Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: 4OiB+oQNlgC7epfUalf06QJy/XOVr0meZx9SumQT1GY=
Subject key identifier: A0:CB:74:4B:FB:16:BC:00:5B:83:DE:2D:35:3A:61:E7:AE:76:BE:F5
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 02AD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 02AA
Signing time: Wed 05 Nov 2025 04:17:40 +0000
Manifest this update: Wed 05 Nov 2025 04:17:40 +0000
Manifest next update: Fri 07 Nov 2025 04:17:40 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: UpigvK37icxVcckBihxoBnHziPZ8SN7Z2/9FgRaEirw=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Nov 5 04:17:40 2025 GMT
Not After : Nov 7 04:17:40 2025 GMT
Subject: CN=690acfe4-3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:f8:4c:18:29:52:80:2b:f4:44:6c:cc:42:
5f:5f:a3:6a:e3:84:e6:53:cf:ba:10:4d:85:ed:2c:
05:4c:11:9b:40:63:3a:30:d9:13:05:fd:a0:19:70:
c1:35:39:e3:ab:04:9e:9c:d5:52:4e:ee:7a:7e:46:
40:b4:fe:63:51:ac:56:9c:19:02:42:13:a3:3a:8d:
5c:af:f1:34:63:7d:8e:f3:72:b3:da:cc:e7:9e:30:
88:db:03:55:a7:c3:62:71:bd:30:a9:14:65:d2:8b:
56:f3:65:04:ca:ae:59:6c:44:12:22:bd:4d:1b:38:
f3:cc:d5:ca:52:17:b6:4f:55:0c:36:fc:3c:0b:89:
77:da:4c:df:2d:0b:8b:81:40:d9:f5:c1:d2:b0:53:
2f:6f:23:27:12:c1:b0:19:c5:06:a6:2f:2e:20:ec:
cc:aa:c3:4a:49:83:08:4d:cd:1e:41:2b:a6:cb:e6:
36:a4:96:e0:45:6d:fc:aa:8e:7f:bb:62:67:34:fe:
e4:aa:0c:6f:4a:58:a4:0f:fb:1d:1c:06:dd:b1:74:
83:ab:31:61:43:b9:ee:fa:76:66:f6:d8:e3:b4:2c:
4e:58:cf:c3:df:6c:3d:1e:24:91:59:ee:b8:9b:ee:
f6:0c:d9:38:c4:07:f7:4c:2d:06:0a:47:66:f5:40:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:74:4B:FB:16:BC:00:5B:83:DE:2D:35:3A:61:E7:AE:76:BE:F5
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:e5:57:e5:41:bb:60:00:17:47:d2:04:a7:c4:1e:6c:13:
6e:0b:8c:d8:f8:aa:43:a1:94:15:1b:93:a8:1f:84:ad:98:63:
97:33:e4:02:c6:2d:cf:db:6d:5e:30:62:12:24:08:f8:db:38:
b7:55:6e:42:9b:37:63:13:a1:f1:bf:5f:77:2e:d7:fa:4d:b2:
7e:38:31:bd:85:b8:18:e6:c4:5a:60:97:1a:e6:49:37:36:5d:
67:ae:a0:e3:eb:d3:63:2b:29:ab:eb:33:b4:e8:07:76:7e:76:
31:df:2d:9a:5a:20:3d:c9:ce:a8:f8:3e:5b:8a:6b:15:b0:b8:
74:d0:86:50:5a:ee:62:50:35:e1:e5:b5:8c:fa:21:9f:a4:44:
97:90:35:e0:b9:92:c4:7d:0a:d6:ed:de:bc:fd:65:c2:7d:69:
f8:8a:d5:7a:6a:81:81:7c:f4:c9:1d:e0:2d:4c:db:90:86:65:
56:68:0a:af:10:2d:3f:f2:54:37:12:8d:6b:a6:3c:c0:da:e8:
0d:e8:fc:eb:81:1c:a5:02:ac:a3:37:74:92:9a:89:db:af:2f:
56:7d:81:4b:5f:93:81:e0:08:c3:73:82:18:bb:71:24:fd:fd:
fc:c5:79:67:3c:80:97:a8:b7:fb:72:fe:53:09:1b:61:e8:c0:
ce:88:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:01:58 2025 by rpki-client