Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier: CLZU15tTaPmOyb5AlnPevc1nbB4coK/OWI0wlQo0HS0=
Subject key identifier: 3E:04:BF:92:95:5E:1D:1C:60:9C:9D:0E:F4:46:57:31:2E:00:FF:B0
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer: /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial: 03B3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number: 03B3
Signing time: Mon 20 Oct 2025 03:29:01 +0000
Manifest this update: Mon 20 Oct 2025 03:29:00 +0000
Manifest next update: Wed 22 Oct 2025 03:29:00 +0000
Files and hashes: 1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: WAq9ijfM2heI2i16sxmbxZH31gheLkuRJoyvBytQgds=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Validity
Not Before: Oct 20 03:29:00 2025 GMT
Not After : Oct 22 03:29:00 2025 GMT
Subject: CN=68f5ac7d-05c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:1c:01:18:57:f6:fc:e7:5f:8b:21:bf:8c:
c8:62:23:2a:d1:d8:1c:ce:b7:0f:54:6c:bf:c0:5d:
6c:b9:a2:c5:d5:37:7a:fb:8d:df:f9:69:3a:5e:92:
6a:63:f9:b6:9f:fe:e4:3a:ef:2b:77:ab:53:0e:1d:
73:36:09:c8:12:9a:e9:85:07:d6:56:45:ff:1f:94:
e3:4c:14:e8:00:26:85:79:d3:f4:e7:9e:18:24:4d:
28:8a:ed:46:0f:6a:07:bb:18:69:a9:60:eb:35:46:
fe:f6:f0:e8:aa:8d:66:67:b5:df:77:8b:3a:ce:34:
b4:58:f1:2c:7b:26:cf:bc:59:37:84:18:8a:a0:ef:
16:96:e5:af:bf:a1:89:84:28:07:d8:da:94:13:b4:
1d:6e:fd:51:5c:eb:07:9a:9f:58:c8:0d:ba:a3:8a:
88:fb:e4:9f:e7:91:e3:ad:b2:8a:1f:a9:3d:6b:aa:
a3:f8:ae:44:45:b0:8e:b0:57:b0:bc:58:cf:1a:f7:
78:0e:fb:e9:cb:03:97:36:e0:21:43:0c:ea:01:96:
be:61:d9:49:1e:13:61:45:b6:95:e9:02:a4:1a:a4:
af:f8:72:df:ea:1d:1a:76:9b:8e:47:b6:d4:97:ce:
1c:a8:4f:23:e2:1c:a1:ea:0c:e6:40:18:46:de:38:
ae:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:04:BF:92:95:5E:1D:1C:60:9C:9D:0E:F4:46:57:31:2E:00:FF:B0
X509v3 Authority Key Identifier:
keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:68:77:dc:04:a7:1a:dc:7b:01:9d:51:c8:f0:3e:19:41:cc:
b2:23:4b:b9:13:79:21:b5:8b:0d:b2:ac:52:74:89:f5:0e:27:
6f:2f:76:6e:06:c0:b8:7e:29:f0:a5:d2:be:44:89:3d:da:3e:
b0:b0:93:ab:1f:b6:31:65:b5:c7:bc:88:b3:27:3b:85:1e:98:
a0:50:15:81:7f:15:1c:47:e0:36:fd:df:98:c1:ef:b1:9b:ac:
c2:32:2f:e0:3e:a4:e7:17:d3:54:a3:f6:51:4a:fd:f1:1c:49:
f1:eb:36:47:66:56:d3:2c:57:84:09:2f:14:3e:9e:ea:5c:d2:
8f:7e:aa:0c:e6:66:f1:e6:b1:85:4b:31:7d:99:26:6b:94:7c:
0f:53:1c:72:f8:d2:55:9c:b1:01:30:4c:a7:76:30:87:a5:66:
4c:7d:4e:43:56:be:f7:5d:2a:2f:eb:0a:37:d5:f6:f3:4d:2e:
11:d6:64:86:6c:99:5f:3b:2f:c7:3b:4d:c1:35:72:de:95:43:
8b:62:8d:cc:15:61:d8:5b:19:dd:86:16:4d:e3:0f:d3:38:ac:
2d:29:7d:91:b6:f5:30:c1:1a:11:cf:b6:a9:8a:96:09:77:e1:
88:33:26:30:02:96:8f:f8:eb:1b:e6:28:04:67:3c:e9:77:32:
d6:64:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:53:15 2025 by rpki-client