Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: l+2a1HV1OeMgy0KhSD1/5XJo4ZGHyGP78Mrfnl0TsYQ=
Subject key identifier: D2:67:93:0C:86:14:4F:04:33:7A:1A:31:A4:47:99:61:3F:CD:A0:D8
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0968
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0967
Signing time: Wed 05 Nov 2025 01:25:24 +0000
Manifest this update: Wed 05 Nov 2025 01:25:24 +0000
Manifest next update: Fri 07 Nov 2025 01:25:24 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: e4sMEpjc3Y2i2a0o7TZ72/2uLSX1oUt7owipheu6BZo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2408 (0x968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Nov 5 01:25:24 2025 GMT
Not After : Nov 7 01:25:24 2025 GMT
Subject: CN=690aa784-d875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:f1:85:2d:23:f9:3d:29:b9:8c:ab:0f:06:
6b:dd:53:41:c1:51:88:63:85:db:93:a2:69:21:04:
c1:20:3e:1a:5c:7e:73:05:1e:c9:0b:0f:db:05:22:
b4:0b:a0:2c:de:3c:2c:41:d3:7a:be:5c:04:03:ee:
dd:fc:ce:b0:46:65:b9:2d:c9:7f:f4:79:fa:6b:f0:
e5:a1:69:56:c2:b4:98:0d:5b:fb:dc:bc:48:eb:4d:
06:4e:bf:c7:69:bd:1e:c8:f2:86:dc:4c:f4:87:b7:
69:ea:86:0c:6c:ef:2f:f2:bf:f9:78:2c:fc:8e:c9:
de:b6:06:73:6d:31:c3:28:a0:21:7d:6c:0b:7b:34:
b8:b3:e0:8e:cd:c9:28:c9:c9:73:01:15:34:87:5e:
44:c4:96:f5:97:58:6a:72:31:e7:f4:bc:cd:ab:a8:
f9:f9:8a:11:37:d8:e9:c1:a4:d4:d9:b1:b2:fd:46:
6e:12:10:47:83:bd:63:eb:7d:f6:3b:8a:35:48:78:
46:00:8f:42:e9:7c:54:72:80:7d:d9:d7:ce:c5:a7:
38:a3:c2:38:ba:34:76:8a:97:26:0d:33:ce:89:a1:
fd:e8:71:17:f0:31:5f:e9:75:55:f5:21:42:71:26:
ab:4b:27:44:59:fb:bc:62:67:96:0f:ba:52:4d:ee:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:93:0C:86:14:4F:04:33:7A:1A:31:A4:47:99:61:3F:CD:A0:D8
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:a0:5c:0e:bc:00:fa:a1:9c:72:88:9e:95:86:ff:fa:8f:70:
84:e1:1d:ed:1b:4b:55:2e:b1:34:fd:b0:49:a5:79:e4:80:37:
44:67:8b:26:16:f5:50:35:1a:0d:11:35:dc:2c:5e:22:ee:41:
6d:38:7f:d8:1e:58:84:23:fc:6d:c8:09:66:0a:2d:c8:29:53:
40:ee:23:44:58:b9:0e:e5:5b:2d:68:ee:22:21:c0:38:45:a0:
97:bc:b5:9c:b4:4c:a9:b0:71:80:0a:03:9f:3e:f0:67:38:0e:
ce:d0:1a:26:a8:49:9e:99:8e:13:9c:8b:57:42:3d:ff:db:82:
8e:44:3f:ae:de:e0:a5:0e:9e:c9:a7:bd:73:e2:cd:46:9b:45:
03:d3:17:e6:f4:44:f1:59:bd:f9:74:51:73:d5:fb:8d:5f:fc:
18:b7:fd:0e:8e:fc:9d:0c:e3:a9:9a:2a:98:38:92:34:0d:23:
46:b4:72:f2:b0:00:e1:b0:df:44:97:4c:c2:b6:c5:17:97:b4:
d4:d8:5e:65:b5:c2:27:cb:9f:a3:03:c3:3e:e3:97:22:0c:a3:
b8:5d:10:37:6e:9b:56:38:4c:2e:23:2c:7f:78:a7:63:ff:4d:
37:94:d1:af:92:c8:b7:2c:bb:36:b5:6a:52:99:c7:c8:57:d5:
e9:65:82:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:35 2025 by rpki-client