Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: lTSiBVghc0/eAnc8efZIS/HGNf2ajGWdyv/lNnRDMrU=
Subject key identifier: 4C:E2:61:28:B5:73:2B:83:7D:0C:06:CB:73:31:E6:99:26:9D:5C:30
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0EE6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 0EDA
Signing time: Wed 05 Nov 2025 00:57:13 +0000
Manifest this update: Wed 05 Nov 2025 00:57:13 +0000
Manifest next update: Fri 07 Nov 2025 00:57:13 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: rQJg+WzgWS73cu4rPBGxeYoIowslqLp1xVG3+8VIywc=)
2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3814 (0xee6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Nov 5 00:57:13 2025 GMT
Not After : Nov 7 00:57:13 2025 GMT
Subject: CN=690aa0e9-9e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:b6:0c:87:56:be:c8:b8:e4:0f:71:36:1f:
38:dd:74:9d:1a:28:48:7f:20:83:2b:78:b0:e9:ee:
07:ab:32:8d:fa:07:9f:26:ca:fe:5f:c3:8a:04:75:
b2:9a:46:f0:b0:93:2c:bd:c8:3b:09:e2:29:bd:4e:
e3:9f:f5:2c:c4:c1:e9:0e:bf:f2:33:8b:6d:18:c8:
53:ce:73:11:f5:86:5b:36:c5:e6:d3:7f:c5:da:18:
d6:2e:e3:5f:9e:be:99:13:b6:42:2a:96:98:aa:78:
f4:6f:07:df:58:d5:22:d9:5c:dd:67:7c:8d:ac:88:
f8:87:a7:dd:00:84:f6:8d:48:96:dc:22:0d:de:5e:
8f:5f:86:37:20:1c:4f:ba:36:d8:4d:a3:66:29:06:
98:bd:b6:47:ab:ea:35:38:06:97:26:e4:4e:14:f4:
9a:b0:55:f2:48:c1:87:21:49:da:c1:4e:1b:08:7e:
75:e9:fd:b5:a8:56:8d:a7:5e:1f:06:f9:1f:d4:1b:
80:70:da:bd:5e:d2:08:c9:b9:b7:d7:4a:bf:bb:03:
6e:43:35:d3:cd:cb:89:7e:0f:60:01:53:56:7a:27:
f7:67:d1:d6:7a:91:f6:77:83:7d:b7:da:14:03:9e:
5f:8f:95:d0:8e:84:5a:17:c0:13:da:d3:d1:08:bf:
fb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:61:28:B5:73:2B:83:7D:0C:06:CB:73:31:E6:99:26:9D:5C:30
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:e9:f1:5f:64:8d:cc:e9:a1:0f:3d:a5:9a:4d:dd:39:0d:55:
95:10:3d:9f:a3:45:f6:61:35:eb:42:16:d2:2c:9c:ae:5d:2c:
b5:a9:31:7f:fa:73:ff:d5:bf:96:e6:29:7f:74:f1:6a:30:ab:
57:20:b9:06:f3:d0:00:cf:89:20:68:10:d3:3d:c9:1f:97:e7:
b7:dc:8e:89:79:dc:3e:72:81:55:e7:97:16:3a:6f:ca:a8:07:
e0:af:61:91:e7:8c:dd:79:f2:83:21:d1:1d:83:a4:92:14:0e:
a5:12:ab:43:66:c4:6f:4f:e7:fd:7f:60:b7:cf:5c:0d:0d:78:
58:ca:07:f3:7e:eb:4f:27:b5:f9:a6:eb:b6:2d:96:8d:18:52:
96:55:ec:fc:fc:48:e2:6c:28:11:37:9b:5f:f1:82:69:fd:51:
63:44:08:6a:65:4e:10:b4:28:c0:7a:49:90:e9:f6:d8:a4:a6:
58:b0:24:a4:2c:b3:8a:04:74:60:c3:d0:22:cf:57:eb:00:2e:
19:39:8b:89:8e:43:d6:3a:67:bb:3e:84:d4:80:2d:b5:09:41:
c9:66:be:2e:84:61:e7:38:4e:6d:28:9f:fa:d9:1a:3f:d0:b1:
a2:54:0b:ce:49:91:c8:a5:84:54:9f:df:3d:63:ae:97:b5:80:
11:66:4d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:50:32 2025 by rpki-client