Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier: 5EUzsr2ZfJrluBwruGr2qQE88TCrwC+vm5jb9zY/+8Q=
Subject key identifier: 46:31:F7:86:BE:C4:EB:11:57:63:5C:CC:37:DF:4F:E6:0D:79:F8:72
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 01FD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number: 01F8
Signing time: Wed 05 Nov 2025 04:40:16 +0000
Manifest this update: Wed 05 Nov 2025 04:40:15 +0000
Manifest next update: Fri 07 Nov 2025 04:40:15 +0000
Files and hashes: 1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: si7FqM+W8UywEvG3bWrbGn+ngqiPZ75GesT52PYCHj8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 509 (0x1fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Nov 5 04:40:15 2025 GMT
Not After : Nov 7 04:40:15 2025 GMT
Subject: CN=690ad530-2b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7c:20:7a:7f:66:61:8d:14:8b:ad:bd:c7:44:
f3:52:85:19:9a:36:9e:4a:73:9e:51:33:d4:32:a4:
61:20:aa:50:4a:f5:66:8e:c9:70:71:e1:fe:ae:74:
9b:7b:b2:da:1c:04:21:24:f0:c5:05:36:a9:cd:b5:
b0:fc:b3:d2:9c:81:49:4f:59:17:40:1c:c3:01:64:
c6:57:d1:00:e9:67:f3:22:2d:fe:44:d1:56:71:bd:
3f:67:48:34:01:9c:b9:96:a2:1f:05:2d:20:79:36:
d6:e7:53:54:49:ac:31:b0:43:a3:6a:c0:44:4c:90:
d9:63:8d:05:af:ec:08:6c:f7:9c:c6:ef:e4:b0:0d:
06:ac:84:40:6a:06:4d:f4:39:67:cd:f8:36:34:a6:
f3:cf:aa:b2:e5:3e:2c:9b:45:2d:89:a4:c0:fc:6f:
f1:18:f6:4a:0c:14:9a:05:c4:16:7e:46:2b:48:d4:
3b:d7:d2:3d:7a:3c:0e:9d:ba:35:a7:c9:76:e6:f1:
46:ef:f6:ca:ab:62:f2:c1:af:52:0a:55:66:76:17:
e0:59:ed:9e:6b:fc:11:67:d7:9a:44:10:ec:cf:cc:
de:ce:23:c2:0e:a5:70:a3:69:93:bb:76:11:f9:29:
ea:c9:a3:82:97:64:2c:eb:f2:fc:a8:95:85:a8:e4:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:31:F7:86:BE:C4:EB:11:57:63:5C:CC:37:DF:4F:E6:0D:79:F8:72
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:5f:7b:aa:48:24:58:f1:bb:29:20:7f:49:c4:46:01:3b:23:
34:9c:a9:37:41:e7:67:f3:61:f6:eb:a6:26:41:24:89:18:6f:
ea:2e:98:71:55:c9:a9:14:93:0c:1f:d3:29:2e:de:6f:89:a8:
04:9a:db:4b:a9:f6:88:a7:a9:00:b6:e5:22:96:b0:38:e4:ed:
7b:8e:a6:d8:94:0b:33:5e:72:b5:94:f1:81:73:88:99:36:03:
1f:f0:c2:d5:15:5f:0a:18:ee:36:03:74:73:ec:68:b7:cf:e6:
a1:d9:0c:9b:ee:f7:d5:c1:a2:15:29:90:28:54:32:eb:2e:d9:
0b:ec:97:9d:d6:15:e0:38:4c:59:91:b6:78:35:f4:1d:2d:46:
38:88:74:d7:7e:15:67:d6:b0:d4:fc:4e:88:bc:a7:d6:61:ee:
3b:9f:4c:29:a2:34:76:cd:a9:7a:41:7d:c2:78:6f:c9:34:80:
71:df:1f:a7:6f:a2:86:8f:f6:90:81:30:50:92:5d:79:b1:f8:
1f:c5:4d:15:d8:e1:4c:a7:63:4c:f6:95:b6:2e:2c:3e:a0:c2:
6f:d5:2c:ee:09:11:c2:71:f0:35:28:b8:9b:80:94:38:fb:04:
a7:f0:93:5c:1c:d3:71:48:d6:a6:1a:ad:e9:b4:82:ae:69:5b:
01:b1:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:02 2025 by rpki-client