Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
File: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft (raw, json)
Hash identifier: woaNAacgpQiGAVRsZvlWO41DMWt/ia9a/GjbTqsGIWg=
Subject key identifier: D0:88:8A:D5:24:04:00:CA:CB:78:01:D9:0B:07:AB:A6:5C:D8:AB:B7
Authority key identifier: 88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
Certificate issuer: /CN=F3622A10AF/serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Certificate serial: 01CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
Manifest number: 01CC
Signing time: Wed 05 Nov 2025 04:47:07 +0000
Manifest this update: Wed 05 Nov 2025 04:47:06 +0000
Manifest next update: Fri 07 Nov 2025 04:47:06 +0000
Files and hashes: 1: iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl (hash: b0LcKFa6i2SqyXxnVj7D7RBGUMTR1e30c2cZOsCxQrE=)
2: 96765F423C6E11F09155EFCBDAE4EC9C.roa (hash: hFFmGegVcY7FYj6sGdd1sbP6AWog8WEhJh7P4bF8xW8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 461 (0x1cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3622A10AF, serialNumber=889F941A220A4E4FB090B44C2318FB538DD7B746
Validity
Not Before: Nov 5 04:47:06 2025 GMT
Not After : Nov 7 04:47:06 2025 GMT
Subject: CN=690ad6cb-c44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0b:bb:9f:0a:a7:aa:74:f5:a2:49:f6:e1:e8:
6a:7d:13:8b:45:b8:73:35:ce:8a:48:56:03:54:9d:
4a:b0:36:57:79:05:ea:50:49:08:2d:82:92:aa:f9:
c7:1a:ea:fc:5a:33:9a:57:cd:b9:62:30:fa:17:ba:
a5:5d:0a:ac:82:7b:66:d7:51:d2:79:44:34:10:bd:
35:34:39:f4:79:3c:1e:15:c1:fd:2b:02:6a:5c:aa:
ae:4a:bc:58:50:29:a7:bf:99:9f:2b:91:99:6a:2e:
5d:9a:04:ba:ef:30:2a:08:a8:3c:93:b7:08:f4:ec:
92:67:51:23:38:41:ba:2e:59:02:70:cf:84:35:69:
00:e7:8f:b9:57:4b:d1:31:5c:7c:d4:88:30:a6:1b:
c5:8d:d8:01:68:9f:5a:cb:13:b5:4f:9b:c6:17:63:
7a:7d:fc:1d:13:0d:04:5d:2a:b7:5e:92:45:b7:6d:
79:11:29:c7:85:91:e2:d2:24:48:c0:75:d5:bd:38:
68:0b:41:9a:b0:66:16:6d:d8:57:07:6c:df:2d:25:
d2:90:4a:37:4c:70:b0:51:c4:a4:ac:da:59:e5:26:
22:46:5d:bc:00:c8:aa:a0:b4:79:bd:0e:21:0e:38:
83:db:a6:72:19:3f:43:c7:47:98:b5:69:a7:85:ff:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:88:8A:D5:24:04:00:CA:CB:78:01:D9:0B:07:AB:A6:5C:D8:AB:B7
X509v3 Authority Key Identifier:
keyid:88:9F:94:1A:22:0A:4E:4F:B0:90:B4:4C:23:18:FB:53:8D:D7:B7:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3622A10/579D221A5BA011EF88EE516F762E951A/iJ-UGiIKTk-wkLRMIxj7U43Xt0Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:50:f5:f2:69:28:52:7f:a1:3d:7a:ec:15:5c:18:00:2a:40:
