Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File: A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier: Gv4GBXi/cjeycbNkPJ90cTXRIzA3LNXDUJ0Bfvfre0k=
Subject key identifier: 52:AF:CB:B2:2D:E2:32:DD:65:2F:EB:06:E6:79:F0:7D:66:F1:C3:1F
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer: /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial: 04E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number: 04D8
Signing time: Wed 05 Nov 2025 03:08:15 +0000
Manifest this update: Wed 05 Nov 2025 03:08:14 +0000
Manifest next update: Fri 07 Nov 2025 03:08:14 +0000
Files and hashes: 1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: ZTFs1Xbfg2myeBxRnpnUPUqxlhZ8qQvgwnjmvGxmdGw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1257 (0x4e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Validity
Not Before: Nov 5 03:08:14 2025 GMT
Not After : Nov 7 03:08:14 2025 GMT
Subject: CN=690abf9f-33ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:eb:db:6a:f1:15:b5:62:60:08:72:df:89:
96:17:64:3d:db:00:50:27:59:ab:b1:5c:7b:b5:a3:
80:34:43:9e:76:4b:1a:1d:95:64:94:5c:05:71:f2:
96:b9:9e:78:dd:18:aa:d2:61:19:44:ce:65:26:e4:
41:6b:a2:de:a3:01:84:af:a0:e6:60:ad:53:25:41:
b9:e5:b1:7b:18:8a:b1:f0:f3:6a:3f:c7:11:3d:83:
2c:08:ed:e5:9a:b6:26:69:51:f4:dc:aa:e3:2d:fd:
63:dc:17:97:ee:8e:88:05:86:71:71:73:3b:09:31:
09:e1:9d:22:73:ea:ad:a5:42:d3:c6:bc:2e:5f:d8:
60:8b:8a:cb:90:95:b6:44:29:41:34:6f:49:a7:47:
82:06:72:dc:c1:61:f5:68:79:d4:73:52:dd:8e:d6:
46:eb:69:1f:27:f8:ee:9d:27:dd:29:4e:18:43:e8:
a5:52:4d:74:26:77:f6:5a:8a:9c:60:bc:01:0f:5c:
a0:24:b3:fc:1f:c1:84:27:15:de:b7:f3:8f:38:bd:
9e:7b:c7:ba:7d:7d:5d:38:0d:7f:ca:b2:b3:d2:04:
51:0e:26:09:14:d4:28:ef:54:d4:91:f5:99:25:04:
55:b8:9c:96:a3:61:af:f2:8a:61:2c:fe:59:fa:e2:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AF:CB:B2:2D:E2:32:DD:65:2F:EB:06:E6:79:F0:7D:66:F1:C3:1F
X509v3 Authority Key Identifier:
keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:fb:76:21:9c:9b:bc:94:d9:2c:17:88:c7:6d:73:d4:ec:5b:
6b:0f:5e:a1:9a:bf:a7:e1:4f:6a:11:52:56:a3:22:50:72:33:
f6:f2:ee:39:42:d9:25:d3:c6:27:95:68:84:71:3d:42:93:a0:
f3:3a:82:76:72:ca:93:cc:b0:89:81:4a:68:87:29:92:d9:db:
d2:8c:7b:ce:ad:0c:f4:dd:ff:f0:a2:5f:59:52:11:3b:37:f1:
e6:e9:97:2e:e7:53:2c:13:4b:61:45:5a:cb:6b:63:6e:c2:22:
16:dd:06:f2:a9:65:d5:07:c2:97:8c:0a:92:a1:72:b4:1b:ea:
27:4c:83:a9:33:6f:a7:f9:98:a1:3b:ec:6b:a3:b9:65:6d:84:
84:ab:4e:3e:8f:7a:04:ab:51:3d:bd:3d:b5:d2:ab:02:ab:f1:
b9:ee:79:85:32:30:d0:fa:ad:a5:c0:3b:fe:15:3d:87:cf:a6:
3a:f7:ca:d2:c6:7c:d0:62:cd:f2:6a:8d:30:1a:f3:c2:3e:a4:
6d:5b:de:87:ab:36:dd:68:8f:5f:71:65:0a:15:59:a6:ee:59:
ee:04:21:46:69:91:9c:4f:a4:90:16:35:27:8e:4b:21:fb:17:
2e:cb:c5:23:f3:93:f4:49:48:ae:55:19:16:56:5c:39:57:71:
7e:63:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:56:12 2025 by rpki-client