Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier: /h1JB6nT/GtvM7js4oO6hhVrlwRmZkITohXGWqoxCpk=
Subject key identifier: CE:7D:A7:F7:9A:8B:53:83:EE:16:2B:2C:B0:6D:82:B0:65:42:C1:9C
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer: /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial: 09DD
Authority info access: rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number: 09DC
Signing time: Tue 04 Nov 2025 01:23:22 +0000
Manifest this update: Tue 04 Nov 2025 01:23:21 +0000
Manifest next update: Thu 06 Nov 2025 01:23:21 +0000
Files and hashes: 1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: 8aa4iUqhtzCuVwd0yzRuT24hfdEawzqmhi5ZV4pAB0c=)
2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2525 (0x9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Validity
Not Before: Nov 4 01:23:21 2025 GMT
Not After : Nov 6 01:23:21 2025 GMT
Subject: CN=6909558a-bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:e3:be:47:9a:d9:d2:9d:f1:9c:42:bb:46:
e6:fb:b5:56:54:68:7b:87:19:24:40:ae:9f:75:63:
27:b7:63:9a:5a:0f:54:75:bd:2c:0e:f0:39:5e:c7:
ab:2e:85:50:1e:89:e7:ed:bd:5f:27:19:e7:72:a9:
46:36:3b:06:72:41:17:0e:d4:04:45:51:93:16:1f:
9c:ae:3e:4f:55:49:87:a6:89:0e:aa:af:13:6c:85:
d5:82:a3:8b:91:25:e1:66:cc:87:b5:3a:92:d7:ad:
4e:b6:73:ef:6d:32:cf:b0:95:f0:57:1c:b9:80:b5:
7f:99:5d:be:9f:b5:a3:3b:07:c6:14:17:0e:56:a7:
7e:c8:89:6c:e8:de:ff:9d:24:ba:19:26:83:36:e8:
a0:b1:96:f6:b2:4a:96:1d:06:74:84:e9:54:c2:f1:
79:b6:b6:3b:6b:cf:ed:4b:37:08:aa:34:0f:c1:1e:
eb:02:9b:6e:ad:98:b3:5a:05:4b:1f:ea:97:00:03:
4f:6b:5f:51:48:58:6d:a3:41:ed:85:9b:69:3d:e9:
ca:0e:86:74:b3:a6:1e:89:60:47:81:e6:ce:5c:ff:
0a:6a:87:0f:a1:4a:4b:07:9a:1d:b6:92:d1:c2:94:
20:0d:48:14:79:39:7b:38:65:92:d9:c7:03:5b:12:
f5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7D:A7:F7:9A:8B:53:83:EE:16:2B:2C:B0:6D:82:B0:65:42:C1:9C
X509v3 Authority Key Identifier:
keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:4f:d2:80:2a:6e:fe:1d:e2:98:14:cb:f5:30:ab:3e:b4:45:
23:c0:51:b9:c5:5b:8d:bc:e0:58:83:d4:e0:6e:9f:b6:95:97:
76:82:6e:d5:32:cf:19:09:d0:22:98:c9:1a:57:87:40:d6:a6:
4a:9f:02:9a:b9:48:55:bc:a2:21:a6:a5:1a:e3:18:cf:e4:bf:
38:44:08:00:18:ad:ff:d2:f5:89:fd:25:e6:33:83:f8:81:bf:
36:78:cc:a4:9b:1f:b6:38:2b:dd:9b:76:12:96:97:ae:20:e4:
02:cb:7e:a5:da:6f:18:28:e4:20:c7:34:78:64:56:c8:53:c8:
d5:ca:03:4e:23:3c:d3:34:d1:1f:a6:1c:4e:b7:9b:32:20:06:
4e:06:e5:4d:3a:24:bc:81:a8:0a:e8:87:44:48:dd:18:15:e6:
5b:31:4a:60:6d:0b:1f:fb:47:7b:1f:68:84:d0:08:48:6a:7f:
d8:8a:76:11:f6:9b:20:51:4c:56:01:f8:2f:a8:c2:08:65:89:
3d:fb:ca:d7:c5:06:22:cd:d3:c0:51:ad:28:6e:5d:96:08:17:
9f:7b:45:ad:be:80:56:3e:8e:3a:d8:f8:c9:e9:0c:ee:e9:6e:
cf:40:9c:e6:4f:b4:4d:18:e6:14:be:0b:df:b9:db:4a:28:fd:
71:98:bf:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:17 2025 by rpki-client