Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier: 0gAHORi93SbjepMdnldYz+i1cju2/a8A0PXxdyLte9M=
Subject key identifier: 33:9D:A0:3E:5B:3C:0C:60:40:AB:07:09:D6:51:59:0F:19:42:51:07
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer: /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial: 04D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number: 04D4
Signing time: Sun 19 Oct 2025 02:53:35 +0000
Manifest this update: Sun 19 Oct 2025 02:53:35 +0000
Manifest next update: Tue 21 Oct 2025 02:53:35 +0000
Files and hashes: 1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: SIUriKW+du1UomY92r0zXFplGYnh+o+zdK/5Kdz8QPQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1237 (0x4d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Validity
Not Before: Oct 19 02:53:35 2025 GMT
Not After : Oct 21 02:53:35 2025 GMT
Subject: CN=68f452af-6042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2e:78:b0:66:a4:8e:74:37:2c:0c:d0:18:34:
5f:6a:17:bb:8c:49:f8:d5:60:4f:7e:1d:d8:79:14:
2f:fa:26:69:b7:43:fb:72:ba:b5:65:f7:5c:6b:5d:
79:65:76:e7:5c:0f:5c:2d:9e:30:06:7c:06:b5:fe:
b6:c3:d0:5c:55:f6:24:a6:eb:ba:65:29:23:a4:63:
14:00:80:56:8b:82:3e:50:14:73:1a:f4:8a:f4:0c:
8e:bb:b1:e5:9c:68:b8:ee:e8:6e:bf:17:83:c3:11:
17:6a:f4:6b:74:e2:f9:cc:b8:a7:34:a8:e8:94:d6:
50:4b:ac:2d:ec:3b:5b:ea:31:cf:e5:b4:0b:f3:8d:
13:7e:b2:78:23:f2:1e:ce:9f:64:67:cd:e5:a8:29:
60:6d:d2:6c:f1:60:05:e8:41:10:af:eb:31:88:d2:
74:0c:ab:48:22:b3:97:c8:a7:f2:0f:df:f0:ca:0c:
0c:67:5a:de:e8:f1:c8:08:67:b9:2d:bf:21:16:f8:
d0:db:0c:55:f2:74:49:1c:ec:7b:f9:65:7f:4a:af:
07:3e:9f:55:01:f0:ac:ed:7f:88:41:9c:43:64:af:
c8:6a:de:65:24:e0:f5:60:63:40:e2:a4:d9:9c:0c:
94:10:12:7a:bc:92:12:92:16:6b:a8:a3:af:5d:b2:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9D:A0:3E:5B:3C:0C:60:40:AB:07:09:D6:51:59:0F:19:42:51:07
X509v3 Authority Key Identifier:
keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:1b:84:a2:ae:8c:02:4a:96:af:c2:4b:68:50:3f:d6:61:65:
26:99:a7:9d:36:dc:01:29:4a:83:f1:16:2c:30:09:30:4e:88:
aa:6a:6c:66:36:3b:4d:9a:42:05:54:bd:fd:97:3f:4e:a6:84:
4b:52:63:f0:04:f8:c1:91:da:2d:20:0d:ff:18:a2:4d:69:9d:
61:f5:4f:66:dd:a3:31:c2:b4:e0:e3:3b:a4:99:9d:e8:01:32:
06:c3:a8:8d:57:b7:35:7c:b3:59:98:e9:6b:96:bc:7d:73:f5:
7a:d5:4b:d8:b7:3a:de:be:f1:b9:51:c7:18:26:89:fa:40:7a:
4c:b9:98:e3:3d:65:5c:f5:bc:3c:e8:05:6d:8b:ad:ea:48:24:
c1:a7:15:e2:46:5f:49:46:9b:99:22:58:cd:d8:38:aa:e6:f9:
6e:5a:12:92:0e:5d:b5:0a:51:8d:69:8f:dd:c5:f2:45:e1:21:
56:cd:cf:53:20:94:0e:ad:09:a7:90:a0:d9:1b:4f:8e:c0:95:
1e:b4:f9:61:fc:6f:c0:c4:67:65:64:91:0f:7a:a5:eb:5f:c1:
72:cf:4b:d4:87:49:aa:80:3f:b1:38:fd:58:21:3b:03:49:6a:
a4:7a:44:f4:4e:59:6c:1d:97:39:fe:5e:16:89:2a:2a:5e:33:
25:91:65:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:59:08 2025 by rpki-client