Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File: dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier: zWKWEp2/IUU+a678TpTG2AZW+hDozYSZhxfH+nYkdus=
Subject key identifier: 90:42:2C:99:21:34:27:7E:93:BF:FE:29:84:A5:9E:06:E2:03:89:61
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer: /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial: 01DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number: 01DE
Signing time: Mon 20 Oct 2025 04:26:44 +0000
Manifest this update: Mon 20 Oct 2025 04:26:43 +0000
Manifest next update: Wed 22 Oct 2025 04:26:43 +0000
Files and hashes: 1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: 0JHBNfr0BAwdNcxBaQhcOeIA+neKiR3tqKkBvoN/n/E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 479 (0x1df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
Validity
Not Before: Oct 20 04:26:43 2025 GMT
Not After : Oct 22 04:26:43 2025 GMT
Subject: CN=68f5ba04-7dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:bc:c1:bf:f7:fb:b7:fb:f1:fe:78:59:46:
62:69:92:9c:ca:6c:27:71:4e:f2:1f:45:c0:1e:e6:
a8:7d:3d:d7:b3:ab:8d:dd:f4:ef:e1:ee:a8:78:de:
0b:a6:18:1f:ba:58:3f:21:5c:3d:5f:23:3b:74:5a:
f2:a6:18:19:42:6b:3d:9a:5a:0d:c1:74:9e:c9:5f:
97:09:ca:37:19:a2:2d:d1:1e:04:30:75:d4:33:77:
41:9f:f8:a9:9b:f7:85:9a:b0:19:7e:02:c2:b3:16:
e1:53:81:72:45:2a:0a:74:1b:09:3a:83:80:de:70:
79:4c:37:58:b9:69:a7:c2:be:c3:86:b0:00:ce:46:
da:b0:88:99:f0:10:e6:71:e6:cf:f8:d6:01:94:aa:
52:41:15:c2:e7:5c:03:38:18:33:71:a5:18:af:b4:
e7:65:d5:33:d2:a7:e2:60:8b:87:cc:80:7e:ea:75:
3e:a6:f5:00:68:1c:f8:6f:08:5c:db:a0:39:09:6d:
ec:f8:19:b7:2d:ed:12:3e:a4:ec:88:4f:0d:4e:ad:
ac:a4:52:e2:83:81:c6:fc:dd:89:06:2e:cb:93:be:
03:eb:7c:b2:35:e3:b5:e8:4e:08:d9:92:b7:be:fb:
e0:ec:40:31:5d:ff:68:b3:43:cc:e2:de:4d:82:ad:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:42:2C:99:21:34:27:7E:93:BF:FE:29:84:A5:9E:06:E2:03:89:61
X509v3 Authority Key Identifier:
keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d2:a5:b2:90:d1:b8:54:4f:c4:68:31:d6:53:00:05:4e:a8:
da:9a:31:df:86:31:12:19:80:c3:21:fd:f4:c3:d9:58:f3:dd:
41:75:01:94:cb:5b:67:0f:7a:e3:b9:fd:5e:21:af:ce:4e:97:
e6:e1:4d:01:ff:4f:95:1f:c5:2a:d4:0f:e9:be:85:13:e3:8e:
f9:e6:17:0b:14:60:e3:c5:48:37:64:15:13:87:55:76:bd:c8:
9a:a8:ac:52:ba:08:58:bf:01:2a:34:0b:dd:ac:ee:19:3c:46:
5b:27:de:66:5c:ee:3f:ca:1a:08:12:69:77:97:75:51:28:69:
40:e6:37:89:16:f5:96:e0:c3:ac:a7:9e:8e:1c:d9:a6:a5:0d:
f4:46:09:09:27:7b:93:b7:95:e5:c0:84:c1:a6:8d:c0:84:b4:
81:a5:06:20:aa:da:3b:4c:45:7f:44:d1:87:c6:99:d2:ff:47:
e0:27:56:46:76:53:2e:54:77:c4:71:d0:bc:ad:ec:bf:78:ba:
49:b4:94:9b:8e:f8:b7:de:d9:03:34:dd:9d:bb:a1:0b:72:16:
56:31:ca:ba:48:a9:94:16:50:11:ab:a7:37:65:c1:49:94:6c:
3e:91:c2:0e:10:40:a3:64:d9:f9:c6:9b:b8:d5:8e:c4:14:97:
f7:d3:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:12:46 2025 by rpki-client