Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: exlnq3pZdawfyo/de3+oM6fTHXj8BfN3+xh0t8f+MvQ=
Subject key identifier: 94:7B:92:AC:0E:12:69:17:25:E4:4B:F0:BE:37:30:9B:5D:9E:20:7C
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 044A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 044A
Signing time: Tue 04 Nov 2025 04:26:28 +0000
Manifest this update: Tue 04 Nov 2025 04:26:28 +0000
Manifest next update: Thu 06 Nov 2025 04:26:28 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: DRZht5vFVS6QJ45sTHht3/gyY8g/jRsWEbbILoZl5dk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 04:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1098 (0x44a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Nov 4 04:26:28 2025 GMT
Not After : Nov 6 04:26:28 2025 GMT
Subject: CN=69098074-c9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:69:9e:8f:c9:57:74:5e:be:47:19:b7:39:
d0:4e:56:91:1c:d1:52:db:a4:31:b3:47:4a:34:9e:
48:24:6b:6e:63:5f:35:36:35:a3:4e:ba:bb:3c:2b:
57:62:c4:4f:4d:c9:86:9a:34:c8:21:c8:0d:d3:47:
0c:ce:38:b5:37:fb:b9:68:ef:8e:fe:81:83:09:b3:
03:79:05:cc:5a:83:00:77:a1:76:d0:47:37:74:55:
2f:12:3c:a0:bb:63:3e:2b:03:fb:95:5e:d4:2b:52:
f2:27:34:b7:34:1c:3c:86:b7:16:82:5b:f3:6a:a1:
06:8e:58:43:c9:c8:f9:4e:e9:4b:bd:43:30:d4:28:
49:ef:45:e9:43:17:e3:e4:7c:95:95:91:ab:c2:62:
42:f5:32:d9:b3:79:91:f8:54:99:f4:d3:24:32:7f:
eb:4a:6f:a3:1c:f8:e1:05:f4:21:6d:e8:39:c1:d8:
97:13:ed:2b:df:6b:f8:a1:1c:f8:4c:33:ec:1f:a3:
dc:c8:2c:15:25:a6:c6:96:aa:4f:54:c6:5f:52:0f:
49:2f:96:18:8c:f0:d2:a0:cb:dd:84:28:49:18:9c:
f2:ef:f5:b0:90:dc:9d:89:b4:c0:01:85:a6:a8:5a:
6f:60:38:87:5d:80:40:a8:e2:53:a8:ad:21:99:94:
38:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:92:AC:0E:12:69:17:25:E4:4B:F0:BE:37:30:9B:5D:9E:20:7C
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:ce:4d:df:9a:44:bb:60:05:f3:33:d7:c8:bc:08:89:d8:2a:
8b:78:ce:a9:5b:d6:cc:61:ad:dc:38:36:9f:ec:3c:ac:8b:ef:
51:18:10:f8:0f:60:5c:8a:d2:6b:34:3d:9f:1f:78:7c:2f:11:
08:e2:f4:7a:8e:14:a6:42:2c:91:bd:80:c8:e2:73:cd:a0:37:
1d:08:a2:3b:f1:4a:b1:f3:80:34:d0:ee:bf:84:f0:58:04:49:
60:c9:08:14:6f:0d:3a:f1:41:4d:ab:ce:6f:65:d4:ec:c6:41:
66:ba:80:de:72:15:6c:bd:9f:16:5b:fc:b4:62:58:a8:fa:0a:
af:fb:93:10:1d:61:09:50:67:29:87:2e:56:80:fc:10:e2:64:
d8:2c:b8:f1:37:dc:98:37:6c:33:68:01:e7:f9:80:6c:88:06:
9d:7c:d5:df:f0:d1:a9:2a:25:b8:66:78:1e:82:98:5f:40:2f:
ae:f4:ff:0c:43:51:3f:57:3c:ea:6a:a3:57:f1:ea:6b:a2:4d:
d3:0d:b4:87:b3:2b:bc:ca:20:bf:10:bb:99:d4:38:7e:8a:7a:
17:56:5c:5c:19:e6:44:ce:44:c0:36:59:d4:ce:9e:1d:48:58:
e2:9b:34:dc:c7:ec:b8:b3:8a:3a:3a:53:85:1c:8d:ce:1e:93:
88:68:aa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:11 2025 by rpki-client