Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: ZTr1CrnIsFkib2FWaq9617TnwKzv9gKtzPzaEP0nRzs=
Subject key identifier: D6:39:97:BE:42:2F:EC:61:D4:44:C0:D4:81:DA:11:F3:04:27:98:D2
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 04BC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 04B2
Signing time: Wed 05 Nov 2025 03:13:24 +0000
Manifest this update: Wed 05 Nov 2025 03:13:23 +0000
Manifest next update: Fri 07 Nov 2025 03:13:23 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: ks2x6S30bU9hxMy1dWJmKSRZEYrYagVkA+Vl2mYQAaE=)
2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
5: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1212 (0x4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Nov 5 03:13:23 2025 GMT
Not After : Nov 7 03:13:23 2025 GMT
Subject: CN=690ac0d4-70fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:34:4d:18:50:77:56:2f:4e:e1:ff:50:ef:
15:c2:40:13:e6:56:a7:f0:21:39:c0:f2:2b:d7:50:
05:c7:68:88:7c:06:bd:11:e8:5c:cb:b4:91:58:42:
3d:d8:68:04:02:6d:71:42:c6:e4:66:79:3d:5e:a5:
31:f4:04:6f:ee:d0:b2:78:43:40:e6:bc:05:5f:f3:
c4:41:fc:55:a3:31:81:1f:b9:f0:b6:b9:4a:fc:76:
14:ad:eb:89:8c:d0:46:da:e9:9d:5e:96:0d:82:28:
40:8e:18:93:bc:a9:ba:36:40:1d:98:56:29:d2:c6:
28:43:07:3e:36:55:9c:f1:f3:4f:c5:e9:f9:0e:3e:
90:ec:76:d5:5b:e7:4e:39:c1:75:b9:22:96:68:1b:
66:61:71:63:60:1a:7d:53:71:64:6f:be:ad:c5:ad:
31:7a:ee:c9:1e:99:66:d1:2a:9f:38:39:de:2f:0a:
f0:5e:3f:12:c4:61:be:1c:a5:4a:4b:e4:ef:5b:03:
1a:c8:74:2b:03:f7:64:03:6e:3c:5f:2f:51:01:22:
bb:ce:5f:30:8c:c9:fd:70:98:9a:93:24:d8:2c:46:
1f:da:b5:9b:4e:04:ed:26:fc:ab:67:16:6a:be:b2:
54:f6:8c:98:69:eb:ee:77:6e:24:55:2e:21:93:9f:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:39:97:BE:42:2F:EC:61:D4:44:C0:D4:81:DA:11:F3:04:27:98:D2
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:80:c0:b6:28:d0:d4:bd:ba:23:6e:65:b2:19:44:65:0d:88:
c5:78:7d:bc:07:26:6f:d8:09:5e:64:7c:39:b5:e7:25:71:92:
ae:c9:1f:01:6e:d6:29:8c:d2:cc:e7:6f:7e:cc:7f:3a:04:94:
e2:fa:c8:33:dc:05:df:b8:40:11:91:2d:e0:38:ad:f2:55:c3:
0d:99:51:f5:06:91:0a:cf:90:89:e0:75:bd:31:14:8f:17:ae:
b4:ee:a6:dd:ef:54:af:c9:6f:97:4e:3f:b4:7f:73:f7:aa:41:
02:47:24:99:84:b0:e7:ed:27:36:3e:c2:90:a1:90:81:82:31:
e9:67:e0:aa:7f:7d:48:9d:68:3d:55:7f:d7:67:30:ec:ad:c8:
fb:59:a8:1e:4d:b7:04:8f:39:67:aa:15:13:86:10:ad:07:98:
4d:6e:e8:c2:8a:b7:8d:58:b8:6d:3d:ba:a5:03:f5:99:8b:e8:
20:e1:3a:54:46:9b:0b:22:88:df:fb:51:90:73:9a:2f:e7:8a:
d9:e9:04:d6:e6:58:6a:8b:42:ee:2a:70:5a:bb:64:cb:c7:ce:
3d:12:75:62:ad:93:55:47:f8:ab:c7:2a:f4:a9:01:81:3b:90:
ba:2c:3d:9e:bf:cd:37:58:69:22:23:5c:39:e4:47:1f:44:3c:
36:44:d7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:22:49 2025 by rpki-client