Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File: iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier: noimfI0bVV9WegDlEOq0NlT5uezV8sdiAnI1kTfQrXg=
Subject key identifier: 40:B8:65:EA:20:3F:8E:6A:25:CF:D5:CF:49:9C:F8:10:99:2B:B8:A6
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer: /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial: 021B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number: 021A
Signing time: Wed 05 Nov 2025 04:34:57 +0000
Manifest this update: Wed 05 Nov 2025 04:34:56 +0000
Manifest next update: Fri 07 Nov 2025 04:34:56 +0000
Files and hashes: 1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: ALFzG6bt+T/lmobBXXla6E0CRo95skIWQ2v+8/VF0xU=)
2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Validity
Not Before: Nov 5 04:34:56 2025 GMT
Not After : Nov 7 04:34:56 2025 GMT
Subject: CN=690ad3f1-4e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:d5:3e:a9:4f:a7:c2:3a:b7:e1:8a:0d:8a:
2f:32:f6:bf:66:13:d3:64:4f:d7:6f:30:08:91:41:
da:39:4f:1f:01:88:73:8e:76:28:30:c8:29:27:15:
37:23:8d:00:1d:a1:8d:69:87:16:52:6c:c4:23:fd:
60:46:c8:a8:68:72:c0:b2:5d:f4:c7:e6:50:c9:07:
44:c5:0f:7c:29:b8:b4:12:7b:86:4b:6a:02:96:f5:
e3:aa:58:f5:c8:fa:74:03:70:39:f1:0a:6e:70:af:
4d:54:14:57:cc:f7:ad:ad:0b:99:71:8a:bd:01:8a:
a4:fc:eb:d6:75:e0:b8:14:73:9a:ec:1e:04:3f:f0:
0f:ba:bf:78:ee:59:3d:58:4c:5e:16:fc:ea:f4:ed:
83:de:e4:62:19:5f:84:54:a5:db:f4:2c:f1:fc:77:
01:64:22:7d:3f:a2:bc:50:3e:fa:61:dc:1d:c3:ca:
23:f3:f3:82:2c:e1:2f:45:e7:a9:22:8c:61:27:ef:
ac:93:ad:c4:82:81:28:15:f8:cf:75:60:66:ee:19:
7e:97:4c:d0:fd:e7:a8:64:d1:65:62:7e:43:3d:b0:
a1:66:2d:d4:f6:d8:78:19:5d:38:b4:cb:2e:c3:8b:
6d:20:48:5d:26:62:cc:57:02:55:ea:17:e6:7e:56:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B8:65:EA:20:3F:8E:6A:25:CF:D5:CF:49:9C:F8:10:99:2B:B8:A6
X509v3 Authority Key Identifier:
keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:15:29:41:31:87:c8:5b:2c:fd:dc:43:c9:55:3a:43:9b:
42:29:56:ad:0a:8d:7a:20:b7:98:77:d5:cc:5d:57:66:fa:21:
e7:b4:a7:09:f2:f8:fa:ad:c8:2b:f5:10:82:32:59:06:55:43:
22:10:4d:6a:aa:0d:69:ad:a8:ac:c0:94:ae:a9:18:3b:5c:a4:
49:ea:7c:cb:90:a6:3e:21:a6:d5:9d:4c:36:15:01:a7:d7:23:
93:f0:55:fe:9b:8d:b2:2b:dd:41:ff:fc:b6:54:4e:3e:77:62:
da:1a:1a:c7:50:cb:eb:0f:99:84:e5:17:2e:27:4c:c2:ea:f7:
e2:56:73:fe:9f:6c:0f:93:87:b9:f8:a1:ed:36:d6:41:3c:3d:
33:fb:03:4a:51:79:75:1c:c0:3a:d3:a9:5c:75:76:9b:c2:be:
ae:68:7f:62:b0:c9:99:a6:11:47:ed:89:07:33:77:ea:21:65:
30:0b:bf:50:1a:60:c2:53:78:a2:77:6b:79:b0:17:a8:de:69:
bc:63:37:83:ec:a9:84:0d:4d:09:09:44:e1:aa:e1:ec:5c:ee:
e6:4d:bb:07:38:8d:1b:dc:30:d9:2f:fc:4f:b0:cd:be:6a:94:
16:de:b5:c6:37:22:9c:ae:cf:0d:07:d8:03:e3:39:36:1a:4a:
41:35:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:21:16 2025 by rpki-client