Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File: 8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier: gth68jkEpXUZLXaqGgAXiczvj3tXoLSIcgfR+uUc3K8=
Subject key identifier: 17:8E:09:03:D0:03:84:16:10:FE:E8:B9:DD:2A:6F:FD:FE:67:7A:1B
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer: /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial: 02FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number: 02F9
Signing time: Mon 20 Oct 2025 03:52:20 +0000
Manifest this update: Mon 20 Oct 2025 03:52:19 +0000
Manifest next update: Wed 22 Oct 2025 03:52:19 +0000
Files and hashes: 1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: sddm8KaPBejsQTSuCvI+r/TtX9bb0TIb7JcM1t07v94=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C08D4AF, serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Validity
Not Before: Oct 20 03:52:19 2025 GMT
Not After : Oct 22 03:52:19 2025 GMT
Subject: CN=68f5b1f4-75a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:14:22:25:a3:f8:35:05:fc:61:7c:2f:ed:
30:09:5b:20:92:be:2e:08:85:66:11:43:8d:d0:ce:
87:6a:50:05:75:60:69:fb:8a:76:c4:57:1c:f6:59:
50:9d:7c:a9:45:40:e8:a6:23:e0:aa:99:fe:1c:b3:
e1:71:7c:63:1f:af:cf:07:f8:39:02:81:17:d7:88:
58:56:dc:17:51:b5:3b:96:29:7a:d4:78:47:06:99:
2e:a8:91:b4:65:04:fd:49:ee:75:f2:39:b7:26:43:
a2:0e:e9:64:44:b4:27:ca:a6:09:33:14:e3:2d:8b:
27:2f:00:b6:61:86:8f:e5:b8:f2:97:69:53:29:5f:
81:20:59:99:5a:44:7e:bd:56:91:83:2e:a3:d0:1b:
78:ea:08:61:f0:ce:e1:5b:cf:b6:7b:da:22:0c:76:
82:2a:aa:c8:df:c8:6a:d1:af:3e:7b:85:81:69:8c:
70:ec:8b:18:19:3c:55:c1:d0:c8:5a:75:c2:e1:4c:
00:d0:7b:d2:2c:c5:6a:ad:85:19:8b:8a:94:41:43:
c7:9c:8a:69:e0:d0:ca:83:49:7b:5c:d2:6e:1e:f0:
e7:4c:68:c0:f4:cc:8b:b3:79:1a:45:23:91:fb:f7:
e1:e6:10:af:93:54:83:0e:8a:df:3e:70:3a:dc:aa:
53:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8E:09:03:D0:03:84:16:10:FE:E8:B9:DD:2A:6F:FD:FE:67:7A:1B
X509v3 Authority Key Identifier:
keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c3:6b:4e:91:da:7e:76:db:86:cd:55:9c:60:ff:50:8d:fb:
25:42:e2:e1:d9:08:0d:b1:47:88:e8:01:48:fb:eb:0f:dc:59:
d6:70:d5:0c:43:72:a5:0b:56:eb:f4:c9:3a:bc:43:1e:2c:61:
61:24:52:59:ce:84:49:77:77:c7:55:3b:7c:37:db:20:e9:2b:
f9:4f:f2:10:5d:99:4e:65:59:c8:93:87:06:2d:bf:04:5b:59:
d2:e2:60:e1:48:c1:db:c6:5f:89:8f:b3:67:8c:1b:06:71:5c:
93:05:3c:7a:ad:00:84:7e:de:ea:23:c4:37:c7:c8:34:3e:9e:
d0:37:91:e4:24:8f:71:e9:04:06:79:9c:8e:2e:50:ca:40:2f:
c6:22:4d:33:cd:17:e7:d4:ae:27:fb:eb:fb:a2:1b:a9:23:19:
40:0b:ff:63:46:1c:01:37:d2:ab:3e:af:3e:e8:8f:38:9b:20:
8e:71:f8:37:c3:b8:14:46:24:37:6e:6b:44:de:0b:6c:7a:f3:
ae:51:29:b5:91:74:15:79:11:de:05:58:d5:be:a5:3a:93:8b:
6b:29:13:36:6c:ba:54:e3:9e:47:15:a2:2a:27:09:51:a9:7a:
63:60:8b:3a:e3:a7:91:fe:fd:ea:e4:a3:3e:8b:d6:95:c0:57:
18:55:2b:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzA4RDRBRjExMC8GA1UEBRMoRjFGMUNBMDU4MkU4MjU2M0VFMjVGMDk5MTc2QjIy
REZDRDlDQzM2NDAeFw0yNTEwMjAwMzUyMTlaFw0yNTEwMjIwMzUyMTlaMBgxFjAU
BgNVBAMTDTY4ZjViMWY0LTc1YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEuBQiJaP4NQX8YXwv7TAJWyCSvi4IhWYRQ43QzodqUAV1YGn7inbEVxz2
WVCdfKlFQOimI+Cqmf4cs+FxfGMfr88H+DkCgRfXiFhW3BdRtTuWKXrUeEcGmS6o
kbRlBP1J7nXyObcmQ6IO6WREtCfKpgkzFOMtiycvALZhho/luPKXaVMpX4EgWZla
RH69VpGDLqPQG3jqCGHwzuFbz7Z72iIMdoIqqsjfyGrRrz57hYFpjHDsixgZPFXB
0MhadcLhTADQe9IsxWqthRmLipRBQ8ecimng0MqDSXtc0m4e8OdMaMD0zIuzeRpF
I5H79+HmEK+TVIMOit8+cDrcqlPdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUF44J
A9ADhBYQ/ui53Spv/f5nehswHwYDVR0jBBgwFoAU8fHKBYLoJWPuJfCZF2si382c
w2QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwOEQ0L0E5OEE5RTU4NjlBODExRUU5OEE0ODQxNDRBRDlFNkZDLzhmSEtC
WUxvSldQdUpmQ1pGMnNpMzgyY3cyUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhmSEtCWUxvSldQdUpmQ1pGMnNpMzgyY3cyUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzA4RDQvQTk4QTlFNTg2OUE4MTFFRTk4QTQ4NDE0NEFE
OUU2RkMvOGZIS0JZTG9KV1B1SmZDWkYyc2kzODJjdzJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcw2tOkdp+dtuGzVWcYP9QjfslQuLh
2QgNsUeI6AFI++sP3FnWcNUMQ3KlC1br9Mk6vEMeLGFhJFJZzoRJd3fHVTt8N9sg
6Sv5T/IQXZlOZVnIk4cGLb8EW1nS4mDhSMHbxl+Jj7NnjBsGcVyTBTx6rQCEft7q
I8Q3x8g0Pp7QN5HkJI9x6QQGeZyOLlDKQC/GIk0zzRfn1K4n++v7ohupIxlAC/9j
RhwBN9KrPq8+6I84myCOcfg3w7gURiQ3bmtE3gtsevOuUSm1kXQVeRHeBVjVvqU6
k4trKRM2bLpU455HFaIqJwlRqXpjYIs646eR/v3q5KM+i9aVwFcYVSvw
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:03 2025 by rpki-client