
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File: ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier: 96F7cD4epHERjwUqNkNzd3cCPUfPUGs3/fiqihGgisk=
Subject key identifier: A3:6A:76:34:A5:71:CF:65:ED:C4:CE:11:29:84:7F:52:CA:E8:A7:07
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer: /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial: 01BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number: 01BC
Signing time: Sun 19 Oct 2025 04:29:16 +0000
Manifest this update: Sun 19 Oct 2025 04:29:15 +0000
Manifest next update: Tue 21 Oct 2025 04:29:15 +0000
Files and hashes: 1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: e6PVnlYqjWWDK56oUigHKkrG8KpjoPb/LD6ugfHyIQk=)
2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 04:29:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Validity
Not Before: Oct 19 04:29:15 2025 GMT
Not After : Oct 21 04:29:15 2025 GMT
Subject: CN=68f4691b-fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:10:3e:15:b3:9d:30:34:7c:0f:94:59:14:
15:30:a6:82:37:c7:c7:d5:6b:56:1d:65:0e:f9:4f:
7e:13:28:d3:67:0b:01:91:43:bf:ee:0d:6d:e8:fd:
f2:f2:e2:52:f0:e9:c3:a6:0b:36:97:59:eb:4f:83:
f2:76:3e:59:e0:2d:de:b5:2d:60:57:03:d5:d1:40:
c1:4d:b5:e0:4f:0c:35:0a:12:19:ce:41:a1:8c:88:
0f:de:6e:97:de:2b:dc:70:69:3e:6c:dd:8a:65:3d:
be:f6:2a:33:b1:06:3c:94:ac:3e:76:7c:e1:0f:95:
68:9e:b4:4c:44:b4:8e:30:b4:b5:1b:b3:98:e3:33:
3c:a4:d0:9f:48:a9:84:e4:30:71:b2:a5:0b:09:9d:
e6:e5:3e:8e:51:d9:b7:57:98:44:53:c5:38:c8:ae:
58:84:33:51:b6:97:3d:05:9c:60:68:f5:85:4f:31:
e8:21:8c:54:60:93:89:7c:91:0e:e7:3e:8a:f1:56:
84:7c:c0:e9:f0:e1:cc:28:56:1d:5b:db:b2:2c:8e:
c2:dc:88:0e:8e:89:51:a2:3d:b2:49:3e:c8:3d:bc:
ee:32:e8:d6:14:c2:71:bc:b8:01:2b:91:32:21:cf:
4a:bf:c4:f0:ff:cf:d5:c6:6d:b3:2c:ce:5b:53:52:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6A:76:34:A5:71:CF:65:ED:C4:CE:11:29:84:7F:52:CA:E8:A7:07
X509v3 Authority Key Identifier:
keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:54:e2:e5:d1:3f:b0:35:e5:00:38:6a:ce:cc:57:c9:d1:4e:
bd:58:6b:e3:93:4b:37:40:8c:e4:46:be:7d:ab:58:36:20:b0:
41:5a:f1:57:1e:64:7d:42:9f:01:53:3b:d2:1e:e7:67:fe:76:
75:b8:fd:a1:c8:25:51:56:8f:84:d9:17:b4:26:4f:21:87:f0:
0d:f5:7c:fd:e3:d2:e7:28:b2:3a:da:51:16:f6:03:19:fa:64:
45:25:6c:71:a3:0c:37:5f:79:1d:05:65:06:38:de:ec:60:92:
0d:53:84:0b:28:ce:2f:a4:50:66:6e:9c:1d:98:30:46:16:10:
dd:5f:77:cb:bb:12:f9:26:63:a5:a6:aa:ee:d9:9a:d5:e0:39:
b1:3b:c6:71:33:14:a9:68:69:d7:5b:da:b0:5a:c4:dd:35:03:
39:53:6c:e0:7b:dd:f6:99:ba:30:f9:0c:1f:0f:d8:b5:77:7b:
a6:0b:c8:8d:12:0f:bf:1f:3b:a6:88:a9:de:8c:70:d8:9b:e0:
56:06:22:23:a1:5e:40:4e:26:2e:9b:2a:79:3a:b3:e6:0a:1c:
0b:89:32:d8:d5:13:be:11:75:61:d4:1d:54:22:32:0b:e4:0e:
aa:47:86:10:7a:f2:65:e1:87:9e:39:ee:6f:22:5b:b4:08:6c:
cc:50:56:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:47 2025 by rpki-client