Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier: nB7TkOSCJUL+khzwF0JjnyHe7Qt5W8zbGRRZyIfr0xk=
Subject key identifier: A7:31:26:59:9B:DB:84:97:4F:08:6D:9C:D4:FF:AD:0E:27:CC:81:47
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer: /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial: 01C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number: 01C7
Signing time: Sun 19 Oct 2025 04:27:25 +0000
Manifest this update: Sun 19 Oct 2025 04:27:24 +0000
Manifest next update: Tue 21 Oct 2025 04:27:24 +0000
Files and hashes: 1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: W1d5kBz5EZA6c4kN1eP3XiCjAEMA5NVSwmyj8J7iKck=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 455 (0x1c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Validity
Not Before: Oct 19 04:27:24 2025 GMT
Not After : Oct 21 04:27:24 2025 GMT
Subject: CN=68f468ad-4aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:97:86:b2:0f:56:6b:89:f9:08:ec:1b:de:
b0:9e:42:ce:11:8c:ec:70:ec:85:03:01:ee:a5:4b:
c9:53:18:eb:2b:0f:b6:81:c6:65:75:15:73:f6:80:
11:27:b2:91:fd:b1:36:f3:49:13:a0:ba:0f:15:14:
b6:e6:98:88:51:69:8a:09:f7:50:0b:95:42:99:6e:
fb:28:d0:0e:c3:a4:a1:9f:d4:e9:fd:1e:fc:63:79:
53:cc:62:2b:a5:e3:55:66:89:e5:a9:e6:d7:cd:98:
76:cd:22:4b:d6:61:6c:ff:06:f8:3b:7c:b5:c3:c6:
61:59:4b:62:15:d7:1a:d4:8e:7a:64:6c:bb:21:b8:
88:63:04:82:42:97:f7:78:81:2c:65:b3:c2:a0:96:
2c:26:31:a8:63:f9:58:a7:38:24:fc:50:09:39:e4:
7e:02:19:cb:8e:0f:77:1a:3d:ee:75:26:ef:69:e1:
6b:00:e1:50:8f:3d:2d:1c:ea:bb:b8:d4:f8:c3:27:
4e:ce:4b:ca:0f:22:8a:e7:fe:2a:45:74:8e:d3:96:
1c:81:5b:a7:9c:50:32:8a:d2:e0:3e:8e:ca:bc:b8:
03:7b:5a:9e:5c:44:c3:a7:52:f8:de:e1:44:c6:28:
04:b3:da:99:e4:62:ef:f1:15:e7:f2:02:38:0c:38:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:26:59:9B:DB:84:97:4F:08:6D:9C:D4:FF:AD:0E:27:CC:81:47
X509v3 Authority Key Identifier:
keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:44:9a:4f:6a:3e:96:a8:e0:fc:8d:fd:42:30:cf:a3:e9:63:
47:6d:09:fa:2e:22:50:1d:97:20:90:b5:94:3f:03:be:12:e4:
39:80:8e:c1:28:58:d6:6a:96:41:85:97:76:9f:2a:0f:4c:ea:
9d:b2:e1:3b:fc:3f:f8:41:6c:cc:2d:4e:91:71:ac:5f:db:53:
e0:00:fe:10:29:ec:39:e4:00:ec:3d:4b:e1:46:7a:33:3e:73:
d8:b3:32:84:41:cd:f3:fb:8d:76:ba:97:c1:cf:37:4e:56:ef:
2c:aa:71:f4:ee:18:05:b6:93:00:10:a5:94:a8:8e:d6:d1:7e:
9e:32:89:11:eb:e1:4e:67:6a:49:b9:73:64:1a:0c:04:27:cb:
e8:6b:31:71:c1:be:ab:24:b6:21:6e:bf:2c:cd:ea:d3:8e:83:
6b:14:43:01:b3:ad:44:2d:0e:b6:fa:b7:62:9e:56:26:97:f1:
74:c3:02:07:7c:ec:d8:45:6c:a1:18:8d:71:ba:1d:de:bb:ec:
98:a2:62:5d:65:32:12:97:34:72:41:09:d7:c2:e3:f5:f1:9b:
fe:db:f8:a6:af:77:72:f1:53:97:29:d8:0e:0a:e9:40:07:00:
1a:15:11:4c:79:eb:34:66:b2:6f:b9:2c:70:4a:0f:1a:d1:33:
4d:84:20:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAccwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUFBODFBRjExMC8GA1UEBRMoM0M4RTA1MTJFMjc2QkFERTVBREMwQzgxQzY1OTM0
RTAzNDNDNjAxRjAeFw0yNTEwMTkwNDI3MjRaFw0yNTEwMjEwNDI3MjRaMBgxFjAU
BgNVBAMTDTY4ZjQ2OGFkLTRhYTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqpJeGsg9Wa4n5COwb3rCeQs4RjOxw7IUDAe6lS8lTGOsrD7aBxmV1FXP2
gBEnspH9sTbzSROgug8VFLbmmIhRaYoJ91ALlUKZbvso0A7DpKGf1On9HvxjeVPM
Yiul41VmieWp5tfNmHbNIkvWYWz/Bvg7fLXDxmFZS2IV1xrUjnpkbLshuIhjBIJC
l/d4gSxls8KgliwmMahj+VinOCT8UAk55H4CGcuOD3caPe51Ju9p4WsA4VCPPS0c
6ru41PjDJ07OS8oPIorn/ipFdI7TlhyBW6ecUDKK0uA+jsq8uAN7Wp5cRMOnUvje
4UTGKASz2pnkYu/xFefyAjgMOMWTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpzEm
WZvbhJdPCG2c1P+tDifMgUcwHwYDVR0jBBgwFoAUPI4FEuJ2ut5a3AyBxlk04DQ8
YB8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBQTgxLzk0RDc0QjRFNEYyMzExRUY5Q0UyNzA2Nzc2MkU5NTFBL1BJNEZF
dUoydXQ1YTNBeUJ4bGswNERROFlCOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BJNEZFdUoydXQ1YTNBeUJ4bGswNERROFlCOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUFBODEvOTRENzRCNEU0RjIzMTFFRjlDRTI3MDY3NzYy
RTk1MUEvUEk0RkV1SjJ1dDVhM0F5QnhsazA0RFE4WUI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhRJpPaj6WqOD8jf1CMM+j6WNHbQn6
LiJQHZcgkLWUPwO+EuQ5gI7BKFjWapZBhZd2nyoPTOqdsuE7/D/4QWzMLU6Rcaxf
21PgAP4QKew55ADsPUvhRnozPnPYszKEQc3z+412upfBzzdOVu8sqnH07hgFtpMA
EKWUqI7W0X6eMokR6+FOZ2pJuXNkGgwEJ8voazFxwb6rJLYhbr8szerTjoNrFEMB
s61ELQ62+rdinlYml/F0wwIHfOzYRWyhGI1xuh3eu+yYomJdZTISlzRyQQnXwuP1
8Zv+2/imr3dy8VOXKdgOCulABwAaFRFMees0ZrJvuSxwSg8a0TNNhCDc
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:29 2025 by rpki-client