Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier: wCZoyRr8ADGQnTjLowXWCuaVAzXtA/6EoLWkMX6aIT8=
Subject key identifier: 76:24:C8:9E:5B:B0:B8:22:AF:66:D4:98:47:6A:D5:0E:5F:2A:CD:93
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer: /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial: 0991
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number: 0990
Signing time: Mon 20 Oct 2025 01:18:15 +0000
Manifest this update: Mon 20 Oct 2025 01:18:14 +0000
Manifest next update: Wed 22 Oct 2025 01:18:14 +0000
Files and hashes: 1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: eM5tPwQSr3xjrgqIP3GZNivQCOEnxPZnqSPheX9Ll/Q=)
2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2449 (0x991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Validity
Not Before: Oct 20 01:18:14 2025 GMT
Not After : Oct 22 01:18:14 2025 GMT
Subject: CN=68f58dd6-583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:3a:6c:5f:a9:e8:43:83:a3:df:fc:c5:b2:
f4:ac:96:87:83:be:24:58:d9:a9:fb:d8:f2:d2:9d:
1a:f1:6e:33:68:00:8d:6b:bb:a7:03:86:8e:8b:c9:
b9:53:c9:0f:71:4b:de:fc:d8:df:49:fd:f3:e0:21:
e5:69:46:79:b2:9d:01:a9:e9:9f:99:77:fa:1a:84:
59:12:73:c1:1b:f7:73:14:d2:c4:44:8d:60:c1:3d:
e9:6e:be:0c:9c:77:36:06:f3:90:36:a7:4e:34:1c:
55:2b:7a:62:d5:cc:cc:b0:5e:1e:9b:21:ec:b0:48:
43:fa:6b:1b:a0:0e:f4:a5:ba:6a:da:cc:00:24:81:
25:e5:96:a2:3e:f1:96:46:05:81:0d:49:81:c5:6a:
7c:e4:9a:64:a0:39:64:f9:6e:54:4d:20:77:f1:00:
b4:21:5d:74:5c:fa:e5:33:1b:46:6f:5a:6f:eb:aa:
61:79:53:93:b6:ad:9e:c7:46:15:13:0a:d3:1a:24:
67:a9:1c:aa:41:05:09:64:fb:7c:fd:40:1b:53:23:
5a:e4:ab:d2:4d:42:f5:80:2b:4b:81:51:e2:e1:96:
b5:3d:ae:a5:48:26:ef:15:cf:6f:a1:e7:73:5d:da:
c8:95:ad:30:29:25:bc:14:81:dd:f8:c8:a7:3a:a6:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:C8:9E:5B:B0:B8:22:AF:66:D4:98:47:6A:D5:0E:5F:2A:CD:93
X509v3 Authority Key Identifier:
keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5b:e4:16:44:b5:f3:72:df:31:ed:e8:38:29:6d:ed:ad:54:
6d:de:bc:64:96:f1:cf:70:ad:9e:1c:f1:de:5f:25:bb:95:79:
f6:8f:1a:2d:02:a1:55:97:fa:98:29:25:5f:9d:92:cb:5f:ef:
cd:01:2f:d7:57:d5:a1:e1:95:52:f9:ab:70:52:bf:6c:0c:6b:
c7:1f:3d:a2:1b:a9:34:72:ed:c8:71:74:59:cb:6a:c1:3f:19:
ab:f1:7e:53:3b:2c:70:45:8e:32:a4:ae:30:f1:7d:a6:55:48:
d1:97:7d:e4:2e:2c:71:f4:a3:b7:12:92:a9:c8:fd:ae:6e:00:
83:99:d5:6a:ce:dd:44:77:ef:ca:d4:58:0c:b3:f1:d4:5c:9f:
af:28:27:15:24:49:ca:f1:ac:77:51:5c:f6:b5:3e:df:9a:b4:
71:94:5c:ec:52:bf:b5:5e:30:72:0b:b5:70:8a:8d:75:38:f1:
c1:8a:12:a8:01:5c:94:a8:3e:7b:4a:dc:b5:9b:69:9f:5e:d9:
f2:e9:15:23:73:49:89:df:79:49:02:d1:cb:15:77:b7:fc:89:
6a:0a:7a:da:c9:df:5a:70:f2:59:13:99:24:e2:88:b0:de:20:
e7:87:3e:7c:e6:ce:0e:a6:10:93:f7:a6:8f:65:b6:7c:6f:fb:
9f:06:40:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:24 2025 by rpki-client