Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
File: MQnplyMPK5fGUZojAYDU77BY1Us.mft (raw, json)
Hash identifier: 6KDm9RaSO8IWlcMTzbKGY/9WjXup3ov4fROeme/SL3U=
Subject key identifier: 42:41:23:2F:C6:51:49:86:2E:CC:27:3A:B9:5A:7D:DF:BB:53:1C:1A
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Certificate issuer: /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial: 02B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
Manifest number: 02B8
Signing time: Mon 20 Oct 2025 04:01:01 +0000
Manifest this update: Mon 20 Oct 2025 04:01:01 +0000
Manifest next update: Wed 22 Oct 2025 04:01:01 +0000
Files and hashes: 1: MQnplyMPK5fGUZojAYDU77BY1Us.crl (hash: QCeshkuEHMxuRnPdGZdod9voJcvJqi9kly88puNiYZc=)
2: 421E36CC9A8A11EE9A56173AD25BE465.roa (hash: 6btWgtEr5ZNoJrSB9pwHdhVF5zwvZr6M9WePfENj/6Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 697 (0x2b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36992ECAF, serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Validity
Not Before: Oct 20 04:01:01 2025 GMT
Not After : Oct 22 04:01:01 2025 GMT
Subject: CN=68f5b3fd-9b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:ca:b4:b7:23:d5:67:8a:a1:6c:17:8e:94:
79:6b:2f:94:07:4e:22:bd:ed:d0:81:8f:73:7c:58:
db:c8:37:a1:7a:62:bd:4c:c7:d6:59:d7:a1:f3:c6:
ce:99:7e:6d:87:0c:9e:b8:5d:87:30:c3:0c:e8:ea:
68:d9:24:00:cc:3e:bb:75:26:2f:75:b1:ec:5d:05:
c9:e0:d2:58:43:05:31:e9:2c:2c:a9:88:08:a0:0c:
81:4d:41:de:85:21:bf:79:96:1f:0b:e8:f7:b0:73:
00:e3:8d:fc:13:4b:3f:5b:19:55:fd:3b:c6:36:9a:
5c:ad:07:0a:98:5b:2b:d5:8f:e0:e1:3c:43:d6:b2:
68:e7:c8:58:2f:3e:25:19:f4:81:bc:8e:fd:f0:04:
5d:2e:77:ac:36:ca:20:56:09:e8:f2:d1:9b:82:59:
f5:c9:9e:b7:ea:5e:3d:80:eb:ea:0a:c0:ca:d6:96:
e8:c0:67:d8:8b:a7:f2:73:e8:1e:72:9d:7c:f1:a4:
5b:b7:50:a7:e6:4d:e0:8e:f6:97:f0:84:04:e3:c1:
39:be:25:2c:46:7b:5e:9c:98:0a:9c:50:f4:01:52:
20:16:af:04:52:12:bf:27:e5:c7:88:60:7a:e6:d2:
60:05:dd:9a:35:30:08:58:6f:4a:4e:05:50:9a:92:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:41:23:2F:C6:51:49:86:2E:CC:27:3A:B9:5A:7D:DF:BB:53:1C:1A
X509v3 Authority Key Identifier:
keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9c:83:cf:63:15:83:67:2b:0d:ad:5c:27:ec:75:26:14:bd:4a:
77:54:51:03:3c:d4:ea:94:3d:2c:9c:ba:55:ca:1a:23:6c:0d:
20:a1:4c:b5:3a:7a:ad:52:b6:cc:9f:84:a7:b0:20:7c:c4:58:
af:00:44:00:cb:5f:cf:38:0f:f6:a1:9f:58:44:45:d8:78:46:
f1:e1:6b:44:49:31:bf:3c:c8:f3:22:54:ce:a3:74:a7:8b:74:
06:c0:b3:8a:6f:cb:28:71:cf:df:09:c5:28:fe:9d:fd:0e:4f:
f4:c3:ee:43:65:df:a4:97:a3:5f:b3:26:90:c4:6b:4c:ec:4e:
1b:66:26:cf:99:4a:d5:f9:37:50:d1:f8:4c:7d:ce:11:65:12:
6c:8d:15:53:3f:5e:16:1a:55:16:20:5f:ea:93:e6:31:bc:b8:
44:da:81:60:93:1f:52:c6:e4:35:c9:28:c4:43:f0:55:75:57:
87:73:ee:6b:98:8c:57:d9:31:1f:63:32:77:b3:6f:4e:33:6b:
e6:8c:f3:a6:f0:cf:ac:49:a3:14:a3:59:da:03:df:84:e1:4c:
81:95:d6:bc:06:db:d6:80:3b:98:f2:43:5d:ac:5b:ad:08:a5:
c0:8d:6f:40:57:63:c5:b8:9a:32:bd:77:0f:88:26:71:19:fd:
dc:e8:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:43 2025 by rpki-client