Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File: l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier: AfSeAm9OXPGSIwe+RK1W/x8fP9+TLrF3ryh+mW89vbU=
Subject key identifier: 57:F5:7C:36:0B:90:B2:87:D4:71:58:FA:DA:F3:C4:D6:E9:5F:C4:E6
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer: /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial: 066D
Authority info access: rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number: 066B
Signing time: Mon 20 Oct 2025 02:15:38 +0000
Manifest this update: Mon 20 Oct 2025 02:15:38 +0000
Manifest next update: Wed 22 Oct 2025 02:15:38 +0000
Files and hashes: 1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: /qMf6pZU7Fl07kyNe82QLjvUgetyZRwNJElNUF7iP4c=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1645 (0x66d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Validity
Not Before: Oct 20 02:15:38 2025 GMT
Not After : Oct 22 02:15:38 2025 GMT
Subject: CN=68f59b4a-7ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:cf:7b:ed:d3:38:75:03:06:00:fb:50:a7:
7d:bb:c3:d3:15:54:4a:4a:24:2c:14:8e:87:80:cd:
8d:91:d2:4e:f5:66:8f:f1:6d:e1:78:59:7f:37:d1:
a0:5d:a0:1c:58:01:bc:9b:fa:c2:38:78:86:e1:ae:
4e:50:bb:51:3d:02:56:35:4a:33:5a:ae:fa:9d:44:
cd:2e:e9:df:5f:b6:b7:91:f2:37:92:6a:00:7f:55:
c7:70:03:16:3b:9c:a8:61:01:1d:c8:5e:be:63:ed:
3a:5d:6b:c0:5e:a9:91:95:7f:d0:32:a6:18:9c:06:
0c:14:b1:d7:11:00:18:27:e2:74:ab:72:c9:c1:9f:
e5:ee:09:ef:d3:f8:a0:ff:f9:60:52:54:b9:55:d8:
d6:29:91:0e:5b:c6:b6:f5:30:f5:e8:79:10:f9:c9:
12:1e:58:d5:de:fe:37:5d:05:26:aa:c7:d0:f0:33:
35:6d:85:57:01:b7:bc:27:d4:b2:aa:85:68:0d:67:
f3:fa:25:21:6a:7e:28:38:75:66:f2:86:41:29:ec:
cd:73:e3:54:64:f6:98:b7:0b:e1:ba:c2:f8:cb:a8:
c3:f1:de:fb:0c:6e:fc:37:6e:d0:30:aa:2e:3c:85:
8c:97:b5:c1:07:a6:aa:ff:81:3d:f5:4b:60:dd:98:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F5:7C:36:0B:90:B2:87:D4:71:58:FA:DA:F3:C4:D6:E9:5F:C4:E6
X509v3 Authority Key Identifier:
keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:9b:ad:04:b0:33:34:08:06:e6:f6:53:8b:8f:3b:0a:c0:5a:
93:66:c9:30:9f:c6:25:79:0a:7b:8a:02:8c:c3:60:a9:6a:d5:
c0:9a:07:99:da:c6:eb:98:e4:ed:33:3c:f5:5d:d8:ea:a6:88:
0b:d7:e3:3b:5a:0c:81:37:aa:f3:0d:e0:d2:4c:22:9a:b4:fd:
66:cf:a9:c7:06:be:9d:08:c7:5e:25:75:83:d4:04:99:14:3e:
dd:01:a7:5f:e9:51:d3:d5:bc:e8:fc:95:0c:23:de:73:90:58:
ac:82:7d:03:9a:09:ea:83:f3:5c:12:17:4e:3b:19:71:5d:37:
c6:92:cc:96:d4:95:56:f9:19:96:e5:b7:0c:9d:f9:ff:26:e4:
93:44:cb:37:f9:d5:98:9f:65:1d:dc:b6:05:90:64:73:6d:8e:
58:5c:06:97:f1:89:a5:b9:3a:4b:e4:ae:d7:f9:45:25:a3:91:
17:93:ff:ff:de:80:ee:87:19:8d:12:ca:1c:00:b1:63:45:32:
64:34:ec:bf:66:74:81:54:12:c2:59:51:05:15:56:7d:bb:a3:
9c:66:21:54:7f:00:e8:f2:d5:94:23:07:b3:9f:9d:99:9a:6e:
5b:f7:fd:a0:84:f8:6c:8b:a9:f8:76:b1:96:49:30:9a:15:47:
49:c1:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:21 2025 by rpki-client