Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
File: KFr00NNaAfToZi1wYXSTEwgbBW8.mft (raw, json)
Hash identifier: t0abdpjYQV1e9OFOWJ2uVUCjS0WBbFQ98YqFGHIb32g=
Subject key identifier: D4:AF:5E:9A:10:9D:D4:FC:15:82:62:4D:81:8D:99:B6:C6:DD:E6:0F
Authority key identifier: 28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
Certificate issuer: /CN=F36A45F8AF/serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Certificate serial: 43
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
Manifest number: 42
Signing time: Mon 20 Oct 2025 05:14:43 +0000
Manifest this update: Mon 20 Oct 2025 05:14:42 +0000
Manifest next update: Wed 22 Oct 2025 05:14:42 +0000
Files and hashes: 1: KFr00NNaAfToZi1wYXSTEwgbBW8.crl (hash: dvgFhv1+1imdDgIeF5AL6q9kDkQaUeiIvnVxC5AA0Qw=)
2: C8DBFA287C1F11F0A46A9BE9DAE4EC9C.roa (hash: MEidKfzt+zEnon2K4l4j1oz0vKLVkgQvpvIBenvS0UU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 05:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67 (0x43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A45F8AF, serialNumber=285AF4D0D35A01F4E8662D7061749313081B056F
Validity
Not Before: Oct 20 05:14:42 2025 GMT
Not After : Oct 22 05:14:42 2025 GMT
Subject: CN=68f5c543-2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bd:a5:ef:fc:94:5b:d6:4a:57:22:93:e5:eb:
1b:ad:f2:8a:b4:88:5e:96:c8:f8:14:53:b6:be:5c:
7f:86:cb:dd:ec:57:63:39:17:d1:95:60:e2:5d:36:
2b:f1:f4:be:3b:e7:40:dd:26:f1:d0:13:bc:aa:a7:
d6:4c:1e:3e:f1:f5:23:07:51:94:fe:35:de:47:92:
86:05:4a:7d:b6:3a:7e:2e:b8:f3:85:c5:0a:b6:d5:
40:19:c5:64:bd:2e:6f:71:35:64:5d:7a:17:91:18:
96:a2:ec:b6:f4:cd:c9:da:69:c4:13:25:43:26:9b:
f9:47:02:1d:31:8a:74:0b:e6:36:c3:a5:9c:85:ba:
39:b4:17:f2:96:b7:e5:98:eb:95:da:cf:d9:03:cc:
fc:ed:da:55:68:cc:7b:26:13:d6:15:0a:25:a4:60:
7e:6a:e0:4a:75:8f:f3:6a:9c:01:20:16:fd:91:8a:
1e:06:e4:06:40:f8:70:06:50:c4:56:66:82:d3:78:
f5:4c:85:79:1a:51:ae:86:07:65:84:36:45:66:09:
ae:1e:d8:ba:12:8a:27:b1:79:8e:43:5f:39:b5:38:
1a:f0:eb:65:1d:69:5b:90:93:af:d9:f1:21:40:36:
35:f2:f9:f2:5a:24:f7:6b:bf:92:5f:93:71:df:fb:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:AF:5E:9A:10:9D:D4:FC:15:82:62:4D:81:8D:99:B6:C6:DD:E6:0F
X509v3 Authority Key Identifier:
keyid:28:5A:F4:D0:D3:5A:01:F4:E8:66:2D:70:61:74:93:13:08:1B:05:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KFr00NNaAfToZi1wYXSTEwgbBW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A45F8/95187B187C1E11F0AB87CEE0DAE4EC9C/KFr00NNaAfToZi1wYXSTEwgbBW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a8:6f:30:57:9a:92:01:72:90:9b:e5:d5:e8:52:14:01:75:
