Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier: FNHVtw8FnzX2tob/xuCsR9tOQJq3LX4texSaM53mggk=
Subject key identifier: 9B:EA:EB:EC:53:12:76:C4:51:A4:8E:BA:00:DD:BF:C3:AF:30:E7:95
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer: /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial: 91
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number: 91
Signing time: Mon 20 Oct 2025 05:03:21 +0000
Manifest this update: Mon 20 Oct 2025 05:03:20 +0000
Manifest next update: Wed 22 Oct 2025 05:03:20 +0000
Files and hashes: 1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: PPD+kGPcuNnUoliBB8jYLH0ul/Q7ZnZTvU37SV5kZ8M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Validity
Not Before: Oct 20 05:03:20 2025 GMT
Not After : Oct 22 05:03:20 2025 GMT
Subject: CN=68f5c299-478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:79:81:d6:bd:0b:10:c3:55:d7:d4:64:35:
f5:f0:fa:6f:d6:ef:8d:4c:99:47:9f:ea:ed:39:67:
80:9f:8b:8f:8c:ec:ce:00:e3:b2:c5:92:13:a1:92:
51:4d:c6:6e:59:9d:32:3e:f4:5d:fb:b9:76:54:c1:
66:52:f8:47:60:d0:e0:65:38:4d:fc:33:05:b9:bf:
03:5f:4f:90:70:0d:e8:1f:da:ed:fa:4c:a2:87:b4:
51:92:51:33:ce:57:51:28:29:70:2d:d4:90:de:ff:
4b:db:3c:7c:3d:0b:40:04:5f:96:8d:a2:c6:10:61:
b0:ee:dd:ed:70:d7:58:67:ae:aa:4a:98:cf:7f:33:
a0:70:f8:9f:d6:91:4c:70:91:9c:57:29:39:46:da:
84:f6:0d:bb:2e:38:7d:e4:91:dd:b7:09:84:1a:f6:
3d:c9:0c:fd:a5:cc:76:11:98:c2:90:df:dc:a9:a7:
6f:c2:4d:ec:43:aa:f6:0e:80:29:4f:e3:96:dd:5e:
90:c0:12:50:0a:8a:ed:31:4f:c2:cb:89:16:bd:ae:
92:b9:ae:b2:1e:92:cb:32:6e:e0:48:e2:ad:2b:3b:
37:2f:01:2c:33:47:ac:b4:db:d8:a7:25:5a:21:d9:
6b:22:9d:04:b8:7d:6e:7a:04:2f:73:8b:35:dd:78:
f6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EA:EB:EC:53:12:76:C4:51:A4:8E:BA:00:DD:BF:C3:AF:30:E7:95
X509v3 Authority Key Identifier:
keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:1b:1f:ca:f8:0a:6f:14:e0:73:ca:dd:7e:0c:32:a2:18:d3:
f6:b3:f9:41:00:2a:70:bb:6a:a6:18:e0:44:52:4e:a2:26:06:
17:de:dd:2b:03:1e:3a:64:08:da:d6:55:51:9d:f3:79:51:5e:
24:c2:94:48:37:d0:46:f2:01:91:f8:2a:10:d0:ac:55:11:40:
89:da:f2:31:2e:1a:be:2d:88:88:1c:0b:34:92:6a:09:ec:89:
5f:21:82:7e:8d:ef:85:18:70:35:0d:e3:56:4c:10:15:4e:b8:
2a:5d:58:95:64:be:37:5c:99:13:3f:0a:3d:33:d8:bf:bf:6b:
b1:19:e8:2e:9d:f0:f3:bb:d5:e7:64:20:83:ad:c1:16:a3:eb:
dd:be:66:64:2e:73:f4:7a:f1:ca:9b:41:b9:dd:19:bc:de:b9:
9e:5f:4d:68:97:6f:25:03:f5:d2:24:f6:9c:c8:86:59:73:a2:
e3:02:24:6d:66:a5:4b:bd:78:97:00:59:5b:81:f3:13:6c:85:
99:00:28:9d:c7:28:6e:dc:05:09:ac:d7:ee:4f:0c:37:07:41:
5e:dc:7d:13:7c:2a:a2:d0:a1:72:b4:b2:cb:56:8f:b4:0b:7a:
20:5f:54:8f:a9:36:e7:14:5b:e1:42:c3:38:68:99:e9:8a:6f:
72:63:a0:06
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzI5RTZBRjExMC8GA1UEBRMoNDYzQzdBRjMzQkQyRjE0QUZENEQyQTM0NUQ5QzMx
ODE3Qzc4NzM3QzAeFw0yNTEwMjAwNTAzMjBaFw0yNTEwMjIwNTAzMjBaMBgxFjAU
BgNVBAMTDTY4ZjVjMjk5LTQ3OGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb4HmB1r0LEMNV19RkNfXw+m/W741MmUef6u05Z4Cfi4+M7M4A47LFkhOh
klFNxm5ZnTI+9F37uXZUwWZS+Edg0OBlOE38MwW5vwNfT5BwDegf2u36TKKHtFGS
UTPOV1EoKXAt1JDe/0vbPHw9C0AEX5aNosYQYbDu3e1w11hnrqpKmM9/M6Bw+J/W
kUxwkZxXKTlG2oT2DbsuOH3kkd23CYQa9j3JDP2lzHYRmMKQ39ypp2/CTexDqvYO
gClP45bdXpDAElAKiu0xT8LLiRa9rpK5rrIekssybuBI4q0rOzcvASwzR6y029in
JVoh2WsinQS4fW56BC9zizXdePaBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm+rr
7FMSdsRRpI66AN2/w68w55UwHwYDVR0jBBgwFoAURjx68zvS8Ur9TSo0XZwxgXx4
c3wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyOUU2L0JENDU3ODlFM0Q3MDExRjA4RkIyOTJEM0RBRTRFQzlDL1JqeDY4
enZTOFVyOVRTbzBYWnd4Z1h4NGMzdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JqeDY4enZTOFVyOVRTbzBYWnd4Z1h4NGMzdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzI5RTYvQkQ0NTc4OUUzRDcwMTFGMDhGQjI5MkQzREFF
NEVDOUMvUmp4Njh6dlM4VXI5VFNvMFhad3hnWHg0YzN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJGx/K+ApvFOBzyt1+DDKiGNP2s/lB
ACpwu2qmGOBEUk6iJgYX3t0rAx46ZAja1lVRnfN5UV4kwpRIN9BG8gGR+CoQ0KxV
EUCJ2vIxLhq+LYiIHAs0kmoJ7IlfIYJ+je+FGHA1DeNWTBAVTrgqXViVZL43XJkT
Pwo9M9i/v2uxGegunfDzu9XnZCCDrcEWo+vdvmZkLnP0evHKm0G53Rm83rmeX01o
l28lA/XSJPacyIZZc6LjAiRtZqVLvXiXAFlbgfMTbIWZACidxyhu3AUJrNfuTww3
B0Fe3H0TfCqi0KFytLLLVo+0C3ogX1SPqTbnFFvhQsM4aJnpim9yY6AG
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:38 2025 by rpki-client