Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier: rPaulMKHzFgwHQ9bygAk7Mcv+eALgSJ+7blKlWhSp8o=
Subject key identifier: 9C:82:D9:47:C6:45:44:AD:83:79:B2:45:16:6D:62:1B:16:C3:36:30
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer: /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial: 048A
Authority info access: rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number: 0489
Signing time: Sun 19 Oct 2025 03:03:50 +0000
Manifest this update: Sun 19 Oct 2025 03:03:49 +0000
Manifest next update: Tue 21 Oct 2025 03:03:49 +0000
Files and hashes: 1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: ShKUtAsFlmn5ZDqzEPiKvdtAJDABKHVY3qZXIp6z2ZA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 03:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Validity
Not Before: Oct 19 03:03:49 2025 GMT
Not After : Oct 21 03:03:49 2025 GMT
Subject: CN=68f45516-ca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:9c:60:5b:3a:b1:2c:94:b8:d4:2c:2a:73:
d4:0a:e4:5c:87:3d:11:d0:79:71:65:0c:d4:90:0b:
96:da:f0:7c:aa:f1:0c:2b:2a:a3:99:cd:3c:1f:7f:
69:aa:2e:fc:0b:71:3f:e7:3c:2d:2b:3e:d5:3f:72:
64:41:a8:3b:20:dc:1a:26:50:79:f2:15:b0:f4:71:
69:ab:3e:2f:24:f1:b7:be:8e:42:84:06:fb:04:d9:
da:a6:31:6e:19:e9:bf:36:78:2d:a3:eb:78:8c:56:
7d:73:8f:97:57:d7:b8:c3:0b:fe:7f:f7:c5:e8:d4:
c3:2b:76:9b:85:6a:96:0a:af:c6:6b:93:be:f4:45:
e3:f0:88:95:92:05:85:b2:88:21:fd:ea:62:6f:ad:
36:b9:f9:c6:4e:94:f7:e2:4b:05:a1:46:2f:11:0c:
de:a9:b2:a9:ed:98:cb:a3:4b:66:62:bf:88:e0:57:
68:77:29:1f:95:bf:a4:80:94:0b:fa:89:6c:64:6e:
8c:57:8c:30:8c:aa:3b:7b:3f:64:1d:fb:01:0e:f4:
86:de:34:c7:cb:c7:93:39:b1:65:5d:8e:34:7d:e2:
fe:b9:12:2a:c4:0e:83:be:bc:d2:be:41:8d:d3:e1:
20:84:b9:26:0e:11:5f:d8:bb:c3:38:55:a4:7d:7b:
3f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:D9:47:C6:45:44:AD:83:79:B2:45:16:6D:62:1B:16:C3:36:30
X509v3 Authority Key Identifier:
keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:81:81:32:2d:2d:76:81:0e:27:a3:83:c9:87:07:85:4d:7c:
96:b4:dd:68:33:c2:72:2d:9b:df:cd:3b:43:ae:a3:7c:d5:95:
c6:e4:c7:7f:42:ed:82:ec:74:37:7f:82:48:30:40:52:aa:b2:
d1:ca:43:20:16:9d:8f:40:cc:c8:0c:4d:9b:65:fd:bf:1e:54:
e0:aa:03:19:64:c8:2b:83:0f:ff:90:85:39:58:1c:9d:ce:89:
1b:3b:48:b3:6d:15:7b:d8:07:4c:49:8a:6a:41:88:42:ea:a2:
b9:39:e2:85:28:ea:51:f3:c8:b0:d9:31:81:83:5e:94:69:ad:
77:a1:29:3f:08:18:45:26:7e:c4:4a:d1:85:33:f0:c8:36:95:
33:d7:19:d2:e5:58:b1:74:ea:8f:69:7e:1b:37:18:00:ae:99:
09:35:ad:1a:92:56:ae:cb:09:6b:5b:79:ea:6b:7d:2d:0e:92:
4b:e2:ac:78:ef:54:c3:fe:ee:73:02:3e:4c:d4:80:9a:e2:33:
f5:42:3a:37:47:e4:19:f3:f5:34:e0:d5:33:da:bb:10:bd:c3:
2d:11:39:a8:14:25:d8:af:6d:39:67:a7:14:55:8a:10:bc:e2:
cc:f9:0f:01:06:6e:44:f3:03:a7:b2:ef:f6:02:a7:e4:55:ea:
68:89:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:30 2025 by rpki-client