Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
File: ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft (raw, json)
Hash identifier: E4MwtbtFLSQYXufdlL5NBN5nfm67sJUrrst8JF8fQHI=
Subject key identifier: 08:6C:50:9B:84:62:40:1F:2D:E4:E1:3B:28:31:49:F5:9F:E6:68:C1
Authority key identifier: 38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
Certificate issuer: /CN=F3674908AF/serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Certificate serial: 83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
Manifest number: 82
Signing time: Wed 05 Nov 2025 05:31:30 +0000
Manifest this update: Wed 05 Nov 2025 05:31:30 +0000
Manifest next update: Fri 07 Nov 2025 05:31:30 +0000
Files and hashes: 1: ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl (hash: i0ikvhdQPiiw3/ax6MABANJNbgp8aaBJruhUCUPz73g=)
2: 1F963ED8564511F0A6FF3AF2DAE4EC9C.roa (hash: X2krD4jdJ7pGQ3zXFaC89RNcw5IbwbOm7CUbTFo1if4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674908AF, serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Validity
Not Before: Nov 5 05:31:30 2025 GMT
Not After : Nov 7 05:31:30 2025 GMT
Subject: CN=690ae132-7703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e3:4a:b5:99:e5:22:9b:30:88:76:fd:2f:70:
7c:35:9b:cb:66:91:95:b3:47:66:b5:1f:46:83:18:
5f:ee:26:3d:ac:55:3a:6d:56:9c:e6:7d:53:06:a8:
c7:1c:b3:16:5a:8b:df:ec:c4:7a:39:a7:de:3e:f6:
cd:1e:fc:8b:aa:cd:94:47:7e:25:e0:89:db:f1:0c:
19:9c:31:75:08:08:03:3e:29:a5:55:4c:90:68:aa:
c9:63:e1:aa:5b:79:a2:25:86:d8:46:9b:7d:4b:c7:
0b:a7:14:73:61:0c:fd:8d:e2:36:a9:89:4d:5a:47:
ec:7e:4a:47:9e:82:cf:14:3a:93:a3:ce:70:2b:43:
22:74:30:b5:e3:9c:9a:3e:52:38:09:86:2e:20:2a:
10:34:ef:12:9a:66:98:34:e0:22:ea:64:69:b1:4a:
f3:42:e1:4f:6a:62:88:22:01:35:df:d6:04:c8:15:
64:ca:29:57:d0:39:f5:59:8c:1a:59:8a:c6:34:2d:
73:73:e2:94:c6:ca:8e:aa:b0:40:4b:72:70:01:97:
69:45:60:23:7e:02:47:c8:e9:74:66:06:16:8c:4d:
15:46:98:84:52:fa:27:ae:17:b9:7a:69:b4:66:2c:
25:82:98:84:8b:f7:ad:7f:5b:bb:0f:d5:30:c4:fc:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:50:9B:84:62:40:1F:2D:E4:E1:3B:28:31:49:F5:9F:E6:68:C1
X509v3 Authority Key Identifier:
keyid:38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7f:16:ad:9a:fd:b2:71:54:15:05:7b:b3:93:11:2a:b2:3b:
be:9e:cf:90:8f:9e:bd:1e:ab:85:7c:e6:e7:4f:aa:2d:af:e9:
ce:68:d8:82:ba:ca:74:e4:ac:07:96:9f:0a:d0:8a:b8:56:de:
9d:57:9e:ea:f1:c0:dc:7d:64:4c:f5:07:88:30:ee:e2:84:75:
fc:50:f4:f5:2c:b2:38:a6:90:5e:cd:69:89:70:d6:6d:e7:af:
ff:47:50:57:3a:c4:1d:0a:f7:51:3f:92:ee:38:83:e4:f0:50:
77:f6:85:5a:c6:44:38:fc:28:fd:5e:e4:b9:83:0e:37:56:5d:
a2:b6:11:6a:7e:57:21:cc:e7:34:f4:a3:80:fa:11:a8:66:fd:
b1:ef:98:62:b0:d9:4e:f1:2c:c6:ff:0f:11:fb:fd:e5:3c:34:
17:f5:2c:c7:19:b3:16:4b:6d:ed:cb:6e:a0:a2:30:08:cc:34:
7a:eb:7f:d1:94:e6:46:5c:fa:a2:d1:80:8a:b9:c4:c3:62:51:
58:2a:19:ec:03:4d:f6:c5:ef:0a:e7:8a:1b:26:a1:20:2e:7d:
03:35:69:e4:44:10:3e:8e:dc:35:a8:bf:4a:a1:4c:b7:84:90:
f8:51:0d:7d:b3:07:f4:fe:af:f1:11:fa:d8:07:5a:ed:ee:f0:
72:2c:54:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ5MDhBRjExMC8GA1UEBRMoMzhEMjE3QkJDOTk4OUY4QjFDRUMxQjNBNDM2MDFG
MTFFM0QxMUU0QjAeFw0yNTExMDUwNTMxMzBaFw0yNTExMDcwNTMxMzBaMBgxFjAU
BgNVBAMTDTY5MGFlMTMyLTc3MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+40q1meUimzCIdv0vcHw1m8tmkZWzR2a1H0aDGF/uJj2sVTptVpzmfVMG
qMccsxZai9/sxHo5p94+9s0e/IuqzZRHfiXgidvxDBmcMXUICAM+KaVVTJBoqslj
4apbeaIlhthGm31LxwunFHNhDP2N4japiU1aR+x+Skeegs8UOpOjznArQyJ0MLXj
nJo+UjgJhi4gKhA07xKaZpg04CLqZGmxSvNC4U9qYogiATXf1gTIFWTKKVfQOfVZ
jBpZisY0LXNz4pTGyo6qsEBLcnABl2lFYCN+AkfI6XRmBhaMTRVGmIRS+ieuF7l6
abRmLCWCmISL961/W7sP1TDE/D2xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCGxQ
m4RiQB8t5OE7KDFJ9Z/maMEwHwYDVR0jBBgwFoAUONIXu8mYn4sc7Bs6Q2AfEePR
HkswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0OTA4LzVFRDQ4NjBBNTY0NDExRjBBNUE0QjdFRERBRTRFQzlDL09OSVh1
OG1ZbjRzYzdCczZRMkFmRWVQUkhrcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09OSVh1OG1ZbjRzYzdCczZRMkFmRWVQUkhrcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQ5MDgvNUVENDg2MEE1NjQ0MTFGMEE1QTRCN0VEREFF
NEVDOUMvT05JWHU4bVluNHNjN0JzNlEyQWZFZVBSSGtzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArfxatmv2ycVQVBXuzkxEqsju+ns+Q
j569HquFfObnT6otr+nOaNiCusp05KwHlp8K0Iq4Vt6dV57q8cDcfWRM9QeIMO7i
hHX8UPT1LLI4ppBezWmJcNZt56//R1BXOsQdCvdRP5LuOIPk8FB39oVaxkQ4/Cj9
XuS5gw43Vl2ithFqflchzOc09KOA+hGoZv2x75hisNlO8SzG/w8R+/3lPDQX9SzH
GbMWS23ty26gojAIzDR663/RlOZGXPqi0YCKucTDYlFYKhnsA032xe8K54obJqEg
Ln0DNWnkRBA+jtw1qL9KoUy3hJD4UQ19swf0/q/xEfrYB1rt7vByLFSE
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:11 2025 by rpki-client