8e:62:a0:43:47:3d:aa:ef:0f:57:52:e5:12:c2:7e:b7:84:f6:
30:2e:59:06:9d:60:f3:d4:a9:82:79:4c:6e:4f:e4:32:f0:73:
3e:8a:84:18:e6:c8:e3:90:ec:24:8f:94:64:57:19:29:09:2b:
55:61:f8:28:2e:e9:22:f0:2a:6c:7e:8c:bc:6d:cb:76:52:e8:
53:88:63:1a:71:87:f7:4c:94:2f:62:de:4a:d8:19:43:ba:db:
4a:0f:23:2a:fe:7b:ae:c2:29:c0:89:4e:87:8d:1d:35:44:db:
40:f0:c1:21:35:c6:16:e8:5f:7e:e1:df:49:b4:c7:93:aa:4c:
ee:ae:c5:80:7d:10:68:ce:09:79:13:ad:35:c0:14:db:0b:57:
45:6d:c2:21:d1:e5:20:7d:71:0c:e2:f5:45:d1:48:b1:2c:85:
1b:ab:1f:49:e7:4a:21:3f:a3:e8:db:18:10:32:d9:08:fe:b6:
3c:00:6a:15:3a:d1:7c:04:2b:fc:c6:d3:a3:1a:c4:f2:76:20:
8b:54:a4:0a:19:43:95:11:14:3d:7b:d6:fe:76:3a:41:fe:84:
f4:a5:60:7a:24:0d:e2:9b:28:4f:a0:ea:b7:26:ff:21:3d:e6:
c6:58:93:1c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjJBMTBBRjExMC8GA1UEBRMoODg5Rjk0MUEyMjBBNEU0RkIwOTBCNDRDMjMxOEZC
NTM4REQ3Qjc0NjAeFw0yNTExMDUwNDQ3MDZaFw0yNTExMDcwNDQ3MDZaMBgxFjAU
BgNVBAMTDTY5MGFkNmNiLWM0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiC7ufCqeqdPWiSfbh6Gp9E4tFuHM1zopIVgNUnUqwNld5BepQSQgtgpKq
+cca6vxaM5pXzbliMPoXuqVdCqyCe2bXUdJ5RDQQvTU0OfR5PB4Vwf0rAmpcqq5K
vFhQKae/mZ8rkZlqLl2aBLrvMCoIqDyTtwj07JJnUSM4QbouWQJwz4Q1aQDnj7lX
S9ExXHzUiDCmG8WN2AFon1rLE7VPm8YXY3p9/B0TDQRdKrdekkW3bXkRKceFkeLS
JEjAddW9OGgLQZqwZhZt2FcHbN8tJdKQSjdMcLBRxKSs2lnlJiJGXbwAyKqgtHm9
DiEOOIPbpnIZP0PHR5i1aaeF/wtjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0IiK
1SQEAMrLeAHZCwerplzYq7cwHwYDVR0jBBgwFoAUiJ+UGiIKTk+wkLRMIxj7U43X
t0YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIyQTEwLzU3OUQyMjFBNUJBMDExRUY4OEVFNTE2Rjc2MkU5NTFBL2lKLVVH
aUlLVGstd2tMUk1JeGo3VTQzWHQwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2lKLVVHaUlLVGstd2tMUk1JeGo3VTQzWHQwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjJBMTAvNTc5RDIyMUE1QkEwMTFFRjg4RUU1MTZGNzYy
RTk1MUEvaUotVUdpSUtUay13a0xSTUl4ajdVNDNYdDBZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeUPXyaShSf6E9euwVXBgAKkCOYqBD
Rz2q7w9XUuUSwn63hPYwLlkGnWDz1KmCeUxuT+Qy8HM+ioQY5sjjkOwkj5RkVxkp
CStVYfgoLuki8Cpsfoy8bct2UuhTiGMacYf3TJQvYt5K2BlDuttKDyMq/nuuwinA
iU6HjR01RNtA8MEhNcYW6F9+4d9JtMeTqkzursWAfRBozgl5E601wBTbC1dFbcIh
0eUgfXEM4vVF0UixLIUbqx9J50ohP6Po2xgQMtkI/rY8AGoVOtF8BCv8xtOjGsTy
diCLVKQKGUOVERQ9e9b+djpB/oT0pWB6JA3imyhPoOq3Jv8hPebGWJMc
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:14 2025 by rpki-client