Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: N386QtVSWREeYsTowxKBs+QQWTFec5dA62/cdWroCBg=
Subject key identifier: 07:4C:B6:92:3C:E9:B7:3E:F4:38:29:9C:5D:A1:92:29:30:79:1C:8D
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0669
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0669
Signing time: Mon 20 Oct 2025 02:15:26 +0000
Manifest this update: Mon 20 Oct 2025 02:15:25 +0000
Manifest next update: Wed 22 Oct 2025 02:15:25 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: HoC2BzE+tIuroQVkPweQ8g02F4vRTs9Z9hjcHAdlMlE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 02:15:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1641 (0x669)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Oct 20 02:15:25 2025 GMT
Not After : Oct 22 02:15:25 2025 GMT
Subject: CN=68f59b3e-2bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:c5:cc:56:ea:a3:ba:9f:2f:43:45:7c:b2:
74:a7:7a:72:39:76:5a:fa:ed:6d:22:c6:ad:57:7f:
23:65:72:53:f8:de:92:ff:7f:a8:9f:81:72:1a:41:
12:41:eb:4f:78:e8:d9:39:c6:70:a5:61:bb:00:3e:
53:b8:6b:87:8d:c5:a4:4e:99:69:79:f6:0b:9f:c2:
8c:d8:5d:c9:cf:31:5d:12:05:91:cd:33:f2:90:3f:
be:ad:03:2e:76:50:6a:ab:bd:02:09:11:70:09:3e:
77:fd:57:17:0f:c7:94:d9:5f:e9:ff:86:93:a7:8c:
7a:c6:e2:1c:38:cb:22:7f:d3:cb:d2:ba:c0:d9:7c:
c1:ad:68:5e:40:8c:a3:39:e9:32:29:78:0e:b8:11:
e1:4f:39:cd:ff:4a:2e:ad:e4:f5:ca:fe:f6:c3:10:
d8:4a:5f:fb:61:68:bb:b8:bb:8b:56:18:7f:1d:14:
d5:08:8e:13:c6:01:2c:53:16:61:a8:cf:55:7f:18:
95:09:6b:d8:5f:ea:8c:4a:a4:08:cd:72:d8:a1:0b:
e8:ec:bb:9c:ef:74:29:69:aa:86:54:98:60:78:02:
d4:89:e0:3b:70:cd:7c:34:8d:ca:dd:e6:b9:ae:bc:
60:5b:50:e1:00:0b:78:5a:aa:f8:50:62:9d:0e:f8:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4C:B6:92:3C:E9:B7:3E:F4:38:29:9C:5D:A1:92:29:30:79:1C:8D
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ed:0a:ff:98:13:46:c3:29:ce:33:c5:8a:f8:1b:1b:98:b4:
5f:d2:44:b5:79:0c:fe:a3:bd:17:11:df:30:ba:75:ff:e4:0e:
42:8f:49:6b:0a:f1:46:77:f7:3c:d0:66:5e:07:a7:8c:f4:1b:
fa:20:17:29:2c:95:02:81:e6:30:13:05:97:5b:a3:f1:62:e4:
1e:b4:14:f0:43:fe:32:70:94:69:fa:90:0b:2d:54:da:44:1b:
83:4c:e0:31:b9:9c:36:09:95:8f:81:c1:a7:e3:a7:9b:15:87:
55:b3:4b:73:60:3e:71:a4:97:56:8f:e8:49:05:05:b0:0e:ae:
a5:72:b7:1a:de:8c:64:9f:0a:23:ff:ce:33:4d:35:0c:93:f6:
50:57:6b:5c:1e:9b:77:cc:fa:9b:b2:60:7a:34:93:e1:1a:00:
18:b8:f9:23:de:55:36:5d:7b:1e:6d:da:6d:81:f1:23:5c:7c:
a2:d5:26:b1:8f:85:77:df:6b:2c:46:e6:5e:d3:e6:2d:17:ea:
49:8b:ea:a3:f8:ef:bb:ef:50:b4:12:2f:65:b4:dc:5b:7c:8d:
98:1b:43:95:8a:17:32:17:e3:64:cd:ef:37:bb:5a:2f:12:47:
0f:f2:e1:a7:d9:d9:66:a2:76:94:d1:30:4b:26:01:4e:d6:69:
bd:64:ff:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:25:00 2025 by rpki-client