Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File: -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier: FrGCzKX5sXkTegHsy7sWNdv9UV3exKBGk9HivrYJET8=
Subject key identifier: D8:0F:A1:D9:AA:F2:64:70:B2:23:A1:35:C0:AB:B4:FF:87:30:39:4C
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer: /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial: 01DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number: 01DA
Signing time: Wed 05 Nov 2025 04:44:39 +0000
Manifest this update: Wed 05 Nov 2025 04:44:38 +0000
Manifest next update: Fri 07 Nov 2025 04:44:38 +0000
Files and hashes: 1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: 6tQvxzl0EW3t27kTwXaaZeqNGAZO4TdL1948RMjfw/4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 474 (0x1da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Validity
Not Before: Nov 5 04:44:38 2025 GMT
Not After : Nov 7 04:44:38 2025 GMT
Subject: CN=690ad637-d2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:0c:92:3b:e4:ed:d4:98:fc:7b:d4:1e:77:
81:13:ef:b8:89:2e:08:46:a6:22:64:0b:1a:22:62:
07:1d:9d:85:af:af:04:72:16:34:c2:a6:c1:b3:da:
6b:12:09:fd:91:b0:99:55:6e:af:41:a8:c9:f8:ae:
a2:8a:39:0d:2e:db:7e:1b:dc:c9:4d:59:c0:c1:b8:
0d:88:7a:26:db:08:f4:ca:87:94:ab:97:6a:f8:7f:
63:37:f7:db:4b:b0:be:bc:b0:79:8f:19:9c:46:f2:
20:7f:f9:21:2b:b9:1e:4b:5f:40:6b:e6:d0:ac:b4:
10:07:be:5d:8f:3e:93:e8:e2:2d:86:59:16:4f:3e:
a2:a5:3a:d0:af:ec:5f:67:01:c6:91:1e:62:2e:2f:
bb:f3:21:00:fa:08:31:26:fa:c4:67:cb:aa:f5:52:
3c:7a:b3:a6:84:df:b6:21:04:11:d8:a5:a4:13:26:
53:2b:3f:fc:6f:ef:b8:db:f9:ef:18:fe:23:d9:48:
90:b4:28:41:00:50:b8:1c:79:af:ae:7e:69:27:ea:
67:5f:2b:8f:70:bb:43:bc:e4:58:7e:63:e5:f3:b5:
5a:b1:3a:5d:ce:18:e1:55:c5:00:ad:c8:e2:af:5b:
1f:b4:70:f1:85:1f:fa:fa:fc:f7:7d:d1:d6:83:65:
dc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:A1:D9:AA:F2:64:70:B2:23:A1:35:C0:AB:B4:FF:87:30:39:4C
X509v3 Authority Key Identifier:
keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:74:01:6f:d2:a9:a1:4d:a9:81:2e:57:4d:00:d0:d5:52:
48:c6:70:27:c1:be:5d:12:67:8f:11:23:63:e9:56:e0:1a:1a:
d2:d6:97:d5:24:3c:09:1d:33:f0:e4:bf:c2:e8:7e:4c:d7:fe:
60:b9:d8:fe:4a:3e:cc:56:49:14:4a:a8:d5:82:f2:2a:13:8c:
b4:29:6f:9c:37:8f:60:9c:d7:2c:a3:77:38:c1:c7:b1:31:37:
50:ca:59:c4:e5:b2:b5:e5:43:bf:e1:29:06:ea:a7:bd:f1:d8:
be:4a:9c:5e:26:ad:b7:04:a0:e3:5b:fa:ef:05:71:49:d4:29:
82:2d:fc:f1:61:55:9d:55:87:be:10:83:a1:28:d7:1a:29:c6:
4c:3a:be:ef:68:d7:a5:25:cf:7c:b4:1d:f6:4a:c0:58:13:83:
e6:e2:d4:df:01:7f:b0:cf:14:53:60:58:8b:6f:99:e1:0f:7b:
7c:93:92:fd:08:75:85:f2:a7:db:0c:a0:6d:27:64:35:a3:3c:
b4:36:55:bb:52:70:1e:8f:0a:15:bc:ae:35:da:c3:69:f6:ab:
d5:c6:d8:ae:a1:f4:c7:aa:50:0f:29:fb:75:c5:ef:1f:ac:9e:
ef:49:13:2b:f4:a4:b0:c0:6e:ab:ea:25:b9:73:33:ee:5c:c1:
e0:89:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:29:42 2025 by rpki-client