21:83:07:6f:85:62:5f:28:
5c:d1:ea:99:dc:81:47:4d:90:a9:cd:05:3b:3a:3e:
6e:59:b7:73:b9:9b:4b:f1:2f:0f:e5:d6:58:9d:7b:
44:61:7b:7a:97:30:7e:42:1f:67:1d:9c:51:b5:25:
8b:ea:dd:b3:c6:40:e6:e7:a7:45:8b:27:2c:fe:1e:
6c:78:e8:4d:57:e1:1e:c4:16:fb:e5:97:64:3f:4f:
92:c1:b2:4a:a1:fa:f5:ca:0d:7b:58:e1:f1:85:1a:
e4:6f:34:08:9a:93:01:3f:c2:4c:66:70:3f:44:7a:
38:6b:ad:9e:81:15:3f:f2:fd:c2:ed:30:94:db:13:
9d:14:43:4c:6f:d8:31:a2:c4:73:c9:b4:83:ff:a0:
a6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9D:8C:27:DF:2F:AF:9B:2B:EE:A9:33:BC:98:FC:79:75:44:2A:BC
X509v3 Authority Key Identifier:
keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c0:35:c0:bd:72:1b:70:ac:81:55:65:27:30:af:65:c3:2d:8f:
57:ea:3f:a6:29:0b:cb:20:23:54:5f:79:3c:63:1c:72:68:9b:
1d:46:7e:9f:f1:b9:58:6f:37:62:99:23:10:f2:cc:5b:e1:05:
00:91:7e:9a:ee:ad:9d:33:d2:99:5d:32:f6:9b:70:07:69:02:
d1:66:46:f2:35:bc:c7:d9:b8:07:9f:aa:8a:77:ec:04:14:c4:
b4:f7:e5:4d:c1:27:19:bd:84:15:17:c5:1c:f8:84:29:48:94:
e7:d1:37:ab:1b:37:02:1e:8c:6d:c4:ed:fc:25:ff:b2:ac:0f:
e9:23:f6:60:42:0a:d7:17:7f:19:c1:93:79:0b:b8:77:b3:e5:
25:63:89:e7:95:b6:74:01:43:86:00:85:e1:1e:5b:02:68:a1:
b6:92:bf:3f:75:2e:0d:56:90:e9:e6:cf:86:df:4a:8a:18:69:
31:a6:fb:64:89:26:ff:d0:8c:c6:2a:35:cf:5d:92:46:f5:91:
b2:20:2c:82:c4:86:62:fe:f6:6a:08:6e:c9:80:c2:9a:68:a6:
ce:2d:5c:5a:fc:7a:65:0b:72:7e:bd:4c:69:7f:56:b4:81:93:
2e:2a:ce:96:2d:15:4d:ea:95:b1:a3:9c:73:e8:5f:f7:7e:c3:
b2:67:71:b6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODM2QjFBRjExMC8GA1UEBRMoNzUxRDEwN0YwNTk5Mzg2NjQzODRBMzcwNzhFMzg1
OTc5MEJBMjhENDAeFw0yNTA4MjMwNDM4NTVaFw0yNTA4MjUwNDM4NTVaMBgxFjAU
BgNVBAMTDTY4YTk0NWUwLWRiNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB1F+Mrsj/Q+Pdpd3+D/pS6idoiYwmaN85P/UcdfMnP6TdfR7OzHt40Gta
08zZwbvjeuCNI5nBi+AFJ2H6yeRG7EHhWHYSJJt3yGZJgmxVO6Fi4BSrCiMYc1IK
qImafs+ltkmj3hLkFeGKIkumxzUhgwdvhWJfKFzR6pncgUdNkKnNBTs6Pm5Zt3O5
m0vxLw/l1lide0Rhe3qXMH5CH2cdnFG1JYvq3bPGQObnp0WLJyz+Hmx46E1X4R7E
Fvvll2Q/T5LBskqh+vXKDXtY4fGFGuRvNAiakwE/wkxmcD9EejhrrZ6BFT/y/cLt
MJTbE50UQ0xv2DGixHPJtIP/oKYdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyJ2M
J98vr5sr7qkzvJj8eXVEKrwwHwYDVR0jBBgwFoAUdR0QfwWZOGZDhKNweOOFl5C6
KNQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzNkIxLzQ1MEQ4MzQ4NDA0MjExRUY5QjgyQTU5Mjc2MkU5NTFBL2RSMFFm
d1daT0daRGhLTndlT09GbDVDNktOUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RSMFFmd1daT0daRGhLTndlT09GbDVDNktOUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODM2QjEvNDUwRDgzNDg0MDQyMTFFRjlCODJBNTkyNzYy
RTk1MUEvZFIwUWZ3V1pPR1pEaEtOd2VPT0ZsNUM2S05RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDANcC9chtwrIFVZScwr2XDLY9X6j+m
KQvLICNUX3k8YxxyaJsdRn6f8blYbzdimSMQ8sxb4QUAkX6a7q2dM9KZXTL2m3AH
aQLRZkbyNbzH2bgHn6qKd+wEFMS09+VNwScZvYQVF8Uc+IQpSJTn0TerGzcCHoxt
xO38Jf+yrA/pI/ZgQgrXF38ZwZN5C7h3s+UlY4nnlbZ0AUOGAIXhHlsCaKG2kr8/
dS4NVpDp5s+G30qKGGkxpvtkiSb/0IzGKjXPXZJG9ZGyICyCxIZi/vZqCG7JgMKa
aKbOLVxa/HplC3J+vUxpf1a0gZMuKs6WLRVN6pWxo5xz6F/3fsOyZ3G2
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:33:14 2025 by rpki-client