Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: PkKhX3UTabfNIiRau3Oex/luWNI/m0Mgw0Gg1wXGrGw=
Subject key identifier: 8E:58:6D:EC:5D:FC:1E:DA:8C:55:C4:A9:9B:0B:0D:B3:ED:D4:35:4D
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0DBB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D9B
Signing time: Wed 05 Nov 2025 01:03:07 +0000
Manifest this update: Wed 05 Nov 2025 01:03:06 +0000
Manifest next update: Fri 07 Nov 2025 01:03:06 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: J7raD3emCpmmMNDdD8mdxWO14i5FSUKdPZKMXKDnl48=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3515 (0xdbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Nov 5 01:03:06 2025 GMT
Not After : Nov 7 01:03:06 2025 GMT
Subject: CN=690aa24b-c520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:99:c3:e9:7b:ef:de:7c:d9:8d:78:71:94:
a1:da:10:52:b9:2b:bd:e8:e9:09:25:60:fe:c2:cc:
fb:0c:1c:86:c3:a4:26:17:2d:6e:57:fe:92:ad:11:
47:9e:81:50:a2:82:1e:93:2d:a7:5a:0e:3e:f4:5f:
fb:41:7a:fd:7c:66:c2:3e:5c:78:9c:e6:a9:7a:26:
9e:2a:1e:91:8b:e0:d7:b6:01:3a:22:b0:17:a0:50:
2c:88:9e:fc:b6:78:22:be:bf:26:67:65:94:83:92:
f4:8f:79:84:a8:b5:98:ab:c1:71:b1:49:f9:25:9a:
07:a2:ee:ee:89:25:bd:e3:e7:6f:b1:65:77:eb:b0:
9a:c5:bf:c9:f5:7f:2f:2d:12:a3:cf:d3:aa:75:44:
bb:1c:09:05:b8:d7:58:c3:52:a3:c6:74:38:9c:8a:
47:c0:c8:c3:2e:3b:e5:c3:b6:22:0d:9d:0e:a0:64:
54:7e:91:73:46:c0:53:cc:b7:58:4a:12:d2:fb:03:
28:3f:20:65:16:ed:77:a1:5e:8c:16:8f:ff:33:a9:
b2:f5:b2:ce:b0:78:8e:ab:d7:41:96:26:bc:2d:ee:
35:cf:c3:ff:af:1a:6a:af:6b:c4:99:96:6a:33:b0:
9b:1f:d4:b8:f6:56:fe:db:af:5c:f9:b0:3f:3c:bb:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:6D:EC:5D:FC:1E:DA:8C:55:C4:A9:9B:0B:0D:B3:ED:D4:35:4D
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a2:47:7a:77:e0:20:29:35:61:a8:ed:dd:6b:1b:30:6b:6a:
32:91:03:e6:de:e6:a3:75:5f:f1:5a:f2:dd:8d:e5:de:d7:45:
fe:f2:12:db:6a:80:1b:85:01:7c:77:dd:de:d8:01:e4:30:c3:
68:2c:91:77:81:8b:8b:d4:89:de:d0:cf:f4:ea:e9:ee:98:e4:
ef:f3:5e:ee:5f:27:01:a4:a3:01:08:91:5b:ef:86:8f:42:e8:
d4:ba:ce:b2:30:07:30:4b:ee:ed:8b:97:35:15:99:7c:99:55:
62:ac:8e:f5:2c:73:90:d8:b5:90:09:b8:f6:36:56:13:fb:6c:
20:21:8f:d3:ec:93:d9:8f:af:0b:a3:0c:9a:77:f2:0c:17:9a:
e3:80:64:d8:51:68:ae:c4:ce:ef:d3:ae:14:ca:4d:aa:d4:e4:
7a:e6:45:a0:b4:22:c7:67:53:22:97:6f:a1:c8:75:63:d2:28:
a1:e5:29:7d:17:b7:7f:54:4e:c6:35:78:a0:ef:6e:8c:14:72:
d4:b3:e8:59:a2:8b:21:8b:f1:a0:83:10:78:00:d0:c0:d6:05:
ab:cf:eb:fd:86:0a:32:53:20:a1:57:70:c7:49:bc:ce:7c:42:
76:db:ad:b6:25:ab:92:ed:d6:34:14:26:f2:b0:62:5a:68:fd:
dd:50:2c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:18 2025 by rpki-client