Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File: Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier: npUn507nnRW2SW95fhNvBsJlKak2N8/KlTvdJKRVuxY=
Subject key identifier: C9:63:D1:4B:55:10:D5:AC:99:57:11:EC:32:87:AB:B3:BD:BA:08:A8
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer: /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial: 42
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number: 41
Signing time: Tue 04 Nov 2025 06:46:00 +0000
Manifest this update: Tue 04 Nov 2025 06:46:00 +0000
Manifest next update: Thu 06 Nov 2025 06:45:59 +0000
Files and hashes: 1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: abjokIEfEv/2ishEeer7ZcU+HBH7Q3ftPi8A/mQSnnE=)
2: A19BA40E895D11F0BE8951DBDAE4EC9C.roa (hash: Et+VW4knLp0d295uH8UgXrH5+8q9h3SexmR3jtKPDNI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 06:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66 (0x42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Validity
Not Before: Nov 4 06:46:00 2025 GMT
Not After : Nov 6 06:45:59 2025 GMT
Subject: CN=6909a128-8f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:77:2f:39:a7:16:6d:34:01:b9:92:c4:55:e0:
62:dc:c7:3b:b7:65:92:0d:6a:ca:f2:0b:23:cc:32:
8f:6e:ee:8b:ba:7d:d9:f0:d7:88:73:ba:ce:36:d6:
88:08:f9:5f:1c:4e:3d:ad:f5:de:ad:9a:12:35:ef:
ba:2d:64:d4:38:a0:ca:13:88:f2:c5:69:f4:8b:29:
43:6d:b3:ba:97:b6:45:dc:54:3d:a5:ac:dc:59:bd:
e3:0a:9a:b7:a4:8d:e9:d3:70:3c:b4:4e:4f:70:d5:
56:5a:a7:53:3e:e5:01:77:2a:d2:6e:49:0f:b0:56:
99:6c:38:cc:5c:e4:1f:68:94:22:5c:63:c8:53:69:
ab:68:96:a5:38:20:99:9f:1f:02:7d:f1:bc:4e:7e:
2d:9a:f1:e1:1c:02:29:79:67:1b:a1:71:a7:48:5a:
a2:19:0c:a8:2c:2f:f4:fd:25:17:85:62:ea:71:08:
57:71:49:b4:74:78:6d:54:c5:60:3b:d4:ab:51:ff:
4c:08:b4:e6:b7:a6:d9:ea:3d:85:c4:63:2a:f0:b9:
12:aa:53:4b:b4:21:d9:4f:b0:e7:7d:68:b3:09:67:
4c:03:27:a7:5b:be:a1:ea:b7:f9:7c:86:29:a5:dc:
af:69:97:22:9e:df:48:05:36:ab:0f:ef:6d:5d:f6:
3e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:63:D1:4B:55:10:D5:AC:99:57:11:EC:32:87:AB:B3:BD:BA:08:A8
X509v3 Authority Key Identifier:
keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:19:d9:51:23:4a:fd:98:d4:7d:70:77:5d:e2:31:7e:a2:17:
f7:00:55:53:5a:fc:00:67:1f:bb:40:55:bf:b4:a8:04:d0:a3:
e1:a7:f9:24:79:6f:d6:82:e5:37:88:7a:b7:7b:89:33:82:2e:
aa:b8:81:e3:2e:1d:3f:a2:8a:d9:ea:b9:62:cd:88:cd:fe:c8:
16:54:18:fb:74:a5:cb:49:86:16:85:e8:b3:68:c1:c3:ed:8a:
9a:63:ec:91:de:9f:c2:9f:00:a2:85:19:d3:c8:93:52:c0:9d:
f8:05:39:e9:1d:f2:46:bc:76:94:56:75:6c:12:b8:21:37:69:
f7:3f:6a:cb:c7:8c:d0:b8:cd:a9:ac:ea:dd:28:43:1c:83:c5:
1a:87:ea:ce:3d:ac:90:b8:75:1d:9e:c1:a3:46:c9:b6:cc:13:
92:da:1e:fb:a0:7c:36:cb:d3:0e:6f:8e:7c:48:94:8b:a6:b0:
7b:fd:d9:39:c2:04:9f:f0:78:5b:28:63:54:7c:a0:56:1b:32:
fb:53:99:71:60:9e:30:6d:df:e4:60:a8:a6:71:96:bc:91:15:
2e:ce:4a:38:06:56:dd:3a:16:4f:ca:8e:dd:59:ad:fb:17:e9:
dd:8b:cb:5d:71:c8:5c:74:16:99:67:f7:f6:14:2d:0d:38:da:
c1:14:dd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:19 2025 by rpki-client