
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: IMUUcWCd262NTd85PrsnuWspNe8Mjh63AeW+p2AHCHk=
Subject key identifier: 55:84:C7:18:FB:4C:C6:87:1A:7C:D2:19:2D:24:6D:07:70:28:22:F9
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 0344
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 033E
Signing time: Mon 20 Oct 2025 03:44:49 +0000
Manifest this update: Mon 20 Oct 2025 03:44:48 +0000
Manifest next update: Wed 22 Oct 2025 03:44:48 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: QgwmI2BU6IWPNnkg2+vDEeOZvs3fuSABvQ5mQaQINlM=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 836 (0x344)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Oct 20 03:44:48 2025 GMT
Not After : Oct 22 03:44:48 2025 GMT
Subject: CN=68f5b031-80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:2a:aa:6d:a8:0f:e9:95:80:d2:a8:fa:35:
86:29:d3:c8:59:c2:51:c4:e0:01:3d:7c:a4:5b:6b:
98:5b:ee:61:70:18:19:f0:e0:8a:ea:e7:ed:77:63:
a1:7b:6c:93:30:7c:f0:cb:1d:83:fb:6a:c1:09:e3:
3f:b8:e9:26:5a:94:72:75:b3:23:a5:ac:17:f3:22:
cf:3a:ed:0f:26:74:e3:ae:d8:df:45:b8:47:9c:d9:
6a:00:1a:ac:97:a6:d3:93:a5:38:9b:47:42:b9:f9:
c5:7b:78:09:fa:57:b1:61:54:91:c4:96:d5:dd:5f:
4e:a0:c2:03:d2:41:15:f2:f1:2b:49:de:6c:bd:d8:
63:42:93:a5:73:cc:ab:a8:e5:75:b3:89:8a:09:54:
0f:db:97:42:39:66:53:5f:41:fa:4b:82:7a:63:ae:
4d:95:19:d8:d1:79:cf:ce:39:8e:2c:0a:23:82:a1:
67:88:e8:8c:85:a4:0a:8a:21:cb:37:e0:d5:30:c5:
be:19:81:2b:50:69:9e:ec:71:e5:1e:b0:17:b1:2c:
81:40:b0:24:e6:95:82:4d:25:50:ae:0c:17:b5:7a:
6c:f4:9e:21:61:72:aa:6b:c4:3c:10:76:53:0c:94:
db:18:b0:b5:35:6f:8f:0a:91:1c:33:6c:95:52:1f:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:84:C7:18:FB:4C:C6:87:1A:7C:D2:19:2D:24:6D:07:70:28:22:F9
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:48:e7:97:cd:8c:d5:78:32:97:dc:2a:c6:51:dc:8a:bf:2a:
5a:f9:60:40:32:5e:c9:36:04:64:af:62:7a:57:1f:f6:85:f0:
c6:ac:b9:53:a7:5a:94:2c:83:22:d3:ba:0a:f2:ab:9f:a9:ac:
01:90:1f:e1:d8:03:fa:09:ae:30:61:29:4d:cd:59:fc:43:4d:
37:1b:01:f1:e3:65:41:73:e3:98:58:8c:53:ab:ac:69:2a:e8:
59:8b:53:ad:21:f8:29:5b:64:0b:61:2e:43:f6:c4:45:c5:58:
5f:a2:bb:31:5e:f6:a8:2a:d3:c2:33:8a:c2:b1:0e:ce:9d:89:
7a:8d:56:71:49:dc:64:9e:3f:93:bc:29:e7:1e:c7:c0:49:5c:
77:bf:b2:4d:a9:f2:7c:41:a0:0d:5c:9d:9b:13:e0:c4:b7:9c:
94:6f:df:c9:c7:78:b1:cd:c9:c5:11:7e:9b:8c:0c:07:e4:cc:
d7:59:98:c6:4b:ff:f0:8c:84:30:b7:3a:dc:fc:88:f7:ed:8e:
49:91:c1:54:45:e9:e4:a6:37:ca:13:8d:6b:83:42:c0:cc:44:
43:ba:83:6e:de:e1:60:4a:08:d3:14:f5:d0:af:cd:0e:f9:39:
15:27:a1:16:25:44:34:a4:05:4f:b9:4f:a0:02:8c:35:d1:57:
83:d4:90:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:04:44 2025 by rpki-client