Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File: hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier: lgGpcm7fZKhOYO2ytTLYBvJ592ZdbGrJ5EmQoijXbpg=
Subject key identifier: CB:87:AA:6B:6F:FF:20:72:E1:89:56:67:F0:5B:3C:C1:72:EB:C6:48
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer: /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial: 04AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number: 04A3
Signing time: Mon 20 Oct 2025 03:00:55 +0000
Manifest this update: Mon 20 Oct 2025 03:00:54 +0000
Manifest next update: Wed 22 Oct 2025 03:00:54 +0000
Files and hashes: 1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: Ys6HiK+XNzAwxIW7NZewqVfUMg0zMize/fGhGDxNtzc=)
2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1194 (0x4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Validity
Not Before: Oct 20 03:00:54 2025 GMT
Not After : Oct 22 03:00:54 2025 GMT
Subject: CN=68f5a5e7-faf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:61:dc:f9:8d:d1:78:24:71:0c:9a:bf:a9:ed:
99:e8:e3:5f:8c:71:e0:cf:e3:a8:76:1e:49:9a:47:
bb:88:22:69:92:05:6f:bf:6c:7e:15:35:1e:6a:13:
0b:7f:3a:69:0c:46:8d:44:6f:6f:d9:a0:50:60:6d:
69:40:89:03:71:42:d0:27:93:a8:7c:24:01:e5:2a:
a8:82:03:32:38:c6:24:a8:bc:a3:94:40:8d:45:64:
04:fd:74:a0:cb:0b:c6:f6:91:59:6a:b7:02:c2:ba:
7e:82:30:0e:d3:fb:ea:fc:b8:59:1b:8d:2e:81:dd:
4e:b0:72:d8:33:55:4e:bd:8a:32:a8:84:52:20:9a:
99:ae:e2:e6:7a:3a:c5:c1:78:c2:9c:2a:7d:a4:bf:
03:ca:eb:f7:e0:7b:55:35:a5:4c:71:fc:0f:3d:d0:
bf:c5:58:57:93:d0:8a:8d:5e:7b:70:2e:5e:25:06:
1f:dd:9b:74:38:89:1d:75:81:be:35:74:c0:12:5b:
a5:21:1a:20:7b:a0:40:6b:21:4c:1f:0f:9f:ed:85:
ee:ae:40:73:cb:66:7e:84:8d:a1:e7:7d:61:c0:e1:
15:0b:aa:e7:96:55:dc:21:c7:19:70:87:8e:dc:50:
8c:66:25:23:ee:4f:18:bd:54:23:5a:bb:48:4e:ee:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:AA:6B:6F:FF:20:72:E1:89:56:67:F0:5B:3C:C1:72:EB:C6:48
X509v3 Authority Key Identifier:
keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:9b:4d:88:ab:8a:40:d9:87:ef:af:2a:1f:90:97:61:9a:2a:
63:63:81:21:a9:5e:65:09:fa:fe:62:87:6c:db:10:49:1c:8e:
50:cd:d5:9b:d3:fa:3a:a2:0a:2f:db:19:97:b5:5c:ab:a3:a6:
57:58:0a:cb:1d:72:da:a4:52:c5:48:37:64:c8:a2:66:7d:f0:
07:65:58:9e:bf:8f:dd:00:49:b3:e5:d7:36:91:6d:86:21:41:
ad:01:03:53:82:a9:9d:42:6e:5b:58:f4:bb:3e:77:80:54:5e:
2f:e6:a3:8f:e9:a8:2d:9a:d9:74:4a:87:b0:63:60:d0:ad:b1:
86:49:fe:26:3f:73:ef:80:f4:55:90:89:cb:a6:45:f7:84:b6:
38:6d:86:b2:3c:aa:32:a5:fb:09:69:71:29:15:0f:15:9f:78:
d5:c2:8b:96:c2:e9:a1:ac:09:8a:ac:35:3f:b1:93:50:b4:34:
5e:6a:93:57:48:ab:79:d6:1f:92:c1:39:be:d8:5d:16:6f:8d:
ce:c0:bb:fe:b3:cb:fa:f7:0c:22:9c:99:01:9a:a6:08:73:c8:
4b:f7:89:16:9a:5d:00:cc:51:a7:10:ce:0d:d3:db:f5:2e:63:
89:35:b0:a5:34:e6:d4:73:c6:bf:7f:8e:b2:da:11:e0:30:b4:
c4:29:b6:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNTEwMjAwMzAwNTRaFw0yNTEwMjIwMzAwNTRaMBgxFjAU
BgNVBAMTDTY4ZjVhNWU3LWZhZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZYdz5jdF4JHEMmr+p7Zno41+MceDP46h2HkmaR7uIImmSBW+/bH4VNR5q
Ewt/OmkMRo1Eb2/ZoFBgbWlAiQNxQtAnk6h8JAHlKqiCAzI4xiSovKOUQI1FZAT9
dKDLC8b2kVlqtwLCun6CMA7T++r8uFkbjS6B3U6wctgzVU69ijKohFIgmpmu4uZ6
OsXBeMKcKn2kvwPK6/fge1U1pUxx/A890L/FWFeT0IqNXntwLl4lBh/dm3Q4iR11
gb41dMASW6UhGiB7oEBrIUwfD5/the6uQHPLZn6EjaHnfWHA4RULqueWVdwhxxlw
h47cUIxmJSPuTxi9VCNau0hO7jDPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUy4eq
a2//IHLhiVZn8Fs8wXLrxkgwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEy
MjI0NjgvaEx3aW9VdTEtSW04RUtJczhYeWNHYlVac29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDm02Iq4pA2YfvryofkJdhmipjY4Eh
qV5lCfr+Yods2xBJHI5QzdWb0/o6ogov2xmXtVyro6ZXWArLHXLapFLFSDdkyKJm
ffAHZViev4/dAEmz5dc2kW2GIUGtAQNTgqmdQm5bWPS7PneAVF4v5qOP6agtmtl0
SoewY2DQrbGGSf4mP3PvgPRVkInLpkX3hLY4bYayPKoypfsJaXEpFQ8Vn3jVwouW
wumhrAmKrDU/sZNQtDReapNXSKt51h+SwTm+2F0Wb43OwLv+s8v69wwinJkBmqYI
c8hL94kWml0AzFGnEM4N09v1LmOJNbClNObUc8a/f46y2hHgMLTEKbYy
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:53 2025 by rpki-client