Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File: e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier: XgDHLvd62mGO2Uj9Y4piU1bQS+g7VwXtnloQvHAMDRE=
Subject key identifier: 72:83:26:19:AD:D4:B0:4D:AE:13:68:CA:88:02:89:4B:26:3C:22:DD
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer: /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial: 0466
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number: 0466
Signing time: Mon 20 Oct 2025 03:08:59 +0000
Manifest this update: Mon 20 Oct 2025 03:08:58 +0000
Manifest next update: Wed 22 Oct 2025 03:08:58 +0000
Files and hashes: 1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: PA1MMAYAq4l2712dTvqkVbkPyg6ZQzG/axLQ7+DcsI8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Validity
Not Before: Oct 20 03:08:58 2025 GMT
Not After : Oct 22 03:08:58 2025 GMT
Subject: CN=68f5a7ca-0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8f:10:44:a7:83:ab:d0:cf:a7:cb:b3:11:bf:
68:4c:08:e1:39:35:4a:f3:0b:18:a0:12:e5:21:1b:
12:e9:ad:b4:e1:9d:fd:e5:fc:6d:53:e0:8c:7a:05:
8a:fd:47:f7:ab:5a:1a:8d:99:44:03:b1:ba:f8:b4:
9c:c7:5d:d1:b5:0e:36:20:31:32:fe:54:9e:d0:ef:
ee:67:9b:48:5f:df:b7:fa:cc:96:76:a2:cc:93:12:
55:b9:10:3b:71:1e:76:b4:ba:6c:f4:7e:a3:05:02:
71:f3:85:50:b2:40:62:4e:25:fb:a3:e4:b0:86:3a:
61:3a:e3:0d:f1:85:34:97:de:08:4c:da:42:29:64:
16:c1:5c:13:37:14:4b:84:6f:ed:83:d3:ca:27:05:
06:10:0e:54:e1:c5:05:70:e9:bc:f6:32:92:b2:c2:
be:d8:6d:91:16:13:c4:01:83:4f:e7:0a:e7:54:59:
38:b4:bd:cd:73:a9:d5:08:32:d9:90:c1:7f:c3:4c:
83:9b:56:5a:26:48:21:28:12:a3:13:af:db:12:9c:
0f:23:2d:54:7c:d3:05:e3:94:b4:94:f4:8b:26:36:
9f:30:67:1b:6e:59:62:6a:0b:57:de:f9:24:33:70:
c8:69:0c:44:95:ee:75:7e:b6:41:69:6d:90:a9:58:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:83:26:19:AD:D4:B0:4D:AE:13:68:CA:88:02:89:4B:26:3C:22:DD
X509v3 Authority Key Identifier:
keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:e8:ef:f9:3b:8d:2b:4b:5f:9e:78:84:73:a1:48:91:a5:6e:
00:02:07:9b:e3:4d:a6:3a:8e:ea:43:22:fd:92:54:c9:b5:10:
49:7d:f2:e6:0a:b9:6c:88:20:95:62:c7:83:54:b1:02:86:a7:
68:35:a5:45:11:6c:ba:1d:16:32:87:24:e2:f8:66:04:1c:43:
1c:02:7a:cd:80:5a:e6:7a:59:7a:a8:14:e6:86:a0:6c:87:1c:
75:a6:c1:45:b5:78:ed:98:5d:95:09:da:51:37:c8:19:fa:a5:
12:1f:15:ad:1d:1d:cf:98:99:d1:d8:95:5f:d7:00:fd:de:a0:
44:a5:11:03:2c:21:3a:51:e8:b6:8d:28:be:bc:f0:8a:5f:6f:
30:39:64:d0:0f:aa:c0:87:26:8e:3d:cf:e3:95:bb:6a:48:df:
e1:4b:73:e0:c8:b8:97:8f:15:0d:54:54:fd:88:ba:03:b4:00:
78:fa:75:4e:dd:0a:b4:49:fa:1b:c1:98:5d:3a:29:94:7e:a2:
07:ea:bc:c3:e7:b4:57:8d:7d:aa:1b:e6:d6:50:b9:21:43:43:
79:1d:75:d7:02:15:92:64:29:d8:71:46:33:d2:9c:eb:f8:d2:
68:83:c2:c5:0c:72:2e:76:d8:cd:aa:26:ba:53:7d:8d:26:a0:
a8:c7:8b:e6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM4RTVBRjExMC8GA1UEBRMoN0I5NUM4ODc1QTNEQTkyMDdBQURDQzU0NDAzMTcz
OEQ4QTYyMkRBQjAeFw0yNTEwMjAwMzA4NThaFw0yNTEwMjIwMzA4NThaMBgxFjAU
BgNVBAMTDTY4ZjVhN2NhLTBlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWjxBEp4Or0M+ny7MRv2hMCOE5NUrzCxigEuUhGxLprbThnf3l/G1T4Ix6
BYr9R/erWhqNmUQDsbr4tJzHXdG1DjYgMTL+VJ7Q7+5nm0hf37f6zJZ2osyTElW5
EDtxHna0umz0fqMFAnHzhVCyQGJOJfuj5LCGOmE64w3xhTSX3ghM2kIpZBbBXBM3
FEuEb+2D08onBQYQDlThxQVw6bz2MpKywr7YbZEWE8QBg0/nCudUWTi0vc1zqdUI
MtmQwX/DTIObVlomSCEoEqMTr9sSnA8jLVR80wXjlLSU9IsmNp8wZxtuWWJqC1fe
+SQzcMhpDESV7nV+tkFpbZCpWLFNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcoMm
Ga3UsE2uE2jKiAKJSyY8It0wHwYDVR0jBBgwFoAUe5XIh1o9qSB6rcxUQDFzjYpi
LaswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzOEU1L0M4OUY5RTk0NTUzRTExRUQ4RTIyMzBDQUYxMjIyNDY4L2U1WElo
MW85cVNCNnJjeFVRREZ6allwaUxhcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WEloMW85cVNCNnJjeFVRREZ6allwaUxhcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTM4RTUvQzg5RjlFOTQ1NTNFMTFFRDhFMjIzMENBRjEy
MjI0NjgvZTVYSWgxbzlxU0I2cmN4VVFERnpqWXBpTGFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA36O/5O40rS1+eeIRzoUiRpW4AAgeb
402mOo7qQyL9klTJtRBJffLmCrlsiCCVYseDVLEChqdoNaVFEWy6HRYyhyTi+GYE
HEMcAnrNgFrmell6qBTmhqBshxx1psFFtXjtmF2VCdpRN8gZ+qUSHxWtHR3PmJnR
2JVf1wD93qBEpREDLCE6Uei2jSi+vPCKX28wOWTQD6rAhyaOPc/jlbtqSN/hS3Pg
yLiXjxUNVFT9iLoDtAB4+nVO3Qq0SfobwZhdOimUfqIH6rzD57RXjX2qG+bWULkh
Q0N5HXXXAhWSZCnYcUYz0pzr+NJog8LFDHIudtjNqia6U32NJqCox4vm
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:22:26 2025 by rpki-client