Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
File: jslBzFrhaLO7xSJOt19628St-As.mft (raw, json)
Hash identifier: SOayDX+jfsyY9h/+KDpcO/99OnWY8CM9i4ne6gLmxjk=
Subject key identifier: 5D:EA:26:BF:D4:D0:F9:F0:BE:63:81:43:0E:E0:42:68:33:38:D1:A2
Authority key identifier: 8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
Certificate issuer: /CN=F3640700AF/serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Certificate serial: 0F18
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
Manifest number: 0F18
Signing time: Tue 04 Nov 2025 00:56:05 +0000
Manifest this update: Tue 04 Nov 2025 00:56:04 +0000
Manifest next update: Thu 06 Nov 2025 00:56:04 +0000
Files and hashes: 1: jslBzFrhaLO7xSJOt19628St-As.crl (hash: 9I7CbUdlAuujO/xx537/G8OeLzgPb+FaR/tTNDcLsDo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3864 (0xf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640700AF, serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Validity
Not Before: Nov 4 00:56:04 2025 GMT
Not After : Nov 6 00:56:04 2025 GMT
Subject: CN=69094f25-0052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:19:44:5e:0e:d8:3b:e0:1a:9e:4f:dc:40:b4:
17:01:cb:64:88:be:59:ff:3d:93:ff:18:5c:b5:65:
0a:cd:5b:c8:47:15:ac:18:0e:13:56:09:ec:f0:e1:
07:e6:f3:8c:43:de:76:73:b7:fb:a8:b1:2a:66:e5:
b9:1d:5d:6b:30:4d:32:98:39:af:66:40:58:40:f8:
23:7a:3d:d2:b0:b3:7a:1d:57:93:b1:03:60:e4:1b:
c6:e7:2e:7e:c9:33:3a:2a:28:1e:33:62:fd:0b:1c:
b6:d2:a9:a3:1e:1b:01:29:52:01:17:1c:76:13:ef:
4d:9f:8f:11:80:21:1f:e1:b7:e1:9f:3a:48:49:d9:
5e:c9:6c:8d:6a:23:01:77:80:d0:7a:4a:07:20:33:
38:b0:5d:d0:1c:ae:23:53:bb:44:b3:4d:20:c3:71:
93:34:ec:dd:cb:f6:1e:ea:01:40:e0:79:82:71:f2:
13:d6:5b:04:48:d8:0c:86:47:af:17:2a:cf:c1:fd:
29:73:42:73:b4:8f:c6:b1:ae:fe:26:ab:3c:03:98:
0d:ab:37:3c:72:03:db:02:79:ac:0b:79:e1:25:78:
01:e6:6f:a1:42:4c:e0:3e:30:f1:09:39:1f:bf:92:
a8:56:e8:3f:c3:92:91:20:5f:60:98:55:35:7b:45:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EA:26:BF:D4:D0:F9:F0:BE:63:81:43:0E:E0:42:68:33:38:D1:A2
X509v3 Authority Key Identifier:
keyid:8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3d:95:c2:e6:59:11:4a:fb:e0:7a:8c:41:24:c3:77:6c:da:
54:c7:f2:f5:77:3e:92:c3:4f:cf:30:19:ef:b2:1f:ed:55:62:
3d:9c:93:6b:1e:d3:44:6f:13:6d:1e:a8:58:2c:39:d2:aa:33:
5e:05:cb:15:f5:e8:f2:59:ac:b5:8c:62:13:0f:d8:07:81:79:
1b:de:ac:25:94:b5:59:95:13:26:6e:9c:0f:b3:92:fd:d5:d0:
33:28:d9:cd:bf:f6:b9:b4:ed:0a:e4:3a:e6:a9:4a:e0:34:f8:
5b:a5:1b:51:5a:60:1e:52:ce:ba:1a:c6:03:e5:8b:59:d5:52:
08:62:54:5d:02:c5:13:13:19:50:07:39:18:22:75:89:68:32:
0b:f1:cd:f2:b9:69:1f:e8:c0:da:fe:51:0a:55:55:47:c5:f2:
be:c4:9f:a9:86:52:cc:3a:0f:30:cd:6d:ee:bb:dc:11:1b:a5:
36:7d:ef:7f:72:88:7c:b5:45:26:6d:7d:15:8d:4b:31:e4:37:
de:5b:90:0f:d1:0b:44:10:cc:38:0d:41:7b:a1:3d:6a:67:7c:
21:e7:44:34:e9:2e:9a:0f:0b:a6:d8:ec:55:cb:de:0d:c3:87:
0b:55:ae:38:c4:b7:a5:09:52:10:07:bf:79:0c:35:ef:a5:ca:
1a:14:7a:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDxgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA3MDBBRjExMC8GA1UEBRMoOEVDOTQxQ0M1QUUxNjhCM0JCQzUyMjRFQjc1RjdB
REJDNEFERjgwQjAeFw0yNTExMDQwMDU2MDRaFw0yNTExMDYwMDU2MDRaMBgxFjAU
BgNVBAMTDTY5MDk0ZjI1LTAwNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRGUReDtg74BqeT9xAtBcBy2SIvln/PZP/GFy1ZQrNW8hHFawYDhNWCezw
4Qfm84xD3nZzt/uosSpm5bkdXWswTTKYOa9mQFhA+CN6PdKws3odV5OxA2DkG8bn
Ln7JMzoqKB4zYv0LHLbSqaMeGwEpUgEXHHYT702fjxGAIR/ht+GfOkhJ2V7JbI1q
IwF3gNB6SgcgMziwXdAcriNTu0SzTSDDcZM07N3L9h7qAUDgeYJx8hPWWwRI2AyG
R68XKs/B/SlzQnO0j8axrv4mqzwDmA2rNzxyA9sCeawLeeEleAHmb6FCTOA+MPEJ
OR+/kqhW6D/DkpEgX2CYVTV7RfprAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXeom
v9TQ+fC+Y4FDDuBCaDM40aIwHwYDVR0jBBgwFoAUjslBzFrhaLO7xSJOt19628St
+AswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNzAwLzcwRkIzNzFDMTRGRTExRTU5QjA0QUYyQUY4QUVBMjI4L2pzbEJ6
RnJoYUxPN3hTSk90MTk2MjhTdC1Bcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pzbEJ6RnJoYUxPN3hTSk90MTk2MjhTdC1Bcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDA3MDAvNzBGQjM3MUMxNEZFMTFFNTlCMDRBRjJBRjhB
RUEyMjgvanNsQnpGcmhhTE83eFNKT3QxOTYyOFN0LUFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+PZXC5lkRSvvgeoxBJMN3bNpUx/L1
dz6Sw0/PMBnvsh/tVWI9nJNrHtNEbxNtHqhYLDnSqjNeBcsV9ejyWay1jGITD9gH
gXkb3qwllLVZlRMmbpwPs5L91dAzKNnNv/a5tO0K5DrmqUrgNPhbpRtRWmAeUs66
GsYD5YtZ1VIIYlRdAsUTExlQBzkYInWJaDIL8c3yuWkf6MDa/lEKVVVHxfK+xJ+p
hlLMOg8wzW3uu9wRG6U2fe9/coh8tUUmbX0VjUsx5DfeW5AP0QtEEMw4DUF7oT1q
Z3wh50Q06S6aDwum2OxVy94Nw4cLVa44xLelCVIQB795DDXvpcoaFHoT
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:34:56 2025 by rpki-client