
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: w5Olj583+HI5nSjzX+/AMxYuPMlrxv56uknh5kggqE4=
Subject key identifier: 0C:1F:B2:98:E6:DB:B0:AF:AB:99:0C:3A:F3:60:72:4A:07:D1:53:E6
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 095A
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 0959
Signing time: Mon 20 Oct 2025 01:24:59 +0000
Manifest this update: Mon 20 Oct 2025 01:24:58 +0000
Manifest next update: Wed 22 Oct 2025 01:24:58 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 9Vnjmx/cdfvgeHymM30QY8H8JdXl3Lgq/esfh5bzOcc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Oct 20 01:24:58 2025 GMT
Not After : Oct 22 01:24:58 2025 GMT
Subject: CN=68f58f6b-9028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:6c:a8:b4:68:42:d2:b2:80:d1:b7:83:4f:
bc:f9:c7:f4:f8:f6:39:0d:d2:f1:1c:f5:3f:62:61:
fe:e8:b5:05:bd:b1:a6:40:4b:9d:8a:87:e6:07:93:
56:7d:bc:5a:b6:b3:d1:c7:d6:2b:12:3b:08:d0:61:
62:0d:e6:8e:cb:10:1d:8f:20:8f:f4:b7:19:a9:bc:
97:d3:98:49:44:c9:9b:5a:88:4a:31:fc:73:0b:1d:
cf:ac:6a:6b:3d:97:9f:b7:79:59:14:57:c7:76:7d:
dd:32:7d:e0:8c:d9:31:d5:ae:59:28:fd:dd:75:b1:
57:3b:32:00:ff:74:f5:7c:3c:1d:2b:b8:c9:b9:33:
b0:ae:78:dd:c8:4d:65:eb:75:1b:08:ed:2d:74:da:
5d:59:27:7e:52:47:3e:e0:c6:fe:ae:55:74:99:00:
7a:8e:86:83:3f:94:ac:d8:b8:72:49:0b:a9:22:89:
70:24:6d:5a:e8:94:15:fc:5a:79:c5:41:0d:c5:9a:
21:66:09:78:3d:21:c4:9f:b4:e9:98:0a:42:e0:c3:
2f:0d:8d:01:76:1e:d2:54:a5:f7:47:5e:b9:0c:ec:
60:88:ed:72:eb:8f:8c:4f:bc:5d:af:60:7f:4a:f2:
cc:b5:da:4b:94:ad:3c:45:b8:e1:74:4d:0e:bb:78:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1F:B2:98:E6:DB:B0:AF:AB:99:0C:3A:F3:60:72:4A:07:D1:53:E6
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:55:12:bd:cd:ad:74:07:7d:05:98:1a:ad:b5:ed:a3:1d:6b:
f6:8e:1f:5b:fe:7f:de:86:c2:c8:87:03:3f:c1:9c:19:66:a2:
94:60:29:2c:de:e1:01:01:f3:0c:3f:8d:4e:b3:de:43:ed:a6:
df:4b:9f:7f:9e:9b:0c:ba:0d:d8:11:38:82:fc:8d:13:24:57:
66:c2:72:e3:14:96:c3:e1:68:29:8c:ad:1b:25:a1:a6:70:5b:
8d:31:9a:b2:46:2b:bb:a1:94:5b:89:bc:0c:4b:40:9d:bb:8b:
ea:d0:43:bb:2c:06:5f:ce:0d:47:96:0f:1c:3f:81:9a:a8:fd:
ed:d8:2e:18:4e:97:72:19:5d:ef:54:31:0a:03:e8:9d:cd:ae:
91:3f:85:78:5b:d8:88:18:7e:69:6a:38:a2:3e:d5:2d:28:95:
7e:30:22:1f:80:e2:c8:4f:b4:f7:3e:2d:83:7c:12:de:68:0f:
72:e3:bd:4d:9e:2c:f1:cf:e5:29:24:93:a2:fc:1b:82:cb:d6:
ba:87:e1:9a:fc:bc:8a:ad:7b:c8:e4:f4:07:e5:9a:84:30:c4:
8c:ab:ab:66:19:b6:8b:3c:6b:04:18:12:72:5a:de:40:89:f5:
31:0f:1c:af:ee:36:70:eb:ae:e4:2f:4b:3f:28:1d:fa:2a:5e:
a0:f0:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:34:27 2025 by rpki-client