Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: tfwikpotXHTA3z17D+2GU4jY1Y+VfpI0TNA57lemh44=
Subject key identifier: CB:5F:B3:01:16:4A:C3:7E:51:C7:A8:C7:FA:E8:9A:40:6A:9A:77:64
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 0949
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 0949
Signing time: Wed 05 Nov 2025 01:31:16 +0000
Manifest this update: Wed 05 Nov 2025 01:31:16 +0000
Manifest next update: Fri 07 Nov 2025 01:31:16 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: by2eB3H5FyDlT1zd/uvSRagKxemt3en+29yv59acgbg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Nov 5 01:31:16 2025 GMT
Not After : Nov 7 01:31:16 2025 GMT
Subject: CN=690aa8e4-64f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:87:5a:ad:7a:93:d4:c3:e5:0b:f2:88:8a:
6f:5c:10:5f:fc:ee:ce:8e:8c:e2:ce:f6:be:3e:5c:
89:95:f8:ae:87:83:fb:f5:91:58:79:8e:84:82:9a:
be:a3:71:2e:73:58:d4:74:69:5f:a9:4f:51:a0:b1:
52:a8:ea:cb:43:b0:2c:0e:3b:27:34:01:20:85:32:
1a:39:6d:ae:26:53:4a:49:2d:85:94:d3:7c:a0:6c:
7f:ed:2e:ba:f5:18:ba:cb:62:e7:52:ce:54:d0:a7:
67:31:ff:eb:58:c2:19:4c:fc:04:30:c1:4f:97:b1:
f3:a8:97:5f:e2:ba:93:87:40:5b:41:52:41:b5:1b:
b1:46:a3:77:58:3b:2c:b4:ce:87:22:34:94:d4:c2:
cd:69:b2:52:b4:27:ae:45:23:b1:2f:21:6e:cc:1a:
b2:78:45:44:c9:f8:9e:79:ba:cf:dc:b7:17:e0:dd:
fa:36:98:f8:ed:01:85:69:5b:bb:af:eb:55:76:9e:
be:ea:46:9a:46:e4:1e:3b:23:eb:c5:1a:50:3e:12:
25:ea:9e:40:c1:5b:84:43:93:fd:cc:8f:6c:e5:d1:
d5:27:c0:c2:f7:bb:a7:49:5e:48:6d:79:c9:06:af:
bc:79:fa:87:32:a7:f5:ba:f2:cc:0e:98:2b:59:c2:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:B3:01:16:4A:C3:7E:51:C7:A8:C7:FA:E8:9A:40:6A:9A:77:64
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8c:94:64:04:76:91:a3:69:16:a4:c5:d1:61:bf:a9:61:4b:f5:
48:d9:76:18:26:42:d4:4a:9f:e6:63:04:ff:fb:72:8c:a0:52:
3c:8e:6c:d1:90:9d:d8:7f:b2:81:28:a6:d7:aa:44:41:a5:dc:
c8:6f:35:cd:b8:61:7c:e1:ef:f1:ba:e3:d1:6d:c9:f4:90:c2:
28:a7:76:45:ad:3b:88:01:0b:0e:84:db:d3:97:17:3b:6f:a1:
94:c6:b7:62:29:c1:b1:69:2c:0e:36:bc:c8:7d:07:c0:21:31:
6f:67:a1:37:ac:af:8c:1d:fb:26:c7:fc:07:88:50:20:b1:b4:
54:a7:4b:e9:80:fe:31:d2:2f:5d:d6:10:98:fb:d4:e7:69:25:
71:4a:f7:8a:91:ea:9b:5a:44:29:bf:89:41:a8:dd:86:ef:95:
ee:7a:81:e9:aa:17:4c:30:f1:e0:09:23:59:ec:0b:de:15:03:
bf:e9:b4:83:ef:73:5f:4d:f5:df:8a:23:e6:6e:3f:2f:ae:65:
b7:d0:af:5f:b0:38:9e:df:df:b6:4b:ba:bb:e9:6b:75:65:c9:
a4:d4:e0:b9:64:d1:ad:b3:df:ef:e4:01:e1:bb:6f:cc:e9:a3:
cb:bd:de:f1:0d:11:82:f4:93:8f:db:01:4a:d3:0e:28:e2:d1:
69:3e:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:40:36 2025 by rpki-client