Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File: lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier: SRcjKp2AgLKKUHcpUn2QMGE1Y5hXe3IEmLKhDE1C6gM=
Subject key identifier: 05:C3:B2:D5:ED:35:61:A9:B8:63:31:08:AF:EB:CA:3A:72:A9:97:95
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 095F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number: 095B
Signing time: Wed 05 Nov 2025 01:30:27 +0000
Manifest this update: Wed 05 Nov 2025 01:30:26 +0000
Manifest next update: Fri 07 Nov 2025 01:30:26 +0000
Files and hashes: 1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: C88zx5TXmnUIzUda14fXmDLfSD1IzDsCG6ajvi+ZYyo=)
2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2399 (0x95f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Nov 5 01:30:26 2025 GMT
Not After : Nov 7 01:30:26 2025 GMT
Subject: CN=690aa8b3-fa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:04:f4:0f:9f:37:c2:df:cc:62:05:3d:df:90:
df:c5:21:77:e7:e1:5d:48:a9:10:bf:e0:aa:3a:2e:
05:fa:fa:d5:ee:e8:2f:a2:90:bb:47:1b:d3:a2:07:
f4:40:4d:2c:a2:89:cd:2c:c8:e9:6d:f0:9b:65:72:
b5:b8:b3:b6:ce:f7:3f:82:27:4a:94:c1:05:9f:f9:
66:e5:7e:6c:72:0e:b2:23:ca:c5:d7:2e:d5:2a:98:
48:fd:be:14:00:96:a9:3e:79:7f:25:ce:57:8b:53:
5b:e1:fa:62:4c:2a:ee:c3:c0:17:6c:e1:ea:66:cd:
55:8e:f9:89:5c:23:b6:07:bd:55:5e:bb:17:75:cb:
99:ac:0d:7e:26:08:c0:ff:98:dd:2e:6a:17:b5:f5:
0f:72:b3:a8:73:27:be:c9:93:0f:34:7a:c4:60:a4:
cb:45:76:a7:1b:39:0c:19:09:b7:3b:1c:14:cd:f9:
89:b9:5e:76:0c:bc:79:bd:47:6f:fd:2c:8b:1e:a8:
42:99:d9:bb:03:f5:9a:99:1f:b4:d5:d3:7a:96:0e:
25:8f:6b:00:79:59:16:ec:f3:0d:c9:d0:b9:e0:45:
a2:17:0d:d6:73:78:d8:26:1d:fa:1f:8f:d4:7b:58:
b1:ed:f9:f4:a1:1d:2f:aa:17:15:3e:72:45:de:19:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:B2:D5:ED:35:61:A9:B8:63:31:08:AF:EB:CA:3A:72:A9:97:95
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:2c:51:7f:07:67:2c:49:3e:9a:78:43:46:08:c7:6a:fd:8e:
0b:3d:ea:c1:62:1c:df:43:ce:e0:77:44:ce:bf:ac:60:8e:64:
d8:e7:e0:fe:2c:46:b6:26:c3:e9:72:6b:47:bf:2a:1f:03:bb:
e6:bc:3d:ff:f4:51:74:2b:77:e0:d3:be:07:65:f5:3b:d4:a3:
59:72:f2:7f:c0:e3:45:19:0a:ed:80:f6:30:93:5f:bf:4d:9d:
01:ad:7f:1e:68:18:4f:d2:88:89:31:c9:95:c9:25:f7:16:b3:
f7:cf:9d:87:b7:f4:29:b3:0f:ae:ad:44:68:ed:47:f6:40:94:
47:16:6a:da:42:9e:1f:66:7a:36:fe:ae:b1:26:85:6a:df:cf:
48:d7:74:c9:d7:60:2d:57:58:62:a6:58:98:52:0b:2b:c9:52:
2c:92:3c:6c:15:61:4e:0e:6b:cd:d2:23:4d:6c:87:b8:cd:f4:
c6:25:7b:1d:85:cd:a6:51:83:2c:70:bf:92:57:38:f2:b0:14:
8c:1d:bb:74:7b:6b:ba:09:4c:b7:45:f6:e6:d5:93:f3:3b:6f:
78:8d:63:57:d4:a4:12:92:59:7f:50:33:03:b2:99:9b:46:31:
ed:bf:45:12:b6:7f:f4:dd:c7:f0:83:80:2a:d7:c3:71:9e:f3:
c2:7f:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:27:48 2025 by rpki-client