Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File: tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier: +jES54cj42zsv/ufRBjSfEWiqusAGpHvuVe+Mhexdtk=
Subject key identifier: 12:0B:9F:EB:55:F3:22:73:E3:53:42:26:A2:0A:B2:7C:E0:4C:8B:54
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer: /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial: 01DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number: 01DE
Signing time: Mon 20 Oct 2025 04:25:17 +0000
Manifest this update: Mon 20 Oct 2025 04:25:16 +0000
Manifest next update: Wed 22 Oct 2025 04:25:16 +0000
Files and hashes: 1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: 24qEVUYYbeAfWOnjDXUP7GquSv4tlOd2L8jRuFtinrg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Validity
Not Before: Oct 20 04:25:16 2025 GMT
Not After : Oct 22 04:25:16 2025 GMT
Subject: CN=68f5b9ac-348a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:3d:db:8f:1f:49:f9:3d:fa:7a:59:94:2d:
b6:16:90:97:72:bc:3b:25:9d:a7:e0:5e:98:65:93:
f4:c8:9c:17:16:9d:de:e4:49:c7:92:53:5a:b5:a2:
82:08:01:54:7e:85:8a:84:ef:19:25:3d:8b:1c:87:
8f:68:5c:89:54:b8:a4:84:63:21:a0:cd:7b:12:76:
b3:49:19:01:53:45:c8:1e:a9:67:c5:9d:e2:9a:16:
73:b1:24:49:2e:0a:70:10:3e:65:9a:6e:53:12:fe:
59:fe:5b:ac:31:84:f6:a9:64:e9:9a:21:a9:3c:9b:
8e:54:c1:b2:d7:0c:e2:11:72:e2:48:bd:15:a9:14:
65:cc:d2:31:92:9b:8a:7b:61:55:45:d1:ca:0f:21:
5d:e4:50:a5:0b:78:66:ac:bd:2a:78:21:3e:c4:2a:
bd:af:92:8a:69:f3:8d:37:0a:e3:ad:80:26:58:6f:
bd:1f:61:01:b8:3b:da:39:92:b5:f4:7f:83:3b:d4:
94:64:b8:c4:8d:9d:6c:6b:e8:95:03:3e:21:51:a4:
4a:90:5f:df:8d:f2:ef:9d:9d:13:01:b5:f8:46:99:
7e:a6:2f:58:8e:17:d2:4c:89:56:b5:13:fa:d7:bc:
84:cc:c0:7c:e1:c9:7f:a6:93:c9:af:d1:f7:aa:e9:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:9F:EB:55:F3:22:73:E3:53:42:26:A2:0A:B2:7C:E0:4C:8B:54
X509v3 Authority Key Identifier:
keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d4:6d:77:52:46:d3:42:15:bb:61:52:74:d1:79:72:6b:9e:61:
e4:57:95:bd:f2:5e:11:c6:ba:fa:4f:21:22:0e:ba:e4:dd:75:
3a:7d:98:d8:d8:40:a7:71:b0:51:dd:ea:ba:08:0e:5a:e7:41:
a8:ee:c1:b3:9c:58:04:83:b2:10:62:ea:9f:8b:67:d9:46:cf:
fc:30:62:c5:a7:81:f6:9c:d3:f1:7a:bc:48:38:d9:aa:ca:dd:
da:e5:a5:f1:e2:09:90:e5:9d:ac:3f:13:74:f3:ea:64:aa:78:
e2:83:95:3e:72:75:5e:0c:7b:c0:f3:ad:9b:d5:f3:36:6f:5b:
91:e1:56:f4:80:ad:be:80:b8:48:99:2c:ed:4a:57:58:89:1f:
f5:73:c4:c5:d9:5c:11:a5:22:f5:a5:1e:fb:c8:84:61:a0:c2:
8f:a5:12:11:20:18:59:78:f5:0a:31:92:61:4c:62:ac:6a:7c:
5c:3d:69:7a:14:0e:73:fe:b0:3a:51:58:b8:7d:d9:46:ce:35:
8b:80:27:dd:ac:12:24:3f:2b:85:0a:ad:7f:b5:aa:76:f7:d5:
34:8d:3b:0d:fa:03:4d:07:8c:dd:6e:4c:5e:9d:c3:98:4e:63:
8d:77:46:76:1c:cb:1d:64:b9:25:43:ee:bd:7f:c8:63:11:7d:
eb:19:5e:93
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDI2QTFBRjExMC8GA1UEBRMoQjRDMDFDNEQ2MUU4MDU5MDA1REFFQTRDNjc3QTE2
RTQ0NDdENTUyQzAeFw0yNTEwMjAwNDI1MTZaFw0yNTEwMjIwNDI1MTZaMBgxFjAU
BgNVBAMTDTY4ZjViOWFjLTM0OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAZz3bjx9J+T36elmULbYWkJdyvDslnafgXphlk/TInBcWnd7kSceSU1q1
ooIIAVR+hYqE7xklPYsch49oXIlUuKSEYyGgzXsSdrNJGQFTRcgeqWfFneKaFnOx
JEkuCnAQPmWablMS/ln+W6wxhPapZOmaIak8m45UwbLXDOIRcuJIvRWpFGXM0jGS
m4p7YVVF0coPIV3kUKULeGasvSp4IT7EKr2vkopp8403CuOtgCZYb70fYQG4O9o5
krX0f4M71JRkuMSNnWxr6JUDPiFRpEqQX9+N8u+dnRMBtfhGmX6mL1iOF9JMiVa1
E/rXvITMwHzhyX+mk8mv0feq6TB1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEguf
61XzInPjU0ImogqyfOBMi1QwHwYDVR0jBBgwFoAUtMAcTWHoBZAF2upMZ3oW5ER9
VSwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQyNkExLzlCRkRFMUJBM0VBRTExRUY4RUUyQzE1RTc2MkU5NTFBL3RNQWNU
V0hvQlpBRjJ1cE1aM29XNUVSOVZTdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RNQWNUV0hvQlpBRjJ1cE1aM29XNUVSOVZTdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDI2QTEvOUJGREUxQkEzRUFFMTFFRjhFRTJDMTVFNzYy
RTk1MUEvdE1BY1RXSG9CWkFGMnVwTVozb1c1RVI5VlN3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDUbXdSRtNCFbthUnTReXJrnmHkV5W9
8l4Rxrr6TyEiDrrk3XU6fZjY2ECncbBR3eq6CA5a50Go7sGznFgEg7IQYuqfi2fZ
Rs/8MGLFp4H2nNPxerxIONmqyt3a5aXx4gmQ5Z2sPxN08+pkqnjig5U+cnVeDHvA
862b1fM2b1uR4Vb0gK2+gLhImSztSldYiR/1c8TF2VwRpSL1pR77yIRhoMKPpRIR
IBhZePUKMZJhTGKsanxcPWl6FA5z/rA6UVi4fdlGzjWLgCfdrBIkPyuFCq1/tap2
99U0jTsN+gNNB4zdbkxencOYTmONd0Z2HMsdZLklQ+69f8hjEX3rGV6T
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:28:48 2025 by rpki-client