Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File: PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier: WC6KAnOOAS/0R2d/Q7jDwUaUllut21AfSeW+W0YVgZE=
Subject key identifier: 21:CA:AF:DA:DB:CD:C7:6D:6A:9B:14:55:34:EC:91:AA:68:81:AA:86
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer: /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial: 02D7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number: 02D6
Signing time: Mon 20 Oct 2025 03:56:27 +0000
Manifest this update: Mon 20 Oct 2025 03:56:27 +0000
Manifest next update: Wed 22 Oct 2025 03:56:27 +0000
Files and hashes: 1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: FjBljBRB9AA76XTgWhsJcPWhwHDe93M0T7U1t5bMsDk=)
2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 727 (0x2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Validity
Not Before: Oct 20 03:56:27 2025 GMT
Not After : Oct 22 03:56:27 2025 GMT
Subject: CN=68f5b2eb-b334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:22:3f:c6:8b:14:34:40:76:22:cd:3f:3d:
36:b5:25:b0:5e:0e:88:73:81:f7:59:12:e7:d8:d5:
05:9c:02:bc:85:15:c3:39:54:0a:96:5a:79:a3:84:
f1:b8:8a:51:b0:92:f1:f2:61:5a:25:6e:45:ed:9b:
f8:0d:66:d4:e1:d0:81:75:12:3c:85:dd:08:58:12:
5d:64:e2:06:e7:51:e3:f5:51:96:cc:be:97:07:85:
2c:cf:02:52:ab:ce:50:c2:b3:1b:c5:db:b1:de:04:
6b:18:8e:2c:8a:77:c5:02:6c:8d:b2:ad:26:39:b8:
ec:4c:5e:b2:93:a0:3c:7c:70:c1:0d:22:e9:2a:3e:
94:4d:80:e8:1e:2f:93:25:de:b7:0b:79:e8:68:2f:
f1:ad:a3:93:b2:d9:56:4e:fe:9d:c9:10:0c:64:8d:
f2:54:0b:8a:54:ab:5c:53:be:a4:38:14:e7:67:1a:
fd:7f:0a:d6:93:27:ca:0f:39:3a:84:be:fd:6a:45:
bc:83:ac:a1:a2:e5:6d:ed:18:dc:46:7b:85:e2:84:
66:16:f3:1d:86:a8:62:d8:68:13:83:7a:e2:fa:df:
2f:8a:f8:03:5c:4f:e6:09:e0:15:b7:1a:e1:22:fd:
fd:4d:4e:2f:61:ba:94:8d:d7:0a:23:13:5c:c6:07:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CA:AF:DA:DB:CD:C7:6D:6A:9B:14:55:34:EC:91:AA:68:81:AA:86
X509v3 Authority Key Identifier:
keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:c8:58:1c:be:74:91:07:2a:6c:11:b7:32:c1:09:e5:2f:13:
04:35:a4:9f:e2:18:98:d6:0a:b7:e6:12:d2:6e:ee:6d:3e:28:
3a:f2:98:da:97:12:57:70:a5:d8:4b:f5:64:7e:8a:a6:7e:de:
95:ea:72:3a:1e:a1:8d:bf:82:eb:33:37:7a:68:10:ab:e8:ad:
00:ac:47:11:95:c4:e8:40:32:87:8c:15:a7:6d:94:23:51:0d:
c5:2e:d3:df:bf:bc:db:5c:5a:bf:46:65:bf:f3:6d:f5:f5:b2:
e4:5d:65:f1:02:63:f7:40:fa:8c:f8:7c:9b:73:23:8f:b9:2a:
fa:0b:16:09:ea:cc:96:86:70:a1:4b:55:c6:1f:6a:e5:45:8e:
1a:23:4d:26:bf:50:a3:f6:79:f5:4f:8d:24:30:b5:7e:be:44:
9c:31:5e:5d:6b:f5:93:89:51:a8:98:a9:1a:08:68:c5:87:fc:
9f:ed:67:24:c0:05:29:24:fc:9c:a5:a6:98:5e:b7:c7:fc:63:
35:e4:55:3e:44:81:a0:30:80:60:2a:a1:02:67:75:11:3f:07:
7b:ad:40:43:a8:f6:10:09:35:b6:ea:e0:dd:fa:3e:8e:fc:0d:
eb:75:ed:d3:b2:9f:cd:cb:96:52:47:c2:c7:44:2f:09:f8:7e:
ef:52:10:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNTEwMjAwMzU2MjdaFw0yNTEwMjIwMzU2MjdaMBgxFjAU
BgNVBAMTDTY4ZjViMmViLWIzMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMQiI/xosUNEB2Is0/PTa1JbBeDohzgfdZEufY1QWcAryFFcM5VAqWWnmj
hPG4ilGwkvHyYVolbkXtm/gNZtTh0IF1EjyF3QhYEl1k4gbnUeP1UZbMvpcHhSzP
AlKrzlDCsxvF27HeBGsYjiyKd8UCbI2yrSY5uOxMXrKToDx8cMENIukqPpRNgOge
L5Ml3rcLeehoL/Gto5Oy2VZO/p3JEAxkjfJUC4pUq1xTvqQ4FOdnGv1/CtaTJ8oP
OTqEvv1qRbyDrKGi5W3tGNxGe4XihGYW8x2GqGLYaBODeuL63y+K+ANcT+YJ4BW3
GuEi/f1NTi9hupSN1wojE1zGBwD5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIcqv
2tvNx21qmxRVNOyRqmiBqoYwHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACyFgcvnSRBypsEbcywQnlLxMENaSf
4hiY1gq35hLSbu5tPig68pjalxJXcKXYS/Vkfoqmft6V6nI6HqGNv4LrMzd6aBCr
6K0ArEcRlcToQDKHjBWnbZQjUQ3FLtPfv7zbXFq/RmW/82319bLkXWXxAmP3QPqM
+HybcyOPuSr6CxYJ6syWhnChS1XGH2rlRY4aI00mv1Cj9nn1T40kMLV+vkScMV5d
a/WTiVGomKkaCGjFh/yf7WckwAUpJPycpaaYXrfH/GM15FU+RIGgMIBgKqECZ3UR
Pwd7rUBDqPYQCTW26uDd+j6O/A3rde3Tsp/Ny5ZSR8LHRC8J+H7vUhAh
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:49 2025 by rpki-client