Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: bBSNrirZvzxyNNTlAv73KNf3indm+GX1zTIBx59BiQ4=
Subject key identifier: 8A:4E:D0:39:3F:EB:31:E4:DF:BA:D2:28:7C:D4:54:0E:CB:27:A4:55
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 0240
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 023A
Signing time: Mon 20 Oct 2025 04:16:21 +0000
Manifest this update: Mon 20 Oct 2025 04:16:21 +0000
Manifest next update: Wed 22 Oct 2025 04:16:21 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: cdC86oIsmpwTYnHAxv2KymQMDsonAe2fKrkiasYNs0k=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Oct 20 04:16:21 2025 GMT
Not After : Oct 22 04:16:21 2025 GMT
Subject: CN=68f5b795-35a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:aa:8c:28:ef:89:fe:37:dd:74:87:fb:63:
58:46:a1:05:65:e2:3c:38:55:50:6e:f4:9b:62:cb:
38:08:db:a7:b9:ee:2c:d0:87:00:04:9b:fd:3e:2f:
c9:6b:93:93:da:3e:d8:0c:de:ae:96:93:5d:3a:2a:
43:2b:2f:3d:8d:3d:48:80:ed:7b:e1:ab:9b:75:d6:
16:9b:92:b1:38:1f:b0:1b:63:37:44:8a:e9:88:cf:
68:ea:1c:2b:e7:43:20:78:44:b6:46:52:19:14:0b:
b0:fd:c7:af:bc:9c:0e:8f:38:8c:c2:43:68:6f:3f:
07:03:be:6f:bf:3a:2e:e5:29:d4:4f:e7:09:ea:d5:
c2:91:33:db:7a:67:5a:74:d0:08:53:0c:62:22:e2:
b3:ef:9d:a2:31:09:23:78:9c:d0:13:12:bf:fb:86:
6f:7d:a6:4f:00:a3:a7:71:5e:ba:67:d4:97:95:66:
f1:3e:39:15:da:e7:2f:d8:29:65:9f:29:f3:01:86:
13:07:06:d7:82:d6:cd:12:a5:45:fa:a9:0b:da:9a:
7e:ce:7f:2c:53:d2:db:0e:0c:d0:98:b5:45:02:d8:
7d:be:6a:c7:96:21:26:aa:86:64:89:67:c1:9f:d1:
c2:08:cf:53:2e:a6:a3:51:da:5f:bc:7c:c1:bd:a4:
16:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:D0:39:3F:EB:31:E4:DF:BA:D2:28:7C:D4:54:0E:CB:27:A4:55
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:dc:d3:fd:10:c3:36:38:ff:7b:ea:44:87:f9:cd:9c:99:9f:
44:78:5e:db:72:41:28:2a:04:75:08:ae:f5:b2:b4:a9:63:56:
12:0f:47:1f:cf:20:46:13:dd:78:c1:0f:ce:d5:b8:4d:8e:fa:
29:fa:16:13:81:b0:2e:f8:2a:c0:91:b1:c3:38:e8:62:c8:81:
ae:5d:b4:37:4f:f1:63:99:93:c7:1b:f0:88:47:47:11:0e:94:
f2:dc:18:53:58:f0:25:b6:ea:86:50:e0:8a:0c:05:b7:e7:07:
27:cd:09:61:e6:23:8b:07:5d:41:f2:03:9c:85:fd:c9:5a:72:
0a:90:b3:35:bd:d4:46:5f:bb:80:1f:8c:8e:8f:a6:8d:4a:77:
0e:ff:d8:60:78:71:8f:75:66:82:12:4f:cf:15:e4:42:21:91:
66:c3:06:82:01:81:e2:80:0f:bf:91:80:1c:9f:01:9a:af:16:
9e:d9:de:44:d3:5a:e5:07:62:ef:6e:3a:fe:07:a4:5e:67:ee:
7e:54:58:87:39:bf:fc:ee:29:a7:1d:68:eb:6b:a4:18:fb:3c:
e0:82:bc:06:20:83:7b:b6:ec:98:5f:0f:ed:17:a3:b7:32:db:
7c:6b:9a:e6:70:bf:b4:fc:91:a9:28:94:1c:81:33:77:1d:51:
6b:46:2f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:24 2025 by rpki-client