Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier: vIrnMlHgc6RZUS0fgbkYmcj+wuEZlfIXHSSyZurrug0=
Subject key identifier: 19:62:5C:F1:E0:46:48:AD:51:D1:85:53:AB:68:6F:20:98:64:71:AE
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer: /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial: 08C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number: 08C2
Signing time: Wed 05 Nov 2025 01:38:46 +0000
Manifest this update: Wed 05 Nov 2025 01:38:45 +0000
Manifest next update: Fri 07 Nov 2025 01:38:45 +0000
Files and hashes: 1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: KthTAdzOVHH9cCX/mSRJWKjF+e+tJepHKAlAqD+pwSo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2247 (0x8c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Validity
Not Before: Nov 5 01:38:45 2025 GMT
Not After : Nov 7 01:38:45 2025 GMT
Subject: CN=690aaaa6-0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:92:ae:03:e2:dd:83:19:9d:e6:35:66:26:
c2:ea:b3:3f:2c:15:5f:f5:4e:ad:af:9f:cb:26:f0:
5f:cb:fb:53:fd:9c:58:a1:98:36:40:fd:85:fd:53:
e0:a1:fc:8e:8e:b2:24:8a:b4:c6:ea:24:a1:52:6f:
66:b8:d9:3c:79:82:57:bc:aa:2f:2c:7d:fd:99:d6:
8c:0c:12:7e:b3:c7:ea:1d:18:68:42:48:32:5c:95:
4b:a8:26:2b:14:05:be:45:71:85:9e:3f:f6:e8:1e:
51:7e:c3:6f:c0:ad:c2:fb:ca:72:66:09:40:4a:e6:
26:5b:f6:fc:d1:cb:b5:27:48:a1:0a:34:47:9a:6a:
d0:02:36:44:67:d9:0c:cd:4e:c2:12:9a:a6:ff:f2:
80:ae:4f:38:af:ee:05:13:67:91:c4:a1:ea:67:89:
91:3e:c3:ab:09:82:27:8d:45:0d:4c:cb:1e:e4:c3:
ec:a4:7d:7a:4c:77:0b:6c:03:15:2c:7d:c1:98:c7:
c3:7f:11:f8:76:0a:3e:4f:c0:97:6b:b9:f2:77:0f:
aa:dc:ab:42:0d:9e:ab:89:9f:03:e4:6e:3a:3e:c6:
37:b0:3c:8c:51:07:9e:3a:8d:1b:c5:a2:63:16:c1:
68:4f:6f:dc:18:2f:ff:33:b8:0e:d9:80:08:34:2d:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:62:5C:F1:E0:46:48:AD:51:D1:85:53:AB:68:6F:20:98:64:71:AE
X509v3 Authority Key Identifier:
keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5d:11:73:aa:a0:08:6b:b6:79:b7:0b:19:e5:d3:a9:74:b1:5f:
40:b1:9e:32:49:e0:10:12:ed:7f:07:78:6d:a8:ae:0c:81:db:
30:11:b8:c9:f5:93:c4:3b:7a:e7:f4:54:6c:ef:47:74:a4:15:
7f:1d:6a:3a:63:15:50:4d:f7:f8:ed:6e:a2:6d:e7:ca:e3:41:
8d:8d:97:53:50:6b:bb:4b:64:85:29:9e:b4:6e:1c:4d:45:93:
3d:9c:74:fa:2a:af:06:41:ad:00:b1:a3:b6:c9:e8:75:55:e3:
a3:cc:54:6d:a1:24:71:28:18:b2:0a:96:dc:61:f5:1e:63:0d:
29:4d:61:f5:23:a1:56:ac:19:84:57:7f:aa:18:6f:25:97:b8:
94:e9:bc:c0:ff:07:76:b5:54:c4:85:d7:55:a7:4c:1e:e0:a6:
1f:72:13:e6:fd:b4:34:67:06:9d:41:2d:26:39:7f:e2:57:ad:
c4:c2:bc:59:de:3a:c1:54:b6:3e:a9:1a:30:b9:dd:b6:7c:3d:
c0:a8:1d:d6:db:03:b0:5f:90:e9:73:61:5a:39:23:d5:b6:35:
4f:a0:1a:4a:b9:c1:3c:4c:28:9c:17:44:fb:d9:da:2d:59:6d:
2b:f3:3d:09:fa:96:81:a3:42:30:ea:c3:be:1b:b9:75:8d:93:
be:d1:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:16 2025 by rpki-client