
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File: 0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier: LqiFt4aGPzVDwh6Dj04c4LYEWwHWHYVpS52OrTL++xA=
Subject key identifier: 89:F7:79:1E:2A:98:83:A1:3F:51:D7:24:07:C0:52:7D:8E:2C:D2:99
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer: /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial: 0835
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number: 0823
Signing time: Wed 05 Nov 2025 01:48:53 +0000
Manifest this update: Wed 05 Nov 2025 01:48:52 +0000
Manifest next update: Fri 07 Nov 2025 01:48:52 +0000
Files and hashes: 1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: aa+d+PhQDHhIoxFKxvteHsaA9f/2I9AnYK5pp3/LFno=)
2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2101 (0x835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Validity
Not Before: Nov 5 01:48:52 2025 GMT
Not After : Nov 7 01:48:52 2025 GMT
Subject: CN=690aad05-4b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:d8:02:ac:8d:a9:e5:f6:cc:0f:0a:f6:68:
55:57:a0:58:96:01:07:dd:c4:0d:16:ff:4a:d9:61:
ed:e2:d8:6e:b6:63:61:a5:f1:2f:52:70:81:41:ba:
73:57:4f:0c:43:eb:aa:08:2a:ba:0d:22:0f:0f:74:
5a:70:15:fe:70:19:0c:3e:e2:5a:d5:26:20:8c:66:
a2:ae:44:7a:6a:8f:2e:8d:ad:99:d4:49:fb:aa:6a:
cf:49:e7:34:23:02:c6:2a:14:b7:3d:75:ff:31:b6:
b1:33:a1:3f:bb:c0:ac:47:b0:0c:a7:36:20:5b:74:
d2:c0:d4:bf:fc:d4:85:a5:84:03:63:0a:a1:d5:b3:
29:5f:5a:8c:ed:d0:bd:6d:d9:c3:fa:86:8f:eb:b2:
e4:c8:b2:6f:76:2c:3d:16:96:0a:ff:bb:68:e6:70:
31:ea:f1:2e:00:c6:df:46:c4:97:be:55:95:b1:0f:
b6:26:5e:3f:98:5f:2b:82:86:40:2c:69:51:00:64:
f2:c3:6b:2a:68:c5:b7:7c:92:27:a0:29:f5:7d:f9:
fb:1e:87:8a:82:89:61:16:61:33:f8:37:be:ef:63:
94:f5:75:d2:4f:bd:70:cc:69:ed:c7:38:71:c7:d4:
a7:57:0d:36:11:e7:7a:60:b8:c2:e1:43:4c:ee:4f:
8e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F7:79:1E:2A:98:83:A1:3F:51:D7:24:07:C0:52:7D:8E:2C:D2:99
X509v3 Authority Key Identifier:
keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:9c:cd:0f:ef:f0:a5:9d:29:14:46:7f:3b:4f:45:fc:04:12:
16:14:28:8d:47:23:f1:05:fe:4f:a5:79:bc:b9:2e:c3:e7:37:
33:30:44:48:19:db:c0:13:24:90:94:51:2b:5c:9a:f6:84:c1:
a3:7a:72:86:41:1e:11:d7:d4:97:ae:72:17:6f:f2:93:34:4b:
28:88:f9:43:45:9d:d5:ee:eb:e5:a4:c4:ae:41:50:08:18:e2:
45:21:ac:da:8a:f5:25:88:35:c0:59:09:64:9b:0c:bf:69:92:
0f:2e:ac:7c:d4:e0:0f:7c:b2:bb:3b:6a:d8:22:d1:17:6f:ae:
7b:0f:d5:0c:3d:88:8a:10:47:5d:64:1f:9a:dd:cd:0f:63:93:
bf:73:e6:83:27:6d:8e:67:23:bb:ab:c7:ca:45:5b:90:83:f4:
c8:33:c9:65:69:33:3c:24:e4:96:e9:cf:44:6e:45:cc:96:a1:
31:2e:e8:43:b1:6b:8f:12:3e:3e:50:31:64:d7:98:38:e9:8d:
58:9f:ef:eb:48:d9:24:f4:16:d2:01:36:5b:1a:3f:67:b1:c4:
c9:27:0c:f5:d4:a6:2b:d4:b9:1b:5e:12:d3:ee:aa:55:63:1d:
bf:bd:f2:85:5b:56:9b:70:1f:75:9b:a9:0a:7d:cd:fa:1b:e6:
9f:4f:2a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:51:09 2025 by rpki-client