Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
File: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft (raw, json)
Hash identifier: YxIkK8tWi1X2KhS80bjKX8joO1Di2qzkOrlloOIQz84=
Subject key identifier: 33:D1:9E:51:84:02:9A:B5:49:49:C0:31:C1:70:3F:FC:98:8E:6C:EE
Authority key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
Certificate issuer: /CN=F3626CB6AF/serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Certificate serial: 06C3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
Manifest number: 06C3
Signing time: Wed 05 Nov 2025 02:10:36 +0000
Manifest this update: Wed 05 Nov 2025 02:10:35 +0000
Manifest next update: Fri 07 Nov 2025 02:10:35 +0000
Files and hashes: 1: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl (hash: d32OMouoCDqCg6DdQQNjD6nzhA/WQhSCR/oOweDSeY0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1731 (0x6c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Validity
Not Before: Nov 5 02:10:35 2025 GMT
Not After : Nov 7 02:10:35 2025 GMT
Subject: CN=690ab21c-2186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:88:a3:8b:a0:e3:01:d5:63:ff:88:89:b8:f6:
23:f1:1d:96:1e:e3:7c:64:da:46:6e:76:9d:fe:32:
13:78:21:9e:5d:cb:52:e0:b5:93:a0:28:f2:96:e4:
34:a2:a1:40:c1:bc:7b:35:9a:23:77:e4:67:15:d7:
08:ad:ca:e9:5c:72:e1:16:4b:b6:aa:08:83:b1:60:
c8:63:67:03:d5:7c:69:2e:6e:11:63:f5:d2:15:d1:
7c:e2:6f:5d:2d:b1:92:97:ef:00:79:47:c3:cf:dc:
03:ec:28:41:4b:18:ba:4b:29:e9:6b:8a:4a:98:b4:
ed:15:f1:f2:e9:94:db:ff:e8:68:cf:0d:9f:5d:e0:
6a:7e:55:52:14:3c:6a:9d:79:0b:1f:e6:76:12:cf:
6d:52:2e:60:04:0c:81:2d:3d:6b:27:c7:b3:ba:1a:
d9:02:69:d6:68:37:be:2f:42:ad:c0:6c:fe:04:8a:
83:91:70:08:d5:1e:90:60:02:1e:92:c7:f4:f0:96:
1a:90:df:c4:64:d2:aa:56:91:5c:95:09:6d:44:f2:
ea:1b:cf:bd:51:f2:0d:46:55:06:39:c7:8f:0c:76:
86:ae:90:dc:c5:56:e2:08:fb:f9:8d:22:b1:08:dc:
55:33:e3:10:89:e8:bb:ea:a5:c3:34:25:70:05:b9:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:9E:51:84:02:9A:B5:49:49:C0:31:C1:70:3F:FC:98:8E:6C:EE
X509v3 Authority Key Identifier:
keyid:0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:6c:99:66:24:cf:3f:da:6d:b6:40:e1:c0:31:91:d3:52:e7:
7e:09:70:62:66:73:1e:97:25:b4:44:a4:9a:4b:08:44:38:26:
8e:9f:ec:b5:0d:91:bf:31:ea:20:bf:e6:0b:69:1b:64:50:99:
66:6d:f6:c5:6e:c2:2a:89:da:45:f0:a2:58:bf:01:c2:24:22:
3b:76:3f:76:03:68:90:de:9e:6f:cf:2d:fb:bd:19:3a:be:e0:
af:f1:1a:33:12:1f:bd:7d:05:9b:bc:72:ca:6c:1a:92:ab:18:
e9:ae:c5:1c:2e:10:99:01:36:06:4e:96:39:85:6a:17:f2:23:
81:13:49:82:58:af:74:b7:7b:2b:44:3f:1b:6f:99:80:11:43:
aa:f6:06:99:93:02:16:a4:fb:30:2e:b2:8e:27:76:31:73:ea:
6c:c6:f6:1f:45:6d:40:8a:0f:55:38:74:eb:46:98:59:42:78:
24:74:a5:32:ff:84:5d:ec:06:19:50:55:de:a2:15:6e:2a:ab:
c1:4d:54:cd:a5:2f:dc:b6:dc:d3:52:4a:58:e9:98:a4:01:1a:
f7:90:ee:55:5b:41:2b:1a:33:15:67:07:6c:64:2d:36:7a:63:
91:2c:41:a0:5c:3d:35:b0:48:5a:be:58:9d:7f:d8:0a:6b:98:
41:e5:f4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:01:01 2025 by rpki-client