Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File: PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier: TliPh/TzBptNc4vR8w5AxjklipdQ47PpFa3HHHa2dXY=
Subject key identifier: D4:A0:D0:3B:B8:8F:9D:48:D5:F9:6A:4A:7F:16:1B:22:75:5E:91:EA
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer: /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial: 0518
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number: 0515
Signing time: Wed 05 Nov 2025 02:57:40 +0000
Manifest this update: Wed 05 Nov 2025 02:57:40 +0000
Manifest next update: Fri 07 Nov 2025 02:57:40 +0000
Files and hashes: 1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: Nmcu7kixE5wIRkT8qsbdMvtx8jPbG0xWzqK6tAi1j+k=)
2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1304 (0x518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Validity
Not Before: Nov 5 02:57:40 2025 GMT
Not After : Nov 7 02:57:40 2025 GMT
Subject: CN=690abd24-f7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:92:83:1d:08:f6:cb:17:7f:a5:d3:ab:41:
07:38:a1:92:a2:92:83:1c:eb:9c:a4:f6:86:83:f7:
e1:a9:cb:d9:41:12:2d:b1:89:20:1c:a9:9a:72:90:
85:47:f2:13:84:15:30:8f:d7:1b:42:bc:dc:61:fe:
c6:1d:6b:d1:d9:63:68:1c:e0:51:d5:66:46:73:fa:
f6:ff:5b:9b:d6:97:8c:74:44:87:1e:ed:54:82:79:
44:a6:97:64:d6:46:77:f3:9e:5b:79:22:79:f4:0b:
06:54:ed:95:2f:32:f5:14:46:76:f1:c8:78:76:06:
c2:e6:12:2f:77:e8:f0:f1:ea:67:e1:04:49:13:cf:
5d:14:c2:bf:1b:5d:6c:e0:c3:5c:b6:59:92:71:d5:
89:33:6f:0f:b1:61:8a:57:d0:68:9f:6c:e3:0a:46:
51:f4:9f:70:c3:46:a4:c6:42:33:86:b9:83:01:55:
a9:87:26:77:c3:c4:db:c5:32:18:24:c9:dd:7d:51:
3c:7f:2c:13:5a:79:92:8d:ef:13:26:37:db:fe:ff:
bd:31:2d:e5:72:e4:f3:79:6f:4f:7c:9d:5b:69:0f:
26:df:c9:29:5c:f3:17:49:4c:f9:bf:8c:50:64:ad:
34:df:16:91:76:88:a3:2e:2a:97:4e:6a:c4:e6:ca:
4a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:D0:3B:B8:8F:9D:48:D5:F9:6A:4A:7F:16:1B:22:75:5E:91:EA
X509v3 Authority Key Identifier:
keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:31:3e:86:fd:b4:c3:19:a3:81:30:b1:98:87:0c:85:a2:dd:
b9:03:03:32:5d:0c:b9:d2:0f:d3:c1:a0:62:19:9f:4d:7b:f9:
31:46:44:54:35:d4:dc:15:83:e9:c9:ab:c8:6b:c8:51:12:64:
10:62:f7:d9:32:55:e8:c3:b3:dc:54:2c:93:48:01:b6:31:e0:
2d:4c:2c:73:2b:c5:a7:d1:a8:ce:cf:60:00:ff:b6:34:23:ac:
5a:3b:1a:9a:f2:3c:f9:27:49:49:c5:37:cd:c9:7e:e6:34:c0:
ad:6f:c6:c9:e2:99:c5:9e:71:65:c7:b2:20:b7:e6:57:44:0f:
86:3e:4b:be:22:16:34:3c:08:85:ff:15:90:bb:d6:2e:77:dd:
2e:71:17:e9:72:3a:59:6e:d0:d0:2d:84:ab:18:13:73:bc:e5:
60:c7:e8:5c:49:16:d9:50:0a:86:3a:5d:b5:94:e6:5b:c3:51:
a3:b3:3a:fd:e0:c6:92:44:58:27:79:6a:cd:2d:09:75:e9:87:
96:e8:f5:08:5f:a1:ad:c9:73:1a:98:0d:5e:de:97:2d:d2:e9:
41:57:07:6f:82:15:ce:f2:04:33:fc:ed:63:88:47:c6:fa:52:
95:68:ec:6d:7b:f1:18:53:46:aa:24:32:e6:a8:43:a0:b8:65:
d8:55:a8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:58:43 2025 by rpki-client