Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File: zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier: mxLdxfV33lyPOmiDrG2Bqp5tZbTOAOUYkURB/3KBY0M=
Subject key identifier: 23:89:B8:56:37:12:B7:6A:D0:D2:A3:9F:DE:85:72:E6:B9:2C:52:75
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 01D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number: 01D5
Signing time: Sun 19 Oct 2025 04:26:36 +0000
Manifest this update: Sun 19 Oct 2025 04:26:35 +0000
Manifest next update: Tue 21 Oct 2025 04:26:35 +0000
Files and hashes: 1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: +j4RlkeGf/pHTK1DtcOowWMYfL22UcQrTakSaHbsp74=)
2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 473 (0x1d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Oct 19 04:26:35 2025 GMT
Not After : Oct 21 04:26:35 2025 GMT
Subject: CN=68f4687c-63c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5b:c0:a4:6f:e7:fc:fe:b1:a2:f8:e9:bf:97:
bd:f3:30:61:75:32:5f:5a:65:3c:46:31:af:99:e7:
dc:b5:cb:97:c1:92:8e:20:6f:b5:bd:a6:5b:23:24:
35:d3:aa:c3:7c:46:b9:9a:49:02:dd:7f:23:13:31:
db:98:79:24:ca:41:6c:84:84:ce:ba:ea:ed:85:6b:
47:82:84:d2:0b:55:84:43:0e:62:3f:14:fb:e6:e6:
1b:89:ec:71:80:25:24:a4:75:e3:2b:ff:d3:b5:a6:
b3:91:dd:dc:35:1d:04:02:fd:5e:ee:41:81:86:00:
ac:23:9a:77:df:ec:21:b7:52:b5:89:53:bc:3b:49:
1d:3b:1d:f5:6c:0f:4c:9d:37:26:39:81:7b:47:5a:
85:c3:3b:c3:98:14:13:e1:aa:89:23:81:9c:7d:f3:
a4:66:38:d3:9a:24:23:46:b6:b7:b8:2a:1b:53:2a:
2f:1f:9c:c6:f3:86:e7:97:ab:d4:1f:d8:95:3e:83:
c4:8c:34:bf:00:d5:91:1f:6c:90:f2:a4:55:ca:66:
c1:6e:78:55:15:96:58:49:3e:09:2e:29:96:5c:7c:
83:52:77:93:ad:35:f8:08:76:f7:18:c1:0b:d5:ac:
52:fc:cc:ed:f3:99:fa:af:36:d8:94:cc:3c:d8:12:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:B8:56:37:12:B7:6A:D0:D2:A3:9F:DE:85:72:E6:B9:2C:52:75
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:69:c3:ea:5e:7b:ab:29:d6:cf:8a:f9:fb:71:21:ec:08:8c:
6a:3b:0c:96:3c:54:ca:6e:ea:11:61:8a:9b:b6:dd:bf:20:ef:
eb:23:b6:ad:46:d8:81:a6:2b:45:af:a6:d6:87:0a:03:a5:c3:
0c:0d:ca:f8:16:f0:2c:61:df:e2:ce:f7:47:04:33:08:fa:71:
61:c6:a5:4c:a4:3d:2f:0f:a7:5d:70:22:07:44:0c:dd:dc:64:
6f:f4:ab:d6:62:4c:ea:e1:59:2d:2b:eb:b0:93:e6:72:88:0e:
24:e4:f6:53:d1:80:42:86:33:be:4c:d5:15:15:16:76:a2:21:
db:c9:5c:ef:73:83:c7:81:d8:cd:35:52:5e:53:92:73:ea:51:
eb:bc:9f:9b:c5:2f:07:1d:2a:ec:5a:d1:4b:a3:bc:84:00:53:
f5:f3:d1:f2:5a:d1:9e:23:0a:de:39:35:f4:76:0d:48:72:ad:
ee:51:a6:7b:3b:8d:b7:94:89:26:33:b5:64:04:c8:81:a4:47:
50:96:8b:07:4c:18:fe:4b:95:74:b2:82:be:a1:4c:f6:5b:93:
f1:d1:fd:d6:07:2e:13:e2:4d:56:ad:cc:ae:18:52:54:5d:ea:
df:da:ed:d6:da:ed:ed:33:1f:99:40:f7:ed:80:7f:fd:74:b2:
89:2d:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:33:44 2025 by rpki-client