Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: nrYq1qK0G+Hg5/adiTwRiwP24cdVCFAF5Cvfp+QOweQ=
Subject key identifier: 49:8C:00:DB:FC:2E:01:C7:EC:89:7C:B2:6C:35:A9:CA:11:F0:92:9B
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 0348
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 0347
Signing time: Tue 04 Nov 2025 04:58:52 +0000
Manifest this update: Tue 04 Nov 2025 04:58:52 +0000
Manifest next update: Thu 06 Nov 2025 04:58:52 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: 8rxIBXY5YgWZZZiOlv8R0qlfWghS5lJa3bG+PuQEA0Q=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 04:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: Nov 4 04:58:52 2025 GMT
Not After : Nov 6 04:58:52 2025 GMT
Subject: CN=6909880c-43db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:86:70:ed:43:60:4c:e6:90:d9:ff:b5:70:8d:
0f:04:16:95:db:fd:b2:70:cd:1a:df:e7:e2:74:39:
a8:dd:0a:ed:c5:72:54:af:45:17:06:84:da:06:97:
0a:4d:01:88:15:9e:d5:26:c9:52:f1:39:5c:48:ea:
5e:23:63:ee:fc:14:96:77:94:cc:4a:af:aa:93:12:
99:52:4a:e1:04:69:4c:47:f3:eb:0a:66:da:02:fd:
e4:81:f7:fb:17:f3:8e:70:83:72:90:bd:ef:d8:0b:
85:65:6c:f2:5c:34:33:72:6b:af:43:38:d1:30:69:
0a:3a:7b:b6:7a:46:d7:de:15:50:e1:19:2b:ae:d1:
57:04:fb:5c:90:7f:d0:8e:6b:10:ac:0f:24:bf:e7:
6e:e8:33:4a:69:97:aa:73:31:ff:1c:22:37:48:1d:
51:e4:3a:44:2a:d4:28:a0:5d:f9:bc:1a:9e:4e:81:
2e:5e:70:5f:d4:11:89:d2:c6:e0:e4:1d:b7:f2:14:
cb:14:b0:05:83:db:ad:c8:39:7c:b9:44:8d:51:18:
04:7a:e5:d0:a6:3e:92:82:d9:3e:ec:67:f4:da:d2:
ba:1b:1c:11:90:1d:57:44:7b:9d:f4:84:87:a0:5c:
4a:33:59:ec:9f:bb:ea:9f:4b:00:3a:00:1e:20:ef:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8C:00:DB:FC:2E:01:C7:EC:89:7C:B2:6C:35:A9:CA:11:F0:92:9B
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:eb:a2:ce:2c:df:a8:b8:a7:17:46:50:d2:df:c7:54:83:56:
ba:bd:bb:74:0f:03:2d:5a:06:b6:95:d0:1c:a0:6a:9e:eb:93:
4c:56:09:60:73:b4:00:be:81:97:44:ad:2d:c1:f0:b1:f9:22:
01:12:dc:9a:c5:bc:4a:c5:aa:a8:31:bc:60:94:58:be:6a:2c:
a3:fc:f4:17:d5:d8:47:27:9b:5e:92:3b:46:59:d6:45:59:0b:
8e:d7:21:7b:17:38:73:46:b3:c3:a2:33:86:14:eb:19:55:33:
b6:e8:e0:0b:7b:67:5f:43:22:77:69:32:7a:e5:76:84:fc:c2:
1a:46:1e:b3:26:28:0b:77:73:fc:5b:da:aa:73:be:7e:6b:d1:
d4:c8:68:2f:28:65:ba:da:6d:fa:d8:6d:4b:2d:5d:69:82:78:
fd:3b:00:af:7c:98:0a:2f:f5:93:50:db:10:99:e6:27:58:c2:
33:8d:ad:bb:d7:15:f6:3e:0e:e7:d0:54:8a:97:be:d5:cb:c9:
27:06:46:e9:f6:cc:5e:3c:7b:be:cb:70:32:a1:9a:7c:64:47:
51:20:c0:4b:a2:58:7d:de:c2:fc:b6:bb:37:58:b0:22:30:1b:
2e:c9:4f:44:1c:1e:1d:bf:e4:f3:ce:b9:8e:c8:3a:eb:17:da:
71:11:f4:b8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA0gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTExMDQwNDU4NTJaFw0yNTExMDYwNDU4NTJaMBgxFjAU
BgNVBAMTDTY5MDk4ODBjLTQzZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDehnDtQ2BM5pDZ/7VwjQ8EFpXb/bJwzRrf5+J0OajdCu3FclSvRRcGhNoG
lwpNAYgVntUmyVLxOVxI6l4jY+78FJZ3lMxKr6qTEplSSuEEaUxH8+sKZtoC/eSB
9/sX845wg3KQve/YC4VlbPJcNDNya69DONEwaQo6e7Z6RtfeFVDhGSuu0VcE+1yQ
f9COaxCsDyS/527oM0ppl6pzMf8cIjdIHVHkOkQq1CigXfm8Gp5OgS5ecF/UEYnS
xuDkHbfyFMsUsAWD263IOXy5RI1RGAR65dCmPpKC2T7sZ/Ta0robHBGQHVdEe530
hIegXEozWeyfu+qfSwA6AB4g79m5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUSYwA
2/wuAcfsiXyybDWpyhHwkpswHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDM66LOLN+ouKcXRlDS38dUg1a6vbt0DwMt
Wga2ldAcoGqe65NMVglgc7QAvoGXRK0twfCx+SIBEtyaxbxKxaqoMbxglFi+aiyj
/PQX1dhHJ5tekjtGWdZFWQuO1yF7FzhzRrPDojOGFOsZVTO26OALe2dfQyJ3aTJ6
5XaE/MIaRh6zJigLd3P8W9qqc75+a9HUyGgvKGW62m362G1LLV1pgnj9OwCvfJgK
L/WTUNsQmeYnWMIzja271xX2Pg7n0FSKl77Vy8knBkbp9sxePHu+y3AyoZp8ZEdR
IMBLolh93sL8trs3WLAiMBsuyU9EHB4dv+TzzrmOyDrrF9pxEfS4
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:48 2025 by rpki-client