
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
File: iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft (raw, json)
Hash identifier: febyMADKkXHcTgKlQ5m/oph3ChkLUQw3Dvg2VIB++KQ=
Subject key identifier: 67:0E:5C:4D:7A:FC:D8:EE:CD:CA:56:0E:4D:0D:71:03:56:21:42:89
Authority key identifier: 88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
Certificate issuer: /CN=F36ED13AAF/serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Certificate serial: 32
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
Manifest number: 32
Signing time: Mon 20 Oct 2025 05:17:00 +0000
Manifest this update: Mon 20 Oct 2025 05:16:59 +0000
Manifest next update: Wed 22 Oct 2025 05:16:59 +0000
Files and hashes: 1: iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl (hash: IRBtG4KXIOQC+ouyojQ243JimTlr9GWZXho41gHzBo4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED13AAF, serialNumber=881D55C4BFCEEB13FCFC0A72E9D0A143691556B5
Validity
Not Before: Oct 20 05:16:59 2025 GMT
Not After : Oct 22 05:16:59 2025 GMT
Subject: CN=68f5c5cc-0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:84:c1:db:e5:e4:c2:4c:05:d7:26:a4:f8:f0:
d6:d3:13:7e:c5:cb:34:c2:64:c5:ac:0b:9e:f6:8c:
9d:2d:b7:d4:87:85:32:60:7b:6b:e1:67:28:df:39:
52:78:fe:e1:1c:ee:ad:84:b0:bd:04:af:48:af:15:
3b:27:b9:5d:09:7e:63:6d:b5:0e:ef:ba:3c:46:28:
d9:0d:17:dd:ae:d7:7a:ad:6e:32:87:73:f0:91:2e:
5b:e6:ce:08:0d:81:b8:33:fc:1a:d8:ab:38:2a:50:
57:26:cd:78:a0:27:f0:77:67:7e:5c:9b:d6:c4:8b:
d0:72:ab:9a:72:c0:78:a3:4f:2a:5e:0d:6e:f6:ec:
69:ed:3f:c7:19:13:91:d3:23:10:7d:c4:18:2e:7b:
bc:cd:40:9d:31:a8:90:32:15:66:da:fd:48:96:16:
0b:f5:9f:23:bf:07:3f:f8:70:b1:89:ab:ca:b7:66:
cd:c9:05:fd:88:04:0f:36:d9:1a:60:97:dc:58:c2:
7d:ca:eb:12:19:1b:6d:e9:ec:8c:02:8e:dc:5f:cc:
0f:43:29:30:4f:54:1b:59:da:c7:b0:f3:d5:20:6d:
7f:00:a9:4f:43:d7:17:b9:dd:21:41:8e:6d:df:a7:
3d:fb:1a:e4:55:6e:49:77:7b:fc:18:06:3e:4e:c4:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:5C:4D:7A:FC:D8:EE:CD:CA:56:0E:4D:0D:71:03:56:21:42:89
X509v3 Authority Key Identifier:
keyid:88:1D:55:C4:BF:CE:EB:13:FC:FC:0A:72:E9:D0:A1:43:69:15:56:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iB1VxL_O6xP8_Apy6dChQ2kVVrU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED13A/413409E486F111F09AE80097DAE4EC9C/iB1VxL_O6xP8_Apy6dChQ2kVVrU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6e:7f:bd:65:0f:9b:e8:0f:81:8f:ae:3b:e3:dd:73:a6:62:
