Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: LgT1iHqqL5MXYCYo62ljEbfLpnxyCcRBXY4+X8sNVFA=
Subject key identifier: 88:77:D5:9F:DC:70:00:D6:24:6A:0F:FF:37:AA:37:74:A4:93:71:E0
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: 9E
Signing time: Wed 05 Nov 2025 05:29:40 +0000
Manifest this update: Wed 05 Nov 2025 05:29:39 +0000
Manifest next update: Fri 07 Nov 2025 05:29:39 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: e2esxj9QW7KqZYfRiF91D/q7RcY7NLF/0tdiBKHxXzE=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Nov 5 05:29:39 2025 GMT
Not After : Nov 7 05:29:39 2025 GMT
Subject: CN=690ae0c4-3de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:8c:9e:43:a0:28:27:09:ed:e7:8a:85:34:
7e:02:ea:5f:4a:c0:c9:09:b2:3d:40:c1:92:22:4d:
a8:76:24:99:a0:5f:ca:cd:29:01:84:41:14:b5:67:
8f:fe:63:06:a8:e6:5b:a0:ab:ce:02:53:0d:85:f5:
f0:32:39:4a:0f:b3:be:c8:3d:03:d5:58:1b:b6:38:
cd:95:0c:19:f8:65:62:54:12:58:71:77:61:6b:fc:
52:5e:a6:81:cb:4e:0d:3e:a9:1d:98:00:13:2b:9c:
95:1b:7b:0b:68:f5:c1:4b:3e:b8:c4:16:99:b9:e6:
55:76:a7:5d:5c:fc:33:cc:86:4b:cc:bd:a7:3a:fc:
a4:f5:bb:7d:1e:87:b4:0a:1b:a3:74:82:c3:46:8b:
9c:8f:e7:f1:2f:19:45:e7:2b:32:84:04:94:fe:0c:
6a:a1:09:2d:f1:e5:40:15:86:55:c5:6f:43:5f:9b:
8e:c8:0e:4c:76:9c:eb:36:c6:42:3a:18:00:e2:0e:
bf:ec:aa:05:69:a7:a3:56:2b:c0:30:73:14:06:96:
15:80:15:1f:df:14:35:c9:58:02:05:a8:d2:19:32:
03:75:2a:b7:08:e9:8a:3a:00:4a:e7:d0:c3:cd:dc:
6c:24:89:08:6a:7c:a3:6b:16:ec:26:c5:05:5f:85:
11:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:77:D5:9F:DC:70:00:D6:24:6A:0F:FF:37:AA:37:74:A4:93:71:E0
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:2a:ff:82:8d:69:b3:15:67:10:cd:1c:bb:0e:b7:80:23:
80:17:09:d5:b3:84:dc:64:5c:a5:cb:12:14:7b:35:ad:3e:83:
12:10:b2:48:26:b2:b7:3e:e2:4f:8d:00:38:15:45:46:db:59:
98:13:3d:e0:15:f1:a2:65:1a:14:55:a1:c8:37:a2:36:7c:c7:
a3:4e:5d:a0:b7:63:36:db:4c:7e:c2:56:94:f2:ca:cf:01:da:
e7:8a:9e:b5:cf:d0:07:23:95:59:04:96:2e:f5:11:b3:ea:28:
c0:bb:b9:8c:fa:8a:41:ef:c2:a1:62:65:b7:a7:d3:e6:4c:d6:
de:e9:90:d3:6d:ce:15:44:43:28:22:12:89:da:9f:fd:93:4c:
59:7a:3b:fc:8e:d9:e7:df:62:02:f4:25:f2:99:07:f3:e1:53:
85:ed:8b:9d:ba:4d:20:b9:18:d6:57:69:2c:8f:1b:ca:25:06:
b4:54:b1:43:aa:98:14:d9:3b:75:1a:30:73:e5:5c:d7:83:1c:
65:a4:4c:86:9d:09:7c:a7:51:1f:ff:6d:1d:7b:df:0d:24:11:
65:0b:13:b1:74:1c:fd:44:48:12:9d:d3:86:6f:4e:7d:b8:0e:
d1:0c:ab:ce:5a:f0:93:13:ce:0a:e8:23:ea:d2:62:4e:1b:a7:
97:5f:54:cc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIzNURBRjExMC8GA1UEBRMoMDVBOTc4RTNENTQ3RjU1OTNFNEIwMzE5NzAzODU5
ODY5NDUwNThDNjAeFw0yNTExMDUwNTI5MzlaFw0yNTExMDcwNTI5MzlaMBgxFjAU
BgNVBAMTDTY5MGFlMGM0LTNkZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj1YyeQ6AoJwnt54qFNH4C6l9KwMkJsj1AwZIiTah2JJmgX8rNKQGEQRS1
Z4/+Ywao5lugq84CUw2F9fAyOUoPs77IPQPVWBu2OM2VDBn4ZWJUElhxd2Fr/FJe
poHLTg0+qR2YABMrnJUbewto9cFLPrjEFpm55lV2p11c/DPMhkvMvac6/KT1u30e
h7QKG6N0gsNGi5yP5/EvGUXnKzKEBJT+DGqhCS3x5UAVhlXFb0Nfm47IDkx2nOs2
xkI6GADiDr/sqgVpp6NWK8AwcxQGlhWAFR/fFDXJWAIFqNIZMgN1KrcI6Yo6AErn
0MPN3GwkiQhqfKNrFuwmxQVfhRFfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiHfV
n9xwANYkag//N6o3dKSTceAwHwYDVR0jBBgwFoAUBal449VH9Vk+SwMZcDhZhpRQ
WMYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMzVELzY3N0NGREVDNEMzOTExRjA4M0VDMzM5N0RBRTRFQzlDL0JhbDQ0
OVZIOVZrLVN3TVpjRGhaaHBSUVdNWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JhbDQ0OVZIOVZrLVN3TVpjRGhaaHBSUVdNWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzIzNUQvNjc3Q0ZERUM0QzM5MTFGMDgzRUMzMzk3REFF
NEVDOUMvQmFsNDQ5Vkg5VmstU3dNWmNEaFpocFJRV01ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA9CCr/go1psxVnEM0cuw63gCOAFwnV
s4TcZFylyxIUezWtPoMSELJIJrK3PuJPjQA4FUVG21mYEz3gFfGiZRoUVaHIN6I2
fMejTl2gt2M220x+wlaU8srPAdrnip61z9AHI5VZBJYu9RGz6ijAu7mM+opB78Kh
YmW3p9PmTNbe6ZDTbc4VREMoIhKJ2p/9k0xZejv8jtnn32IC9CXymQfz4VOF7Yud
uk0guRjWV2ksjxvKJQa0VLFDqpgU2Tt1GjBz5VzXgxxlpEyGnQl8p1Ef/20de98N
JBFlCxOxdBz9REgSndOGb059uA7RDKvOWvCTE84K6CPq0mJOG6eXX1TM
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:21 2025 by rpki-client