Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: T+3XBUp6OoipVDA99GWNDksdGyc9FvEMlmIUAoYJ6Wo=
Subject key identifier: FF:E5:6D:62:22:04:94:3B:C2:AC:0E:C3:F1:88:48:A8:CB:63:FD:D7
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0EE5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0EE4
Signing time: Mon 20 Oct 2025 00:52:53 +0000
Manifest this update: Mon 20 Oct 2025 00:52:52 +0000
Manifest next update: Wed 22 Oct 2025 00:52:52 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: c3mQTxoTORMBIgfvs9DW770479RJQroFnxbLXaV0yo8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3813 (0xee5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Oct 20 00:52:52 2025 GMT
Not After : Oct 22 00:52:52 2025 GMT
Subject: CN=68f587e4-9346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:b8:ed:4e:96:f4:37:73:0a:60:ba:3f:0b:
7d:1d:3b:11:00:01:7c:13:f3:67:e0:1e:c6:c0:f3:
54:93:ff:af:16:fa:f1:8c:b5:6e:c7:99:42:7d:5b:
e2:59:8f:0c:42:0e:c8:ca:bf:6a:36:8f:cf:65:b4:
3a:d9:d9:98:34:76:06:b1:ef:5c:5d:27:0d:24:8c:
62:20:28:e6:d1:60:ee:80:a9:99:e0:64:ce:e0:c5:
64:57:a6:c0:0a:c2:38:89:a5:f4:77:55:ae:56:f2:
10:8e:2b:4c:e2:d7:c9:19:e3:cb:de:05:65:f9:89:
54:2a:b0:0b:e7:24:51:00:91:8e:72:89:0a:0c:d9:
c1:f9:df:1c:bf:c4:f1:9a:a1:e8:cb:88:5b:da:40:
ca:f1:fe:ee:1a:da:61:00:6c:5e:b9:b4:63:dc:d1:
d8:fb:1c:1c:02:c7:a1:0e:07:75:13:77:92:dd:e6:
9e:64:0d:85:b7:30:51:c3:8d:72:9d:24:c6:57:45:
b6:d8:33:6a:bf:96:51:4e:a2:d0:25:6d:82:38:55:
36:82:48:b0:f7:01:81:6f:9c:b5:83:80:57:fb:24:
cb:e2:df:ac:e2:00:22:fc:6d:c1:ca:be:bb:7b:f1:
c0:b9:00:96:46:8b:01:05:7e:3e:43:1b:73:7a:8a:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E5:6D:62:22:04:94:3B:C2:AC:0E:C3:F1:88:48:A8:CB:63:FD:D7
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:27:24:e0:f8:c0:38:72:91:f5:98:d2:f0:f2:fd:aa:f2:3a:
be:23:9c:41:f9:1f:bf:5a:5d:62:f3:26:b3:53:a0:bf:c9:a2:
36:1c:5e:26:13:78:6f:f8:17:06:0b:0a:94:4c:6b:33:40:4e:
7d:d3:b7:96:96:fb:08:1d:ea:53:ab:eb:02:15:65:3e:ae:d4:
1f:3f:bf:b6:7f:bf:9d:4a:0d:fa:b6:3f:2d:e3:79:4c:41:96:
ae:94:35:34:22:b0:6c:e8:f0:6b:d3:7a:c6:38:06:6c:12:eb:
4b:09:45:73:8d:8c:bf:71:1d:cc:c9:6c:ec:d3:94:db:8b:6b:
20:9f:a4:fb:c3:42:7b:21:95:da:7b:f6:d7:4b:d7:18:77:1c:
09:30:d6:cd:1f:e2:56:d7:b8:9a:5c:24:1e:e0:de:cb:4f:ba:
dd:80:8a:b6:5f:f4:0d:5c:02:3e:ec:28:b9:04:95:40:12:3f:
dc:e6:e8:5d:ab:b7:d6:bf:ba:23:a7:20:f8:21:fc:05:50:d5:
aa:e4:db:99:a7:e9:fa:ca:16:fc:c8:96:62:81:38:b1:da:4e:
55:1c:b2:53:c1:0a:b9:af:0f:03:34:8d:65:d8:d9:6d:00:be:
48:eb:bc:ec:b7:a3:bb:58:f8:24:f6:44:b1:ab:fa:d4:d0:1b:
85:5a:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:35:23 2025 by rpki-client