Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
File: BzRbRCXqohbQO3DogD88w6vhdRw.mft (raw, json)
Hash identifier: TEFVP4cuzeMDkqV6koP6s6Ce1JIB9cbRy1fo99l/4js=
Subject key identifier: 96:31:62:C3:31:72:93:B0:C4:99:8A:4E:FF:BA:1D:0F:2D:9E:3D:6F
Authority key identifier: 07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
Certificate issuer: /CN=F36145DBAF/serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Certificate serial: 03DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
Manifest number: 03DC
Signing time: Wed 05 Nov 2025 03:34:07 +0000
Manifest this update: Wed 05 Nov 2025 03:34:07 +0000
Manifest next update: Fri 07 Nov 2025 03:34:07 +0000
Files and hashes: 1: BzRbRCXqohbQO3DogD88w6vhdRw.crl (hash: f7jo02Nq2fh6LWBARIy0SJzxxvp6WgA8fojuRshyGDU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 990 (0x3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36145DBAF, serialNumber=07345B4425EAA216D03B70E8803F3CC3ABE1751C
Validity
Not Before: Nov 5 03:34:07 2025 GMT
Not After : Nov 7 03:34:07 2025 GMT
Subject: CN=690ac5af-6db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:cc:5a:cb:cb:e9:c8:eb:47:7d:f7:de:e9:
89:84:fb:b6:1c:91:c2:6b:79:7e:39:75:41:39:2c:
83:7a:bc:d1:3b:38:ed:52:db:e1:2c:ff:a0:e0:de:
e0:8f:39:03:79:5a:18:b0:e9:77:d1:71:1e:95:13:
5f:ee:14:07:d4:39:b0:1d:c1:f6:2a:65:01:dc:1d:
83:31:b5:7e:aa:70:d8:63:56:2e:f6:70:7c:6f:d2:
8c:d8:07:43:cb:2c:aa:e0:dc:a4:23:30:46:a5:ee:
01:1e:8a:86:5a:5b:3c:d0:5c:a1:28:c8:e0:27:07:
0f:d1:49:a6:58:45:41:e6:9e:ae:7d:b5:ce:94:e9:
6d:5f:0b:93:f2:d3:a6:bd:21:b0:18:b5:08:7c:23:
12:7e:83:14:4b:ce:fb:c2:0a:78:f5:c2:8f:94:1a:
5b:88:6f:cd:36:92:7a:6b:5a:61:aa:87:3e:26:52:
2b:60:8b:92:58:4f:76:ca:ac:77:79:0c:fb:15:c1:
b3:4a:b0:c6:a6:10:1c:82:95:25:f3:58:d9:99:f2:
e4:8b:20:6b:2a:57:12:9b:a9:68:f2:43:6f:96:36:
63:63:b8:55:65:0a:50:67:c5:3d:da:9d:e5:f2:aa:
73:d2:6d:b9:5b:91:bc:dd:94:83:21:2b:5f:7b:c6:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:62:C3:31:72:93:B0:C4:99:8A:4E:FF:BA:1D:0F:2D:9E:3D:6F
X509v3 Authority Key Identifier:
keyid:07:34:5B:44:25:EA:A2:16:D0:3B:70:E8:80:3F:3C:C3:AB:E1:75:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BzRbRCXqohbQO3DogD88w6vhdRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/5530F6D8CA2811ED94556695F1222468/BzRbRCXqohbQO3DogD88w6vhdRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:99:6b:c0:61:38:73:b5:c9:4f:88:ad:e3:ed:ab:6a:25:cd:
fb:79:7c:d5:28:9c:78:ec:6f:e8:54:24:bd:cc:b5:33:e6:6b:
35:9b:95:76:c9:ca:76:ee:c2:55:b5:dc:08:0e:8a:e5:63:3f:
2b:59:7f:17:38:29:b9:e7:e6:32:89:37:3c:6d:c9:37:0b:89:
5b:99:78:97:e2:6c:7e:13:b9:61:4c:a0:bf:7c:af:29:60:e5:
9f:74:24:fa:c2:22:25:ba:96:a5:5a:6d:ea:c6:8c:49:91:e8:
95:10:19:a3:08:2c:a3:53:61:16:2b:2a:e6:c7:f6:ab:f5:8c:
f7:64:64:f0:e7:ed:0c:a0:14:cc:78:9b:40:0d:e9:13:4e:23:
b1:27:a4:0a:db:5b:f9:5d:65:1f:b7:1d:6a:b2:a4:10:f2:33:
2e:d0:f7:84:a9:02:97:9e:32:fe:56:43:1b:84:39:d9:5c:6d:
31:2e:bc:8a:26:2c:56:7f:42:e1:49:b1:9a:b3:b8:33:44:fd:
95:8f:63:e9:7e:76:51:51:c1:f9:54:05:b9:9f:28:b2:be:db:
2d:4d:e9:1f:6e:bc:f8:27:ae:28:5c:d5:be:f1:5d:ff:ae:97:
79:00:65:75:24:62:b1:0e:79:7e:a2:fe:d0:f2:11:bc:c4:ac:
05:bb:3e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:08 2025 by rpki-client