Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: Gm0WSCU9YQuC13J7bUNAvgPdOLpH4p9KBklklIyLZ30=
Subject key identifier: F7:2F:7A:F7:3B:3A:E0:F9:B0:ED:94:BE:AB:33:AC:18:D5:B9:47:14
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0505
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 04B6
Signing time: Wed 05 Nov 2025 03:20:08 +0000
Manifest this update: Wed 05 Nov 2025 03:20:07 +0000
Manifest next update: Fri 07 Nov 2025 03:20:07 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: tyLjKvZVfmqy6XHXCh0qpo0qs5F63oiMtsQibA4sBvw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Nov 5 03:20:07 2025 GMT
Not After : Nov 7 03:20:07 2025 GMT
Subject: CN=690ac268-5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:3c:25:d2:19:23:c0:a7:89:24:9a:52:41:
56:a8:bb:38:06:bc:c0:21:ac:79:57:1d:91:88:cd:
f3:22:ef:a0:5a:21:45:0c:b8:f7:b3:3c:02:a0:72:
75:9f:19:88:cd:f8:00:d5:3e:87:b5:dd:8d:d6:ed:
e4:ab:fc:4b:ec:23:c6:01:c5:6f:9f:7a:0d:88:2e:
2a:f5:59:ad:38:fb:e0:ad:16:7b:52:03:cb:a4:14:
a3:fd:d7:af:07:9b:55:ee:89:97:3f:d4:67:d8:c4:
6a:ef:34:3d:28:90:c1:3b:11:45:35:fa:95:a7:bb:
49:ac:10:3b:0b:cf:1e:f5:43:bd:ec:4a:e2:fc:ea:
a7:26:48:d9:e8:d9:03:2f:a5:ef:2c:ad:79:cc:f5:
f8:1c:9e:88:ef:73:96:f1:d1:f5:a2:1f:cf:86:71:
cb:cd:0c:ff:bb:3b:8b:45:c8:62:58:1d:bf:22:c6:
d5:be:ff:f0:ac:9a:df:7b:57:eb:e2:91:ae:21:ec:
4e:75:39:63:c2:85:95:00:65:bb:2f:cb:1e:c3:be:
88:6f:b1:03:c7:26:c3:0b:e6:db:a0:7e:3f:eb:e8:
9e:4f:bc:8d:08:ce:8d:24:fa:41:51:63:7e:0a:81:
5f:15:d5:2c:79:44:5f:e0:8b:11:82:7b:8e:79:ed:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:2F:7A:F7:3B:3A:E0:F9:B0:ED:94:BE:AB:33:AC:18:D5:B9:47:14
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:cc:6d:b4:c8:24:b0:42:10:f8:f4:e1:63:42:0b:d1:94:0f:
ff:e4:f1:58:06:60:ee:6b:92:51:9c:72:d1:1c:f7:67:41:44:
32:4c:ac:89:e0:54:a8:65:1c:fb:ab:bf:6a:68:48:ab:8e:d9:
78:a7:06:45:5f:74:e5:28:08:c8:b5:2a:bf:9e:4c:95:38:06:
5d:1d:15:76:ab:d4:30:92:43:30:a7:d0:d9:0a:a5:0a:98:7c:
64:e1:97:3d:b9:f3:c2:6c:ce:45:5b:2f:a0:1c:72:b0:a1:96:
da:76:71:f1:45:90:c8:2d:7e:23:c1:85:2c:f2:a0:b6:e2:61:
16:33:60:a2:dc:57:7c:d7:f5:81:00:60:6b:eb:9d:c9:00:1b:
f6:16:01:6f:11:aa:ff:d0:21:76:36:11:33:47:ae:9f:d9:7f:
0c:df:74:94:2d:48:29:0d:5a:eb:1b:9a:3d:46:c5:a6:7c:86:
d0:ff:26:b4:13:4d:be:48:82:84:9c:a4:b4:70:0d:08:c7:c5:
fe:28:09:cd:55:8f:08:1c:9f:8b:c6:02:bb:f6:d9:12:8f:9d:
01:b0:e6:95:45:6e:af:ea:a9:46:c0:f1:38:f1:54:b1:b6:f7:
a7:c6:ea:b1:98:f4:1f:14:79:4d:8c:3f:d2:fa:da:ac:ba:d6:
28:8a:cf:2a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBQUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTlGOUNBUjExMC8GA1UEBRMoMDlGQjMxMzZFQ0Q1RTNEN0NGMDBCMzJDMTIxRjEy
RThBRkQwQTYwMTAeFw0yNTExMDUwMzIwMDdaFw0yNTExMDcwMzIwMDdaMBgxFjAU
BgNVBAMTDTY5MGFjMjY4LTU4NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3kTwl0hkjwKeJJJpSQVaouzgGvMAhrHlXHZGIzfMi76BaIUUMuPezPAKg
cnWfGYjN+ADVPoe13Y3W7eSr/EvsI8YBxW+feg2ILir1Wa04++CtFntSA8ukFKP9
168Hm1XuiZc/1GfYxGrvND0okME7EUU1+pWnu0msEDsLzx71Q73sSuL86qcmSNno
2QMvpe8srXnM9fgcnojvc5bx0fWiH8+GccvNDP+7O4tFyGJYHb8ixtW+//Csmt97
V+vika4h7E51OWPChZUAZbsvyx7DvohvsQPHJsML5tugfj/r6J5PvI0Izo0k+kFR
Y34KgV8V1Sx5RF/gixGCe4557bttAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU9y96
9zs64Pmw7ZS+qzOsGNW5RxQwHwYDVR0jBBgwFoAUCfsxNuzV49fPALMsEh8S6K/Q
pgEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5RjlDLzFEMjI5OTZFN0EwOTExRURCRDQyMjE4NUYxMjIyNDY4L0Nmc3hO
dXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0Nmc3hOdXpWNDlmUEFMTXNFaDhTNktfUXBnRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTlGOUMvMUQyMjk5NkU3QTA5MTFFREJENDIyMTg1RjEyMjI0
NjgvQ2ZzeE51elY0OWZQQUxNc0VoOFM2S19RcGdFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwzG20yCSwQhD49OFjQgvRlA//5PFYBmDu
a5JRnHLRHPdnQUQyTKyJ4FSoZRz7q79qaEirjtl4pwZFX3TlKAjItSq/nkyVOAZd
HRV2q9QwkkMwp9DZCqUKmHxk4Zc9ufPCbM5FWy+gHHKwoZbadnHxRZDILX4jwYUs
8qC24mEWM2Ci3Fd81/WBAGBr653JABv2FgFvEar/0CF2NhEzR66f2X8M33SULUgp
DVrrG5o9RsWmfIbQ/ya0E02+SIKEnKS0cA0Ix8X+KAnNVY8IHJ+LxgK79tkSj50B
sOaVRW6v6qlGwPE48VSxtvenxuqxmPQfFHlNjD/S+tqsutYois8q
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:27:41 2025 by rpki-client