Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File: PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier: b/Ux5Fw5YINKTFpdItZ6yhVku/vYWuee+cJVQ2VIXxc=
Subject key identifier: A2:62:63:40:11:36:C7:A1:02:77:7B:6F:DD:79:52:CA:71:18:AC:A8
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer: /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial: 0382
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number: 0382
Signing time: Wed 05 Nov 2025 03:43:17 +0000
Manifest this update: Wed 05 Nov 2025 03:43:16 +0000
Manifest next update: Fri 07 Nov 2025 03:43:16 +0000
Files and hashes: 1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: kADS57kN+ggfA/TPts2YJ1B3mfhO9arLWU8kTqQQBOM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 898 (0x382)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Validity
Not Before: Nov 5 03:43:16 2025 GMT
Not After : Nov 7 03:43:16 2025 GMT
Subject: CN=690ac7d5-e0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:d3:45:b0:f5:77:31:3f:62:32:c1:38:cc:
3e:62:ab:cc:24:11:87:b6:34:81:d5:ca:d8:2e:97:
9f:9b:9a:1d:21:df:fe:fc:2c:3f:0a:14:ec:71:50:
e9:aa:bc:ee:61:7a:3e:f9:95:d3:44:e4:70:58:44:
07:43:01:02:08:6b:de:4c:60:e6:e3:ce:98:ff:ce:
8f:35:f7:9e:ee:61:4d:bd:ff:99:be:a0:b7:67:4b:
77:ca:56:fb:ba:10:3c:35:18:34:5a:f9:71:e3:0c:
ec:6a:43:5c:96:f6:e8:df:5a:62:44:6b:a7:87:c4:
24:ea:de:a4:c5:9d:d0:06:c9:c7:bd:1e:8b:e6:1c:
a3:03:d6:b9:f5:6c:06:61:1e:a6:1a:6a:99:c3:06:
24:e3:c3:63:56:72:89:59:5c:92:73:4d:cf:9f:a4:
13:84:76:aa:8b:43:4a:51:8a:e6:44:2d:7b:e2:71:
7c:e0:f5:25:f0:f4:0e:26:bf:90:f0:00:43:ac:9f:
81:e0:d1:21:ff:28:6b:dc:9c:14:a5:7e:b4:52:96:
06:bd:59:1b:73:b3:6a:9c:8e:cd:8d:14:ab:65:98:
fd:c8:b0:16:9f:ae:21:5a:4e:b3:84:4f:c9:c8:f2:
fb:86:05:15:b7:9e:ac:84:8d:84:6a:61:51:b7:9e:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:63:40:11:36:C7:A1:02:77:7B:6F:DD:79:52:CA:71:18:AC:A8
X509v3 Authority Key Identifier:
keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:28:22:a6:df:98:38:3d:00:ce:11:c1:be:bf:fc:1f:e0:fd:
0f:87:7e:3c:d9:7b:20:62:a2:1c:99:3d:b3:8e:de:b7:88:3c:
3f:4b:15:0d:de:2d:28:70:9e:a8:3f:99:5b:7b:9e:11:7e:7a:
6f:38:e0:1a:70:5b:0f:ac:f2:3d:2c:68:1e:29:8d:14:3d:a7:
26:dd:60:ed:29:f0:db:a6:ec:c6:f3:97:a2:c4:2f:ad:05:f6:
ff:45:88:fd:e3:5c:14:19:aa:45:b5:3c:4d:6c:b7:81:82:4e:
35:ba:63:4d:52:28:97:36:45:63:2b:cf:e0:c3:de:8d:f7:af:
1f:c8:a3:b0:9d:71:a5:49:9a:d3:f3:e0:20:ec:12:81:1c:bc:
42:2b:1a:e5:53:e5:cb:38:cf:94:c0:bb:4f:f6:3d:a2:11:a9:
d1:bf:59:cc:9f:65:aa:55:07:6f:b2:3d:f0:dd:f8:60:0f:0e:
9c:91:a9:e7:c4:b1:bc:5d:9c:a2:ff:e1:3c:4f:f2:39:0c:f4:
0a:cc:6d:a7:0f:30:5b:38:09:82:67:c1:4f:84:ab:b3:2a:40:
fd:c4:b9:00:4a:8c:fd:9e:47:d0:d7:5e:59:11:75:3b:a4:dc:
b0:1f:2c:7c:2c:49:a2:1f:a5:69:bf:74:a3:2f:4b:08:15:5e:
d8:30:f9:7b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjZDRkZBRjExMC8GA1UEBRMoM0UwOUQ1QzNBQzI3QkZGOTVEOENFNUFGMDA0MTFB
MDE3NjgwNjU0QjAeFw0yNTExMDUwMzQzMTZaFw0yNTExMDcwMzQzMTZaMBgxFjAU
BgNVBAMTDTY5MGFjN2Q1LWUwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZjtNFsPV3MT9iMsE4zD5iq8wkEYe2NIHVytgul5+bmh0h3/78LD8KFOxx
UOmqvO5hej75ldNE5HBYRAdDAQIIa95MYObjzpj/zo81957uYU29/5m+oLdnS3fK
Vvu6EDw1GDRa+XHjDOxqQ1yW9ujfWmJEa6eHxCTq3qTFndAGyce9HovmHKMD1rn1
bAZhHqYaapnDBiTjw2NWcolZXJJzTc+fpBOEdqqLQ0pRiuZELXvicXzg9SXw9A4m
v5DwAEOsn4Hg0SH/KGvcnBSlfrRSlga9WRtzs2qcjs2NFKtlmP3IsBafriFaTrOE
T8nI8vuGBRW3nqyEjYRqYVG3nkCfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUomJj
QBE2x6ECd3tv3XlSynEYrKgwHwYDVR0jBBgwFoAUPgnVw6wnv/ldjOWvAEEaAXaA
ZUswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2Q0ZGLzAxNzZCMTAwMEFBMDExRUU5MTBGOUUzQTRBRDlFNkZDL1BnblZ3
Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BnblZ3Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjZDRkYvMDE3NkIxMDAwQUEwMTFFRTkxMEY5RTNBNEFE
OUU2RkMvUGduVnc2d252X2xkak9XdkFFRWFBWGFBWlVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+KCKm35g4PQDOEcG+v/wf4P0Ph348
2XsgYqIcmT2zjt63iDw/SxUN3i0ocJ6oP5lbe54RfnpvOOAacFsPrPI9LGgeKY0U
Pacm3WDtKfDbpuzG85eixC+tBfb/RYj941wUGapFtTxNbLeBgk41umNNUiiXNkVj
K8/gw96N968fyKOwnXGlSZrT8+Ag7BKBHLxCKxrlU+XLOM+UwLtP9j2iEanRv1nM
n2WqVQdvsj3w3fhgDw6ckannxLG8XZyi/+E8T/I5DPQKzG2nDzBbOAmCZ8FPhKuz
KkD9xLkASoz9nkfQ115ZEXU7pNywHyx8LEmiH6Vpv3SjL0sIFV7YMPl7
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:19 2025 by rpki-client