Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File: vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier: MqS3ZTW6IXsf+NUtboGqop1ISzO+iNqE6dNcDwbatfI=
Subject key identifier: BA:41:96:58:86:E8:06:ED:DE:B9:69:5C:E6:CD:4F:00:68:70:A5:21
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer: /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial: 0352
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number: 0352
Signing time: Wed 05 Nov 2025 03:50:48 +0000
Manifest this update: Wed 05 Nov 2025 03:50:47 +0000
Manifest next update: Fri 07 Nov 2025 03:50:47 +0000
Files and hashes: 1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: 5sPbhsxXNOtyi/BO/TDe5tFAKIfc9LS+Gh0LtPO0ck0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 850 (0x352)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Validity
Not Before: Nov 5 03:50:47 2025 GMT
Not After : Nov 7 03:50:47 2025 GMT
Subject: CN=690ac998-9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:77:e7:9d:56:fa:58:0e:28:70:f3:d8:25:
f4:cb:d2:a7:99:01:a5:1d:39:9d:41:d2:ad:c7:e6:
db:04:0f:a2:c0:bb:c6:b6:d3:92:fe:dd:e6:c6:9a:
54:17:74:28:e6:6a:46:64:e6:c5:f7:cf:2d:7f:52:
08:da:e5:b9:cb:69:d5:94:a6:3f:96:22:b6:f8:4e:
bc:85:da:d3:8d:24:1d:cd:3b:7f:fc:f4:9c:d4:b1:
bd:6a:00:1b:31:74:b0:99:ad:47:ae:23:d5:23:dd:
28:90:f1:61:01:2e:63:34:73:60:59:bf:8e:db:1e:
a4:ce:58:49:33:a8:fd:38:2d:0c:37:84:a7:0d:11:
69:82:6b:17:ee:7f:11:56:53:df:a4:65:9f:15:2b:
60:91:24:81:bb:cd:df:f3:a1:08:64:64:71:de:c1:
64:35:cf:f7:d8:4a:0d:16:f5:b3:80:1b:02:14:4b:
03:51:20:af:f3:ae:27:80:94:50:07:b2:2b:ad:93:
cb:d1:8a:5e:20:ad:5b:64:e1:c6:df:fd:c6:a0:c2:
bf:e3:b9:dd:f6:bf:83:83:8a:e0:aa:dd:a8:e1:1b:
71:38:3b:34:81:6a:f7:92:73:50:f7:c3:80:9c:40:
b4:c9:be:d6:cc:b7:9e:42:a0:5e:23:3d:93:4e:3d:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:41:96:58:86:E8:06:ED:DE:B9:69:5C:E6:CD:4F:00:68:70:A5:21
X509v3 Authority Key Identifier:
keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:77:e7:f1:73:e1:18:9c:58:b9:ed:a0:09:76:f9:27:3e:27:
0f:3a:0a:a0:a7:26:8a:22:b5:7f:7e:af:17:47:81:2a:95:cd:
02:a2:b9:72:71:ba:65:db:94:69:d4:84:98:83:ba:d7:2d:cb:
85:58:a6:ce:83:b5:0e:45:0e:f9:66:e5:9e:2e:fa:08:61:77:
92:5d:26:d4:c6:4b:ea:d9:b7:70:ff:f2:7c:ae:dc:fa:9e:67:
f8:f9:60:cf:83:f7:8c:67:c2:4c:78:22:32:d0:8d:32:1b:36:
64:7f:05:1d:c6:80:d2:5e:b3:6f:19:12:9a:32:4e:f9:bc:4e:
4f:f3:d5:12:11:8d:58:cb:ef:09:19:69:3c:71:db:0e:4c:f2:
0e:27:71:f9:68:95:c1:c8:f3:30:38:fa:20:6e:26:76:05:b0:
69:04:85:13:98:b9:1a:24:81:50:c5:b6:cf:33:d2:6c:6e:87:
7d:16:c7:79:d7:10:24:5b:ab:b5:c6:7b:8a:ae:20:83:fe:71:
d9:08:f0:96:c8:56:17:b8:ce:4e:77:67:e1:eb:ae:38:71:06:
4b:64:39:1c:5d:ab:9a:1d:23:59:ff:32:4a:87:1a:22:01:6d:
ec:f9:05:70:cb:b5:7b:a0:6e:b5:86:97:88:ca:d4:88:0a:7a:
0c:d3:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:59:54 2025 by rpki-client