Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: W2iwanvHnyGDwWaMwH/igSY6u7bN2dy7T1OLzGF08YI=
Subject key identifier: 45:E3:88:0B:D4:E3:BA:05:B2:38:FA:92:28:50:DD:2C:E5:F7:92:57
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 0509
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 0508
Signing time: Wed 05 Nov 2025 02:59:06 +0000
Manifest this update: Wed 05 Nov 2025 02:59:05 +0000
Manifest next update: Fri 07 Nov 2025 02:59:05 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: usDyY6TId4ouxq/a6QJSqt0YLF9myCBQzSArVAAQFwQ=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1289 (0x509)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Nov 5 02:59:05 2025 GMT
Not After : Nov 7 02:59:05 2025 GMT
Subject: CN=690abd7a-5402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a5:39:ed:47:90:68:5c:98:52:19:d7:e8:4e:
36:37:8c:12:d3:95:30:04:59:fd:6f:33:19:ff:03:
02:3c:1c:d7:7c:d6:9c:79:f7:a9:b8:27:f3:c9:1f:
f1:ec:c0:aa:69:78:61:f7:30:87:bb:66:b8:76:e1:
38:25:14:8f:ad:08:f6:43:05:cf:1c:25:98:56:16:
9e:89:b4:86:25:b8:9e:44:cc:c9:dd:3f:a9:e9:ae:
8b:6e:8e:c6:76:18:a6:dd:2c:9e:6f:35:3c:1c:03:
69:5c:dd:cd:99:53:0e:d4:81:19:03:14:38:ca:ac:
fb:04:7a:a1:dd:83:29:84:06:85:aa:f0:59:cd:3f:
02:22:88:43:6e:51:3a:f2:9d:ab:09:44:4f:7c:47:
56:3d:af:df:c6:42:8a:b4:2f:9e:eb:41:2c:fc:e1:
5f:c9:e8:09:19:41:d3:c9:b6:23:23:a0:49:11:15:
64:26:03:3a:2a:bf:f8:c3:f8:f4:64:0c:0a:3e:a8:
71:57:de:6a:64:7c:0e:69:2a:8d:ec:e4:3b:b9:ca:
e4:b1:4d:cb:43:44:3d:b1:8a:81:b0:22:48:b4:95:
a7:57:ce:12:4f:fb:81:40:53:68:9e:34:77:c3:03:
05:2f:5e:7d:f3:37:ae:4c:6a:74:08:01:8a:e3:81:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E3:88:0B:D4:E3:BA:05:B2:38:FA:92:28:50:DD:2C:E5:F7:92:57
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:21:b1:72:37:2f:04:6e:35:e3:5c:f3:8c:19:37:f8:00:16:
c2:a6:28:90:25:aa:09:71:87:d2:e6:a6:2e:1a:8b:d6:cc:37:
8c:b6:01:8a:19:b8:79:06:a0:ff:44:98:55:dd:d2:2b:88:bf:
99:de:62:df:1e:b9:03:c5:df:25:8a:0d:aa:cf:6a:87:f2:f8:
97:c9:d2:6d:4d:03:49:78:73:c0:80:78:db:f3:c4:62:3f:26:
6d:0f:85:8d:82:14:e4:78:12:86:9f:2d:3c:b4:36:b1:8b:11:
f3:f1:dd:41:4a:d6:2a:d0:bf:35:16:f7:c4:29:b6:03:58:b7:
75:a5:81:6c:13:ca:cf:8c:02:2a:90:15:98:ea:ee:b2:ac:b3:
dc:2f:83:a0:54:e3:f6:a7:2f:7c:8c:1b:b1:7a:aa:18:9c:ab:
72:30:93:32:e1:8f:7c:f2:e2:6f:99:55:a2:5f:c3:96:af:5a:
51:6a:ac:03:f7:0d:8f:d2:d3:38:f9:2c:b9:3b:78:80:15:80:
93:24:71:60:ed:99:41:3a:38:57:67:7b:b3:94:7b:38:19:86:
9d:89:60:1b:87:6b:fd:55:2b:57:3e:24:04:c5:5c:4c:eb:aa:
27:17:aa:43:bf:8f:3f:1a:60:16:2c:ad:5a:78:d3:a5:be:f9:
5c:da:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:09:37 2025 by rpki-client