Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File: sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier: QV089hODZj1HYKvSRIDL0MJoSqTOLkYDU9rFotZQ+sc=
Subject key identifier: 8F:7B:16:EF:EF:A7:95:55:3F:67:97:64:C3:75:23:AB:38:86:5C:CB
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer: /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial: 84
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number: 84
Signing time: Mon 20 Oct 2025 05:04:11 +0000
Manifest this update: Mon 20 Oct 2025 05:04:10 +0000
Manifest next update: Wed 22 Oct 2025 05:04:10 +0000
Files and hashes: 1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: hUL9Caxu6nhupExZip5aNOSxzYi0lVF1HnVjgRWD6gk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132 (0x84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Validity
Not Before: Oct 20 05:04:10 2025 GMT
Not After : Oct 22 05:04:10 2025 GMT
Subject: CN=68f5c2ca-a3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:7d:ea:e9:34:33:ed:0c:35:4b:b2:f7:92:
16:89:d1:9c:ea:ae:66:b8:4d:59:5e:43:83:59:5e:
9e:64:23:92:f5:5a:a9:79:a9:ae:98:9f:d5:cb:cc:
f6:ca:4c:c9:9c:1c:61:57:c2:74:8b:87:f3:7e:03:
89:c6:4f:75:72:51:18:95:4b:51:fd:22:3c:db:f0:
9c:95:21:d5:02:1d:de:8d:d7:18:7e:c0:57:44:2c:
5b:59:2f:61:67:c3:91:71:97:5e:96:90:c2:a5:d5:
8e:f3:12:06:c6:1f:ee:36:50:45:bc:4c:9f:cb:44:
bc:d1:c7:e5:33:d6:9d:17:d1:14:78:65:40:37:19:
fa:57:2c:63:f6:12:3f:20:e0:8d:c2:2c:3a:3a:cf:
8a:c2:8b:a2:c7:40:6c:21:3e:9a:18:76:94:f8:ec:
ba:e2:ad:53:14:c1:c2:17:2a:af:20:17:7e:ef:c2:
41:11:56:94:95:c7:ff:82:d4:7b:8f:7e:f6:40:4d:
7c:c1:1c:50:68:c2:67:a6:dd:e1:ff:1e:f3:62:f9:
38:af:9f:7b:a2:e2:49:c9:f7:da:b0:6d:c9:66:a8:
3c:c2:26:2b:bc:26:5f:5e:93:4f:30:ca:f1:a9:1e:
eb:3e:37:60:ae:b3:18:68:da:10:38:ce:0b:d0:76:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7B:16:EF:EF:A7:95:55:3F:67:97:64:C3:75:23:AB:38:86:5C:CB
X509v3 Authority Key Identifier:
keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:ea:97:2f:8b:c6:ce:06:0b:4d:f0:b6:0d:9e:8e:91:93:29:
63:ee:8b:c6:0a:c3:cb:79:62:e4:e2:a8:b7:58:7b:bb:7d:1c:
c7:47:77:7a:a6:62:19:5b:89:77:46:d0:76:7b:74:97:6d:0a:
06:cd:d7:a0:34:45:14:71:51:f7:44:05:3d:08:14:17:6f:12:
0c:cc:f7:ab:8a:db:96:68:1b:99:b1:91:09:c1:7d:f4:21:07:
b9:e7:fd:96:e9:c1:22:c0:1c:c0:25:c7:34:0a:32:8b:eb:c9:
88:5f:77:10:98:23:2c:47:e5:b7:f4:b9:c9:b6:7c:ae:cc:d2:
c6:f0:51:4e:a6:6e:36:97:a7:cb:98:d2:f3:11:6a:01:6e:29:
ad:34:f7:b0:11:b5:fc:36:e6:b5:bd:ca:06:ec:00:3b:2b:5b:
f8:b3:58:d5:95:20:ce:54:d1:4c:22:b8:95:32:e9:97:e5:d7:
16:1c:0b:fc:f7:8b:57:18:c5:76:ef:a2:7e:5c:a3:06:d3:6b:
b7:8a:92:b3:aa:69:a9:a7:e6:ac:13:63:37:23:b3:c8:b4:db:
74:ee:f5:87:65:e8:fc:68:1e:8c:b6:3c:7e:0c:95:11:ce:2a:
8d:7d:1f:32:e7:3d:f7:24:e2:c0:8d:b8:a8:f7:75:b8:0f:77:
a0:c2:4f:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0VBMkFBRjExMC8GA1UEBRMoQjBENzYzNkI0NDA4RjBBQzI4QzU5Q0Y1QjkxNjY0
QkQ4MjMxNDA1MDAeFw0yNTEwMjAwNTA0MTBaFw0yNTEwMjIwNTA0MTBaMBgxFjAU
BgNVBAMTDTY4ZjVjMmNhLWEzYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6gX3q6TQz7Qw1S7L3khaJ0Zzqrma4TVleQ4NZXp5kI5L1Wql5qa6Yn9XL
zPbKTMmcHGFXwnSLh/N+A4nGT3VyURiVS1H9Ijzb8JyVIdUCHd6N1xh+wFdELFtZ
L2Fnw5Fxl16WkMKl1Y7zEgbGH+42UEW8TJ/LRLzRx+Uz1p0X0RR4ZUA3GfpXLGP2
Ej8g4I3CLDo6z4rCi6LHQGwhPpoYdpT47LrirVMUwcIXKq8gF37vwkERVpSVx/+C
1HuPfvZATXzBHFBowmem3eH/HvNi+Tivn3ui4knJ99qwbclmqDzCJiu8Jl9ek08w
yvGpHus+N2Cusxho2hA4zgvQdusjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj3sW
7++nlVU/Z5dkw3UjqziGXMswHwYDVR0jBBgwFoAUsNdja0QI8KwoxZz1uRZkvYIx
QFAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNFQTJBLzRDNjY5QjJDNDg0NjExRjA5N0Q4NEFEOURBRTRFQzlDL3NOZGph
MFFJOEt3b3haejF1UlprdllJeFFGQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NOZGphMFFJOEt3b3haejF1UlprdllJeFFGQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0VBMkEvNEM2NjlCMkM0ODQ2MTFGMDk3RDg0QUQ5REFF
NEVDOUMvc05kamEwUUk4S3dveFp6MXVSWmt2WUl4UUZBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAY6pcvi8bOBgtN8LYNno6Rkylj7ovG
CsPLeWLk4qi3WHu7fRzHR3d6pmIZW4l3RtB2e3SXbQoGzdegNEUUcVH3RAU9CBQX
bxIMzPerituWaBuZsZEJwX30IQe55/2W6cEiwBzAJcc0CjKL68mIX3cQmCMsR+W3
9LnJtnyuzNLG8FFOpm42l6fLmNLzEWoBbimtNPewEbX8Nua1vcoG7AA7K1v4s1jV
lSDOVNFMIriVMumX5dcWHAv894tXGMV276J+XKMG02u3ipKzqmmpp+asE2M3I7PI
tNt07vWHZej8aB6Mtjx+DJURziqNfR8y5z33JOLAjbio93W4D3egwk9h
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:12 2025 by rpki-client