Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: lJoR1ApVptz5G0K6kqRRnflXlz6FzT9hFzqRjKTPqec=
Subject key identifier: B0:68:89:96:0B:40:7C:22:46:A9:BA:9A:19:DE:42:9B:22:81:2B:97
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 03DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 03DA
Signing time: Wed 05 Nov 2025 03:33:54 +0000
Manifest this update: Wed 05 Nov 2025 03:33:53 +0000
Manifest next update: Fri 07 Nov 2025 03:33:53 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: mHRshJ09cirLtIQVBmB0EPaoNOPeN7LKoFyqFPtgv7A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Nov 5 03:33:53 2025 GMT
Not After : Nov 7 03:33:53 2025 GMT
Subject: CN=690ac5a2-cef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:fd:bc:2a:07:ed:e3:02:84:b5:6b:99:77:c6:
6f:74:00:8c:c5:d5:09:82:55:b6:7a:ab:ff:80:9d:
d3:b9:ed:f2:aa:89:7b:ef:8d:c4:ed:12:87:8b:55:
b2:ba:b5:37:df:ad:43:d3:0a:a1:a1:93:50:69:ad:
fc:be:f9:63:19:9e:6a:dd:d9:6c:7a:59:04:e2:00:
92:0d:a8:b2:74:73:dc:92:d2:9a:97:32:8f:fe:c4:
a7:ef:0d:fd:1d:e8:60:b4:3b:15:fe:f7:0f:fc:f1:
62:9f:fc:aa:58:9b:a2:9e:4f:be:48:69:1c:40:3f:
2a:21:c0:ed:36:45:d0:ee:9d:da:90:58:4c:41:7a:
02:6d:03:f8:f9:03:3e:f2:b3:cb:0a:81:c0:fe:67:
18:56:89:ef:d1:fc:ac:bf:29:ff:0f:08:1b:f1:87:
db:35:81:4a:78:52:bb:7b:63:cb:6b:3f:80:0a:aa:
75:30:cb:73:7b:82:a8:db:02:c5:b3:de:98:4b:7d:
fa:c3:ba:0e:28:05:cd:b2:4f:ad:8c:58:5a:51:19:
5d:73:f5:c2:4e:68:9a:88:e9:9c:c2:ec:ec:75:10:
a5:25:ac:4e:29:38:d3:17:7f:75:e4:75:83:15:e5:
26:ec:ba:c9:1c:84:9f:28:fd:c8:ce:48:07:91:ab:
d1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:68:89:96:0B:40:7C:22:46:A9:BA:9A:19:DE:42:9B:22:81:2B:97
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:18:93:c8:55:ad:73:12:54:10:5d:bb:f6:99:b3:ec:92:c0:
80:07:e9:67:5c:d0:89:cd:34:08:48:f8:55:56:a3:7c:13:6f:
d9:7a:c9:bd:02:a5:9b:8c:d1:9c:aa:3b:7b:3f:51:76:8a:4a:
63:d0:58:fb:14:a5:0d:6a:79:54:b6:5b:68:1d:b7:34:07:74:
f4:7f:62:35:5a:c2:eb:a3:df:f7:88:15:5c:24:59:36:17:22:
11:58:2c:ef:b5:d9:de:57:44:f9:9d:8f:e8:7f:a1:f8:dd:0e:
09:5b:4b:b8:47:ba:1b:0c:19:68:87:90:1c:b0:e4:25:51:95:
65:91:5f:48:77:48:96:72:a0:9f:db:b6:60:a0:17:21:8d:fa:
33:ac:ea:35:0d:d2:2f:4f:05:36:85:0c:e6:54:56:66:46:21:
67:d1:89:e6:23:d6:b2:86:48:43:4d:46:c3:15:ac:f3:03:17:
f0:ea:eb:92:2d:1f:ae:a5:79:1c:63:ce:f2:15:56:79:03:70:
42:16:22:74:23:fa:06:b2:4a:2a:3a:16:c5:a3:71:7b:cd:84:
80:02:f7:f1:e0:f6:23:03:f9:12:57:89:1d:6f:a5:cb:18:98:
10:90:3c:b3:f5:1e:dd:91:43:fb:92:6c:b1:48:cb:82:7c:64:
d2:5f:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:08:14 2025 by rpki-client