Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: aMroO75bhvY3jDKm+01MIwRSzLcd6I8X32mD4uX7avE=
Subject key identifier: BE:71:FA:B5:17:28:DF:8C:45:8C:88:6D:8E:70:7E:9D:90:7D:F9:56
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 03F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 03F7
Signing time: Sun 19 Oct 2025 03:18:11 +0000
Manifest this update: Sun 19 Oct 2025 03:18:11 +0000
Manifest next update: Tue 21 Oct 2025 03:18:11 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: EhA4/5cKcmndST9uqftpMX55UBMBi+cvVz3c/tIwfYQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Oct 19 03:18:11 2025 GMT
Not After : Oct 21 03:18:11 2025 GMT
Subject: CN=68f45873-3d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:1c:83:b6:9b:47:e8:7d:d3:a0:f6:91:8d:
af:fa:82:4e:4f:37:bb:9c:3e:f5:55:20:ac:df:63:
fa:38:50:cf:44:63:09:ef:d9:f3:c1:1b:47:e4:9e:
dd:1a:65:bb:9a:a9:01:0d:e6:12:a5:f2:77:ef:2d:
40:78:99:b9:ac:ff:8b:84:a8:2e:ba:b8:45:9b:84:
fb:91:c8:64:5f:75:25:b8:84:7f:90:8d:70:a3:8d:
a0:3f:0c:c7:62:39:89:8c:da:6a:6e:ea:3f:0a:83:
86:0c:71:4b:b0:7c:42:53:9b:c6:28:fe:2b:fd:84:
c2:80:e5:55:71:7f:8c:ab:22:e6:99:8b:37:96:ce:
14:99:fc:ac:28:3d:61:ee:15:60:0b:a9:5d:db:2d:
d3:a3:2f:7a:03:89:03:87:0d:86:c0:12:7c:a6:ff:
2a:7f:55:b6:1b:4a:89:e4:3d:d7:4f:13:bb:fb:bc:
51:e4:c2:0e:f2:99:4a:d0:d9:2e:e4:d0:11:07:72:
96:b9:7c:e8:c5:28:bb:f0:fb:21:0c:4a:0e:58:13:
ee:ee:87:76:90:d6:11:b4:a0:66:7f:6d:39:01:b8:
fc:e2:64:62:ad:03:30:c0:42:f6:32:1f:ce:23:f8:
62:24:3d:ac:af:23:82:49:51:42:18:3d:c7:ef:75:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:FA:B5:17:28:DF:8C:45:8C:88:6D:8E:70:7E:9D:90:7D:F9:56
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:dd:c2:fb:68:da:39:f7:de:68:3d:10:22:85:6d:94:dc:13:
b8:59:8a:cb:0c:a7:72:c4:5f:31:3d:55:f4:b7:88:85:bf:6e:
c9:f3:46:41:f0:51:e5:6a:ab:83:7f:1c:9d:23:69:e1:4b:da:
ae:c2:87:ec:9d:09:55:87:34:ee:4c:dc:fb:86:f9:d8:e7:6a:
2c:d9:56:02:ad:da:53:bf:e1:87:23:1c:6a:a7:2f:11:ef:98:
3a:9d:b3:20:7e:e1:a6:92:95:84:b4:a6:33:df:c5:46:35:df:
26:fd:c6:7e:98:f7:97:6c:92:e1:2e:7a:b9:87:3b:f3:e9:43:
9f:8b:02:75:f6:ec:dc:d0:52:b2:58:4a:8c:9d:a5:34:47:f1:
91:53:9e:3f:99:43:2a:be:ce:ad:37:32:44:c7:c3:bf:95:af:
42:a2:5f:b7:0d:2a:5a:f8:4d:cd:77:e2:4d:f8:70:6e:a8:14:
00:b6:a5:f3:99:a2:07:fb:d5:51:05:00:cb:32:95:0b:39:1b:
a3:5f:6f:21:95:cc:30:e9:80:30:a7:5a:8d:9b:99:dc:23:dd:
e0:10:4d:2d:74:1c:11:4b:fb:70:28:7c:a2:fc:3c:a6:63:e9:
bc:13:7d:a1:10:f9:f3:b9:b2:07:43:af:f7:83:84:c5:3e:fa:
82:5b:a1:c6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhEMzBBRjExMC8GA1UEBRMoODY5NjQ0NDg3NzVCMkY4Rjg2MzU5RDU0MTY4RTIy
MEMxRTg3MUJGNTAeFw0yNTEwMTkwMzE4MTFaFw0yNTEwMjEwMzE4MTFaMBgxFjAU
BgNVBAMTDTY4ZjQ1ODczLTNkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRgByDtptH6H3ToPaRja/6gk5PN7ucPvVVIKzfY/o4UM9EYwnv2fPBG0fk
nt0aZbuaqQEN5hKl8nfvLUB4mbms/4uEqC66uEWbhPuRyGRfdSW4hH+QjXCjjaA/
DMdiOYmM2mpu6j8Kg4YMcUuwfEJTm8Yo/iv9hMKA5VVxf4yrIuaZizeWzhSZ/Kwo
PWHuFWALqV3bLdOjL3oDiQOHDYbAEnym/yp/VbYbSonkPddPE7v7vFHkwg7ymUrQ
2S7k0BEHcpa5fOjFKLvw+yEMSg5YE+7uh3aQ1hG0oGZ/bTkBuPziZGKtAzDAQvYy
H84j+GIkPayvI4JJUUIYPcfvdaXpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvnH6
tRco34xFjIhtjnB+nZB9+VYwHwYDVR0jBBgwFoAUhpZESHdbL4+GNZ1UFo4iDB6H
G/UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4RDMwLzU2OTdENDRDQTZCMDExRUQ4NDdCMzc5REYxMjIyNDY4L2hwWkVT
SGRiTDQtR05aMVVGbzRpREI2SEdfVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hwWkVTSGRiTDQtR05aMVVGbzRpREI2SEdfVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhEMzAvNTY5N0Q0NENBNkIwMTFFRDg0N0IzNzlERjEy
MjI0NjgvaHBaRVNIZGJMNC1HTloxVUZvNGlEQjZIR19VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBw3cL7aNo5995oPRAihW2U3BO4WYrL
DKdyxF8xPVX0t4iFv27J80ZB8FHlaquDfxydI2nhS9quwofsnQlVhzTuTNz7hvnY
52os2VYCrdpTv+GHIxxqpy8R75g6nbMgfuGmkpWEtKYz38VGNd8m/cZ+mPeXbJLh
Lnq5hzvz6UOfiwJ19uzc0FKyWEqMnaU0R/GRU54/mUMqvs6tNzJEx8O/la9Col+3
DSpa+E3Nd+JN+HBuqBQAtqXzmaIH+9VRBQDLMpULORujX28hlcww6YAwp1qNm5nc
I93gEE0tdBwRS/twKHyi/DymY+m8E32hEPnzubIHQ6/3g4TFPvqCW6HG
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:42 2025 by rpki-client