Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File: Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier: ciaCmsCJTpU7/X2cCwy77oJqfpLZIr8kpN4onJXLrnA=
Subject key identifier: D3:F8:A9:1E:2B:97:39:9C:D2:53:A1:E3:28:B5:23:3C:E9:12:E9:66
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer: /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial: 0425
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number: 0423
Signing time: Wed 05 Nov 2025 03:24:12 +0000
Manifest this update: Wed 05 Nov 2025 03:24:11 +0000
Manifest next update: Fri 07 Nov 2025 03:24:11 +0000
Files and hashes: 1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: xcaRzIYBjPaQRQM9Yf7XbFtdnCeDt8Skjvve4dzKm2Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1061 (0x425)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Validity
Not Before: Nov 5 03:24:11 2025 GMT
Not After : Nov 7 03:24:11 2025 GMT
Subject: CN=690ac35b-0e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:06:e8:88:f8:db:6a:c5:16:ad:cd:a0:16:
a1:a5:5a:99:bc:96:f6:76:78:38:86:b6:aa:b7:3c:
02:f7:9f:21:2c:73:15:22:ce:e8:1b:e3:53:87:97:
89:b2:f8:e0:87:a5:7e:a0:43:b6:16:65:44:ca:80:
06:d2:96:15:dd:92:a6:5c:2c:17:ab:82:de:45:14:
b3:50:e8:a9:ab:47:fa:a5:fb:6f:12:50:29:8b:84:
72:14:5e:39:de:2d:56:a0:c1:ed:93:ac:d6:64:7c:
e0:52:3b:78:ee:ca:73:63:ca:49:f8:6d:e0:43:4b:
a4:56:5c:40:47:53:31:44:a4:94:40:f9:e3:42:4f:
26:e3:c0:10:4c:ce:80:d1:37:50:71:00:ff:4f:b5:
44:13:78:6b:9b:c5:9a:49:01:f8:aa:7a:02:19:35:
35:b4:d6:d6:90:02:c5:c0:03:36:00:ef:92:46:cc:
e6:44:e1:b0:a7:6d:f2:63:8f:16:ef:b9:db:72:ca:
a8:74:eb:75:37:1b:c3:79:f5:76:d8:76:d3:4d:cc:
4c:e6:e2:35:88:7d:2f:bd:19:a9:9f:bf:8e:40:f5:
34:73:14:44:24:53:46:5f:62:07:2d:51:64:82:e6:
f2:da:9f:fd:64:64:22:28:73:13:6a:59:0d:41:3c:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F8:A9:1E:2B:97:39:9C:D2:53:A1:E3:28:B5:23:3C:E9:12:E9:66
X509v3 Authority Key Identifier:
keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:89:e3:bb:7f:66:cc:08:12:db:b6:5c:0d:4e:1a:6e:50:68:
bb:06:bd:38:b6:48:6e:10:c1:3b:75:ab:75:53:dc:a8:5d:cf:
6d:bd:83:02:1f:53:c8:8c:25:b7:82:2d:90:0a:52:b2:81:79:
85:14:c6:60:6e:14:c7:e9:d2:dd:72:0e:80:93:d8:95:5a:80:
a3:ca:1f:17:81:39:fb:c5:d1:39:f9:16:e7:b0:ff:0a:b5:ce:
89:06:f7:ef:a5:f7:ba:d0:85:e9:55:42:81:c9:b1:be:1b:e3:
54:49:ef:71:f7:c2:f5:0c:a1:a0:10:43:bc:f6:db:cb:e8:c6:
00:ec:e1:ef:04:d7:aa:29:7f:1a:5e:cf:aa:5d:06:a0:27:4c:
ec:77:1d:f4:ea:fa:28:f7:b0:6f:44:47:26:3b:25:88:b3:f2:
ac:af:dd:0a:45:61:55:df:ef:cc:0d:09:66:22:69:bb:9e:67:
24:3d:ac:09:e4:19:2e:7a:8d:f7:be:b6:e8:d2:d2:2d:fb:1a:
89:f3:c3:02:fe:0e:fe:e4:23:71:56:fa:63:80:3a:b3:7c:b3:
ea:7a:e5:3c:60:c1:32:b2:60:5c:b1:20:a0:66:3a:5c:8b:dc:
b4:90:26:28:f8:4a:30:64:5e:96:5c:45:31:50:d2:35:48:a3:
d4:1b:b6:cc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYzMUJBRjExMC8GA1UEBRMoM0YyRTI1ODczRjkzMEEzRTJGNzVBNUMyQzYxNTYy
QjAyMjBERTY1QjAeFw0yNTExMDUwMzI0MTFaFw0yNTExMDcwMzI0MTFaMBgxFjAU
BgNVBAMTDTY5MGFjMzViLTBlMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiwAboiPjbasUWrc2gFqGlWpm8lvZ2eDiGtqq3PAL3nyEscxUizugb41OH
l4my+OCHpX6gQ7YWZUTKgAbSlhXdkqZcLBergt5FFLNQ6KmrR/ql+28SUCmLhHIU
XjneLVagwe2TrNZkfOBSO3juynNjykn4beBDS6RWXEBHUzFEpJRA+eNCTybjwBBM
zoDRN1BxAP9PtUQTeGubxZpJAfiqegIZNTW01taQAsXAAzYA75JGzOZE4bCnbfJj
jxbvudtyyqh063U3G8N59XbYdtNNzEzm4jWIfS+9Gamfv45A9TRzFEQkU0ZfYgct
UWSC5vLan/1kZCIocxNqWQ1BPGwdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0/ip
HiuXOZzSU6HjKLUjPOkS6WYwHwYDVR0jBBgwFoAUPy4lhz+TCj4vdaXCxhVisCIN
5lswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMzFCL0Q1MkMxODRBOTczMzExRURCNDIzNDQ4REYxMjIyNDY4L1B5NGxo
ei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B5NGxoei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUYzMUIvRDUyQzE4NEE5NzMzMTFFREI0MjM0NDhERjEy
MjI0NjgvUHk0bGh6LVRDajR2ZGFYQ3hoVmlzQ0lONWxzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiieO7f2bMCBLbtlwNThpuUGi7Br04
tkhuEME7dat1U9yoXc9tvYMCH1PIjCW3gi2QClKygXmFFMZgbhTH6dLdcg6Ak9iV
WoCjyh8XgTn7xdE5+RbnsP8Ktc6JBvfvpfe60IXpVUKBybG+G+NUSe9x98L1DKGg
EEO89tvL6MYA7OHvBNeqKX8aXs+qXQagJ0zsdx306voo97BvREcmOyWIs/Ksr90K
RWFV3+/MDQlmImm7nmckPawJ5Bkueo33vrbo0tIt+xqJ88MC/g7+5CNxVvpjgDqz
fLPqeuU8YMEysmBcsSCgZjpci9y0kCYo+EowZF6WXEUxUNI1SKPUG7bM
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:11:05 2025 by rpki-client