74:7d:17:c6:39:14:12:c9:fc:0d:3b:39:e4:73:c8:59:d2:31:
29:d7:9f:c3:fc:4a:a6:80:de:7e:d3:06:cd:cd:e5:4d:9c:5c:
e6:1f:d7:59:72:bf:d7:4f:c9:ed:a1:81:4b:11:60:c2:e5:be:
fb:d4:75:38:82:d4:95:ba:24:b8:ac:24:65:7e:24:16:ad:d4:
33:a8:b1:c8:7b:5b:55:ae:8b:4f:4b:60:02:fe:47:5d:c2:04:
aa:84:00:9c:36:c0:e1:e5:98:ac:a0:d9:00:e8:a9:48:1f:6d:
c3:a9:c8:fe:c9:21:49:be:72:0e:c5:7a:53:13:d4:8d:e2:04:
78:18:b0:e3:32:56:3e:88:ec:09:d6:26:cd:69:b9:e9:e8:91:
8f:f7:ce:9f:c2:d5:82:b1:52:ab:8c:39:93:ed:37:b8:81:06:
65:c1:2a:be:bf:d4:65:09:be:65:19:90:7d:5c:bc:64:c3:2d:
49:4e:06:47:f0:07:b4:cf:e1:c7:62:86:be:85:bf:01:16:42:
fe:a0:76:bb:26:79:a2:53:55:dc:3c:03:f4:eb:1f:ee:56:ab:
8b:a0:33:bf:d5:0a:bd:31:2c:68:d0:29:6f:e4:8e:9f:85:db:
6a:29:75:51
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBMjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF
RDEzQUFGMTEwLwYDVQQFEyg4ODFENTVDNEJGQ0VFQjEzRkNGQzBBNzJFOUQwQTE0
MzY5MTU1NkI1MB4XDTI1MTAyMDA1MTY1OVoXDTI1MTAyMjA1MTY1OVowGDEWMBQG
A1UEAxMNNjhmNWM1Y2MtMDMzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMuEwdvl5MJMBdcmpPjw1tMTfsXLNMJkxawLnvaMnS231IeFMmB7a+FnKN85
Unj+4RzurYSwvQSvSK8VOye5XQl+Y221Du+6PEYo2Q0X3a7Xeq1uModz8JEuW+bO
CA2BuDP8GtirOCpQVybNeKAn8Hdnflyb1sSL0HKrmnLAeKNPKl4Nbvbsae0/xxkT
kdMjEH3EGC57vM1AnTGokDIVZtr9SJYWC/WfI78HP/hwsYmryrdmzckF/YgEDzbZ
GmCX3FjCfcrrEhkbbensjAKO3F/MD0MpME9UG1nax7Dz1SBtfwCpT0PXF7ndIUGO
bd+nPfsa5FVuSXd7/BgGPk7EtvkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRnDlxN
evzY7s3KVg5NDXEDViFCiTAfBgNVHSMEGDAWgBSIHVXEv87rE/z8CnLp0KFDaRVW
tTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RUQxM0EvNDEzNDA5RTQ4NkYxMTFGMDlBRTgwMDk3REFFNEVDOUMvaUIxVnhM
X082eFA4X0FweTZkQ2hRMmtWVnJVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaUIxVnhMX082eFA4X0FweTZkQ2hRMmtWVnJVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZFRDEzQS80MTM0MDlFNDg2RjExMUYwOUFFODAwOTdEQUU0
RUM5Qy9pQjFWeExfTzZ4UDhfQXB5NmRDaFEya1ZWclUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALxuf71lD5voD4GPrjvj3XOmYnR9F8Y5
FBLJ/A07OeRzyFnSMSnXn8P8SqaA3n7TBs3N5U2cXOYf11lyv9dPye2hgUsRYMLl
vvvUdTiC1JW6JLisJGV+JBat1DOosch7W1Wui09LYAL+R13CBKqEAJw2wOHlmKyg
2QDoqUgfbcOpyP7JIUm+cg7FelMT1I3iBHgYsOMyVj6I7AnWJs1puenokY/3zp/C
1YKxUquMOZPtN7iBBmXBKr6/1GUJvmUZkH1cvGTDLUlOBkfwB7TP4cdihr6FvwEW
Qv6gdrsmeaJTVdw8A/TrH+5Wq4ugM7/VCr0xLGjQKW/kjp+F22opdVE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:51:26 2025 by rpki-client