
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier: 5vNv/0panGC5ph4u7JOEB6IliDV+z5FREgCTNMgQDC0=
Subject key identifier: 39:01:1C:4B:72:BA:FB:2E:1E:C2:E3:6D:BE:C9:4C:70:2F:DB:96:47
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 0631
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number: 062F
Signing time: Mon 20 Oct 2025 02:22:29 +0000
Manifest this update: Mon 20 Oct 2025 02:22:28 +0000
Manifest next update: Wed 22 Oct 2025 02:22:28 +0000
Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: ISZ4MspPH2dVsvp+aK0gKHFwMaayA6sYvZPumoLZ4QI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Validity
Not Before: Oct 20 02:22:28 2025 GMT
Not After : Oct 22 02:22:28 2025 GMT
Subject: CN=68f59ce5-c38f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2c:7e:47:6a:b3:8e:f7:8e:51:ac:63:76:e0:
d3:93:ed:0f:15:23:ac:90:55:0e:e3:9b:08:09:c5:
0f:9c:a0:dd:c3:d6:69:ef:03:01:2e:0f:56:5e:3a:
cd:0a:2d:e5:67:aa:9c:f6:dd:40:ed:30:92:34:73:
db:12:b7:7f:da:4e:d8:bc:27:1b:d8:cf:04:8c:e5:
8f:03:51:f8:36:b6:e1:bd:04:35:2d:00:0c:34:9d:
00:87:8f:4f:7d:f8:7b:ce:0a:97:ec:2f:f8:d6:01:
02:05:ff:0b:a6:14:fc:9f:d1:37:1b:d3:f6:74:96:
db:a1:0c:0a:94:9e:0c:2c:36:cd:8f:63:fd:33:59:
86:f6:a2:25:90:01:29:ec:db:70:dd:8f:b3:6f:6c:
58:f2:ac:80:d6:79:c1:39:53:a9:fb:60:bb:09:50:
7a:25:ed:9a:6a:8a:9f:75:e4:a4:cb:b3:f2:31:ef:
03:01:5b:bb:24:4c:80:6e:5c:5c:70:41:5a:47:c9:
82:b1:d4:60:98:5d:20:a0:4d:8e:a7:5f:4d:bc:87:
f6:f5:c7:89:9e:42:6c:dc:97:2e:2a:66:db:67:24:
ba:2e:87:f2:f2:39:ff:4e:fb:89:7e:35:8d:0c:4a:
d3:3a:5a:a3:2f:12:c8:02:53:2d:12:da:09:9a:14:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:01:1C:4B:72:BA:FB:2E:1E:C2:E3:6D:BE:C9:4C:70:2F:DB:96:47
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:d1:83:85:db:61:84:b2:4b:3d:1f:df:e6:89:ee:62:15:48:
99:00:0e:74:16:4b:71:e3:d9:95:12:61:8b:df:26:da:59:55:
a8:8b:01:fa:8c:c4:d5:a0:f8:f3:20:38:83:a3:92:fb:04:16:
87:82:e0:49:23:a3:41:fa:6b:77:c3:5b:30:f2:22:bf:cc:11:
b6:ca:82:a9:3d:1c:4d:0a:77:c1:65:b8:94:15:e7:fc:09:c3:
ba:b0:b8:6e:a6:76:80:41:37:06:70:4d:a7:6e:4a:d9:4c:29:
f2:5c:0f:8d:41:cf:a0:be:3e:15:0a:f0:1c:95:ab:b0:18:57:
78:2b:50:09:8f:ee:f2:e4:cd:4e:85:52:e4:ca:92:53:be:33:
3b:4e:b7:a0:d7:58:76:fe:75:a6:ac:71:f5:b1:65:65:7d:d0:
ea:02:81:07:10:eb:b2:26:92:63:6a:cf:ca:fd:6f:a2:cd:0e:
47:31:e4:6f:fe:73:0c:53:43:a6:e9:cd:0d:e0:19:31:e4:7a:
4f:5e:e5:c9:7e:c9:ce:1d:01:c7:57:e9:e1:7a:3d:ce:8b:a8:
3a:ed:87:3f:84:8d:1f:eb:cb:39:70:1b:c1:07:18:92:4b:51:
9e:51:34:37:18:e5:2b:5c:ad:bc:1c:65:d4:59:3f:27:23:18:
d0:f3:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:43:17 2025 by rpki-client