Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File: aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier: PeuPl3Xgg8t1v5OkB3QNpTjQdYJNahw5n9Qe99VhX0I=
Subject key identifier: F7:09:8F:6E:28:18:1A:52:6F:9F:E8:08:97:A5:AE:82:F8:F5:FC:F7
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer: /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial: 01AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number: 01AE
Signing time: Mon 20 Oct 2025 04:34:32 +0000
Manifest this update: Mon 20 Oct 2025 04:34:31 +0000
Manifest next update: Wed 22 Oct 2025 04:34:31 +0000
Files and hashes: 1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: zxF/8MgT2ZN+77jO2bIjePOWKvWrta0aNISFe+hFQf8=)
2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Validity
Not Before: Oct 20 04:34:31 2025 GMT
Not After : Oct 22 04:34:31 2025 GMT
Subject: CN=68f5bbd7-f57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dd:84:65:fa:07:99:bb:95:7e:8a:b4:20:04:
7a:33:cd:53:45:b7:ba:a0:b2:4d:f2:67:87:b3:3f:
76:34:9f:c5:65:18:b5:3d:66:e7:76:eb:b6:0b:e8:
6a:38:4a:58:79:f8:52:00:92:a0:d2:c6:2f:2f:34:
2b:9d:04:f9:1a:9a:87:53:f0:e3:2f:8c:35:58:36:
a6:d9:bc:3d:d1:db:09:c6:80:4f:0b:82:59:27:cc:
f2:d2:2f:0d:13:64:f6:b5:8c:03:ce:b0:25:82:6d:
3e:d7:a9:73:ed:fb:84:11:43:93:21:dd:1c:18:d3:
ed:17:d4:9c:d1:26:3b:29:ff:cf:8f:cb:2a:36:31:
80:b2:48:b1:81:8d:9b:28:b7:95:31:04:c3:7d:a6:
4d:20:ad:0d:29:5a:d3:78:af:0e:5f:7f:28:22:29:
dd:41:ad:b4:15:05:d1:59:1b:5e:b2:68:e2:4a:cc:
9f:83:dc:bc:6f:00:81:6d:d0:04:c4:70:2f:94:30:
08:7c:55:eb:11:b5:8b:2c:90:d9:e6:8e:19:d2:8a:
63:4f:41:58:4a:26:41:4f:d0:3f:db:e6:5b:b9:d0:
35:7d:8f:35:91:65:92:2b:a2:f2:76:db:60:23:ed:
53:94:c6:b1:bb:48:05:f5:63:c3:ab:f6:c9:fe:ec:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:09:8F:6E:28:18:1A:52:6F:9F:E8:08:97:A5:AE:82:F8:F5:FC:F7
X509v3 Authority Key Identifier:
keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:b4:21:16:7d:33:bf:d6:5a:f7:d4:24:28:10:a4:71:82:3a:
7d:3f:39:18:62:89:fb:b9:d4:bb:98:b9:d1:66:24:2b:16:01:
fb:cc:c6:9a:56:aa:47:f8:1e:66:8e:7b:74:aa:5f:a4:61:a9:
86:d0:e2:6b:df:1f:44:59:68:0a:8d:3e:bc:00:57:08:9e:42:
fc:33:3d:e0:f3:1e:af:3d:57:f1:42:a0:65:8a:d6:fd:fc:53:
16:32:f2:a6:4e:28:6a:0b:f4:8a:0b:9f:6d:90:88:32:d4:86:
e8:c5:51:93:12:a3:88:2a:b9:1a:53:20:35:1f:ff:d4:0a:c0:
34:90:b4:ee:a1:ba:e8:c2:bd:62:9b:95:d5:cd:d7:62:c1:35:
0c:32:c3:1a:b0:66:d9:97:ee:1f:fc:79:20:10:75:d5:68:b1:
66:8c:19:ba:00:04:ff:10:06:e9:96:3e:e2:c9:58:59:15:16:
7b:4a:50:b4:b6:1f:74:8c:44:33:7e:5b:90:8e:0f:bc:2f:08:
31:72:37:49:76:2b:ca:fe:f7:8f:fa:46:9e:8a:11:a0:10:9e:
f3:2e:59:52:04:66:15:22:9c:65:14:76:f2:13:0e:e6:f3:7a:
4b:24:7d:4d:32:8b:24:04:9b:47:2d:9b:e8:9c:a4:7a:5e:0d:
81:cd:96:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:32 2025 by rpki-client