Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File: yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier: thI3lqrY6QcNfY3+9ObLaVNF6y9fS5CyAxx5uvBMfUk=
Subject key identifier: 1C:52:C1:68:71:04:51:12:1A:DD:A2:DB:ED:7D:EB:00:69:50:9E:05
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer: /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial: 058B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number: 058A
Signing time: Tue 04 Nov 2025 03:54:38 +0000
Manifest this update: Tue 04 Nov 2025 03:54:37 +0000
Manifest next update: Thu 06 Nov 2025 03:54:37 +0000
Files and hashes: 1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: EVpDWM8Dgd16/LtdEi3ZeI+tlC69+L525JQXprsGAqg=)
2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1419 (0x58b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670369AF, serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Validity
Not Before: Nov 4 03:54:37 2025 GMT
Not After : Nov 6 03:54:37 2025 GMT
Subject: CN=690978fe-1437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ce:3a:60:07:9e:2b:fe:1c:01:56:e0:d8:b8:
32:c6:79:52:c5:c2:6c:6f:bb:00:5b:cf:b1:1d:ed:
4f:1a:e2:76:fa:0c:2a:3a:ee:5c:c7:45:9b:67:3b:
69:cc:d8:d8:77:be:cb:05:f5:94:b7:85:e5:0d:6b:
87:8f:31:0b:3a:54:ff:a3:a3:14:a5:b9:bd:ea:87:
3a:c4:55:94:9f:ed:60:9f:11:27:80:c9:e5:ee:5b:
e8:5a:98:47:f0:29:7e:38:cc:df:75:3a:ae:c7:9b:
e1:a3:62:7b:eb:95:36:b7:91:42:b5:96:da:a4:f3:
5a:ce:7f:30:ca:6c:f9:ff:e5:5c:e1:c3:7c:11:b7:
79:02:a4:8f:dc:78:14:e0:91:6e:c2:45:fa:cf:f1:
63:2d:3f:39:15:6d:9e:a1:0d:8e:22:29:a3:e6:a3:
a9:0d:40:86:74:f8:6a:6c:ed:1a:25:70:5b:aa:55:
20:59:14:25:c5:f4:79:c8:41:37:26:41:17:b9:79:
34:19:18:57:3e:c0:fa:4b:73:dd:cd:c5:77:95:3c:
4f:cc:ee:cd:e1:f2:24:3e:6b:57:10:48:5f:e4:6d:
1c:e3:de:f4:62:05:49:16:96:c5:2d:c4:2d:01:98:
81:77:bf:f0:77:5d:da:33:d5:e0:0e:f8:ac:4c:11:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:52:C1:68:71:04:51:12:1A:DD:A2:DB:ED:7D:EB:00:69:50:9E:05
X509v3 Authority Key Identifier:
keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:96:e0:17:48:3d:e0:ec:ed:da:7e:14:d4:37:9e:23:92:
dc:68:b1:43:5f:11:c7:46:0c:5c:9d:fc:94:70:9a:76:31:76:
a0:c5:25:22:c8:84:df:8e:ab:95:2e:aa:60:21:21:cd:c3:c1:
cf:a9:b9:9f:e4:2c:bc:25:de:9d:ee:24:ac:3d:1f:e6:6a:31:
07:4a:6a:6b:ff:23:a6:ce:ce:b2:38:74:66:b2:00:ef:42:bb:
93:d5:7e:bb:71:e8:37:ce:a9:16:22:f1:a7:c8:1f:24:28:ad:
1d:f9:48:e7:cf:22:ea:62:d4:2e:45:d1:81:4a:d8:3c:fc:a2:
c7:81:4f:b8:16:d0:35:d0:02:d6:65:b2:ab:53:a6:d0:d1:73:
27:e3:c1:ed:6f:8b:13:dc:c4:f6:23:d9:92:2d:00:54:44:54:
e6:15:dd:f9:a0:1b:38:3e:bb:e5:61:76:a7:7e:29:69:11:23:
f7:fe:bf:2f:c1:60:b7:ae:c7:44:bb:51:3e:80:15:c2:aa:2b:
03:e1:0d:30:da:a7:7e:49:ae:27:b9:d2:83:ea:35:69:d0:6e:
9a:eb:96:02:9f:bd:4e:f6:0d:2f:9c:be:9f:e7:33:07:53:19:
7a:ac:be:1d:46:df:38:4c:bc:5a:b2:1a:5c:42:be:3e:4e:fe:
ee:69:dd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:36:07 2025 by rpki-client