d7:49:0c:18:36:bc:0f:f8:d9:be:f0:84:41:30:6b:87:27:10:
38:f2:60:12:2d:f3:a7:6c:f8:11:f4:5c:5a:9a:fd:f7:97:16:
80:56:ac:15:a6:87:8b:17:52:da:eb:e4:ef:d3:e0:97:6b:d2:
b6:22:ea:9e:1c:4c:5c:15:97:48:62:91:63:87:79:81:1d:df:
0a:09:15:38:66:38:c5:e8:f5:0e:d6:3f:3c:ed:43:c0:1f:50:
d9:af:4e:bd:39:95:42:d5:15:d4:4e:77:46:9f:f7:e8:76:69:
5f:b3:27:19:fa:96:31:d9:5c:0b:df:fa:e0:57:9b:f9:70:88:
1a:65:0e:5b:6c:45:36:82:3b:fc:51:98:cc:63:70:c9:14:ba:
2d:84:c9:08:ed:af:d6:35:b2:e6:a0:d2:c1:c3:80:4b:2c:e5:
fd:97:2e:b4:bf:ac:81:20:f9:e3:ec:cb:ff:41:15:ce:e3:2a:
81:35:f8:55:0c:16:84:99:2d:21:7d:74:67:44:65:6a:0d:c5:
74:1a:42:6f:0a:d6:9f:f2:89:74:72:60:9b:aa:25:57:1b:5e:
9c:d9:2e:b6:ed:7d:f1:e2:c1:e1:bd:c5:9e:74:ee:2d:15:d8:
84:97:d6:15
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NDVGOEFGMTEwLwYDVQQFEygyODVBRjREMEQzNUEwMUY0RTg2NjJENzA2MTc0OTMx
MzA4MUIwNTZGMB4XDTI1MTAyMDA1MTQ0MloXDTI1MTAyMjA1MTQ0MlowGDEWMBQG
A1UEAxMNNjhmNWM1NDMtMmNhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALi9pe/8lFvWSlcik+XrG63yirSIXpbI+BRTtr5cf4bL3exXYzkX0ZVg4l02
K/H0vjvnQN0m8dATvKqn1kwePvH1IwdRlP413keShgVKfbY6fi6484XFCrbVQBnF
ZL0ub3E1ZF16F5EYlqLstvTNydppxBMlQyab+UcCHTGKdAvmNsOlnIW6ObQX8pa3
5ZjrldrP2QPM/O3aVWjMeyYT1hUKJaRgfmrgSnWP82qcASAW/ZGKHgbkBkD4cAZQ
xFZmgtN49UyFeRpRroYHZYQ2RWYJrh7YuhKKJ7F5jkNfObU4GvDrZR1pW5CTr9nx
IUA2NfL58lok92u/kl+Tcd/7zy0CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTUr16a
EJ3U/BWCYk2BjZm2xt3mDzAfBgNVHSMEGDAWgBQoWvTQ01oB9OhmLXBhdJMTCBsF
bzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTQ1RjgvOTUxODdCMTg3QzFFMTFGMEFCODdDRUUwREFFNEVDOUMvS0ZyMDBO
TmFBZlRvWmkxd1lYU1RFd2diQlc4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvS0ZyMDBOTmFBZlRvWmkxd1lYU1RFd2diQlc4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBNDVGOC85NTE4N0IxODdDMUUxMUYwQUI4N0NFRTBEQUU0
RUM5Qy9LRnIwME5OYUFmVG9aaTF3WVhTVEV3Z2JCVzgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAB2obzBXmpIBcpCb5dXoUhQBdddJDBg2
vA/42b7whEEwa4cnEDjyYBIt86ds+BH0XFqa/feXFoBWrBWmh4sXUtrr5O/T4Jdr
0rYi6p4cTFwVl0hikWOHeYEd3woJFThmOMXo9Q7WPzztQ8AfUNmvTr05lULVFdRO
d0af9+h2aV+zJxn6ljHZXAvf+uBXm/lwiBplDltsRTaCO/xRmMxjcMkUui2EyQjt
r9Y1suag0sHDgEss5f2XLrS/rIEg+ePsy/9BFc7jKoE1+FUMFoSZLSF9dGdEZWoN
xXQaQm8K1p/yiXRyYJuqJVcbXpzZLrbtffHiweG9xZ507i0V2ISX1hU=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:38:17 2025 by rpki-client