
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: 2u7fVDQ4ZuJUyT4mTa3E8em7f7aCE96U1ESRMZZgXkA=
Subject key identifier: E5:B1:CD:E1:D3:5E:B0:DB:5B:32:26:6D:18:6E:E1:CE:EA:5B:5D:BF
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 01FC
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 01FC
Signing time: Tue 04 Nov 2025 05:38:19 +0000
Manifest this update: Tue 04 Nov 2025 05:38:18 +0000
Manifest next update: Thu 06 Nov 2025 05:38:18 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 97kzLrcz+P/XGSxOvBOEUSAavcP683E3TGnBwoA8VFk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 05:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 508 (0x1fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Nov 4 05:38:18 2025 GMT
Not After : Nov 6 05:38:18 2025 GMT
Subject: CN=6909914b-ad8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:83:a6:dd:da:42:f7:66:22:11:f2:79:af:13:
86:cd:1d:06:2e:57:45:24:37:1a:00:ab:ef:f9:9f:
3b:88:6a:7c:4d:e9:30:06:97:80:57:7d:9c:5d:4f:
f8:51:fb:59:e8:80:71:2a:6a:5c:7b:df:1d:09:e9:
e8:e0:77:14:02:f3:d1:27:3e:67:3b:2a:e4:46:6d:
65:d4:34:b0:e2:04:06:47:65:58:a9:67:32:ba:7c:
8c:03:d2:09:f6:cb:5f:8c:c3:4c:a1:f5:c7:56:e9:
63:91:c9:8c:64:0c:2e:4d:64:98:fa:cd:60:36:fe:
4d:71:01:12:a9:41:d9:e4:61:10:40:12:1b:32:99:
1c:90:cb:ca:6f:e3:99:f8:12:ba:8a:1c:a3:96:e0:
5a:f6:4e:fb:28:db:3c:9f:1f:1f:d0:2d:85:05:38:
71:f7:c6:50:9b:66:22:2a:17:3e:6c:a5:6b:8b:21:
73:19:6a:bd:8a:bf:63:8c:be:47:d8:40:b7:6e:f3:
2a:0e:14:91:33:fe:8e:80:59:e1:a7:16:65:e0:f1:
e9:b1:45:4c:2d:ef:84:74:f2:72:4e:19:ac:1e:62:
57:a8:6c:fc:7c:1d:f4:c6:a5:14:cf:72:a4:f9:c3:
0a:57:03:8a:02:eb:b5:58:5d:d4:6a:7a:2a:b1:16:
f4:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:CD:E1:D3:5E:B0:DB:5B:32:26:6D:18:6E:E1:CE:EA:5B:5D:BF
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5e:75:29:06:8a:ea:31:c9:66:7f:f4:80:05:83:1a:d0:2f:
20:3b:8f:aa:8c:11:f2:05:47:09:81:6f:7a:41:49:d1:8e:57:
be:8a:cb:9b:10:c4:af:a6:df:09:48:5d:b6:e0:da:dc:67:03:
f9:10:98:d9:fa:7e:f4:bd:8f:88:41:a3:5b:ee:be:54:d7:6c:
8b:d4:78:97:a1:7f:ce:80:92:74:0b:0d:84:eb:e2:1e:27:93:
56:85:f5:be:53:b9:f4:94:46:e0:b6:70:3f:be:27:de:86:65:
9c:d7:b5:1c:22:3e:33:a4:f8:70:4c:79:e1:3c:34:6e:94:93:
74:2a:1a:3d:36:b3:a3:5f:5f:ba:68:bc:a7:bf:a7:0a:db:b9:
dc:b2:e1:38:77:17:f7:91:d5:ba:57:41:ec:a2:75:7e:c6:f8:
ec:a1:2f:bf:02:3b:dc:00:29:1c:d3:59:c3:7c:e2:f3:99:ce:
29:50:b4:61:30:4a:ca:64:b0:00:57:66:3b:ed:dd:13:75:f4:
6a:53:18:a5:09:61:5a:1e:1a:39:e5:97:68:86:fe:26:cc:fa:
fb:a4:7b:e9:4c:b5:ca:d4:8e:83:7f:ff:94:d1:1a:7a:2c:52:
bb:6b:0c:26:3f:c3:ac:95:27:48:f0:2e:bd:21:de:34:32:f8:
cc:37:29:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:59:36 2025 by rpki-client