Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File: OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier: XLwUzyk9NvesJjIOC4klCp9pShDffJeJzPNuxBhCr/4=
Subject key identifier: 28:40:94:8C:03:75:14:F8:6A:1F:1F:E9:EB:D2:93:46:10:B6:27:3E
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer: /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial: 05D1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number: 05D0
Signing time: Wed 05 Nov 2025 02:38:18 +0000
Manifest this update: Wed 05 Nov 2025 02:38:17 +0000
Manifest next update: Fri 07 Nov 2025 02:38:17 +0000
Files and hashes: 1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: Kqqw3V9YkhcQSTgt2jvN2kiD3ByDUJiQF5g+8oAJTDs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1489 (0x5d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Validity
Not Before: Nov 5 02:38:17 2025 GMT
Not After : Nov 7 02:38:17 2025 GMT
Subject: CN=690ab89a-9370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:89:c8:58:d4:f1:56:be:c5:d6:25:63:13:
94:c0:24:bc:10:cf:85:c1:90:e9:62:4d:ef:1e:cb:
55:58:53:f2:12:c0:75:ed:74:09:56:f4:fe:1f:09:
01:a2:09:d6:8f:8c:ac:56:45:ba:03:61:7a:0c:16:
ff:44:88:ea:74:b1:23:09:ae:5c:99:90:e1:e7:ac:
02:55:83:4a:be:bd:89:d1:bb:24:75:2e:a3:20:03:
e1:e5:b1:42:99:77:47:8c:3d:f4:48:8b:d1:e2:52:
b8:df:c5:6a:84:c2:43:12:0d:bf:6b:b6:75:06:56:
dd:2d:f9:5f:94:0e:01:58:b7:c1:63:51:fd:c0:88:
a6:6d:6a:a7:77:3b:6a:a8:ed:51:26:f4:38:36:cc:
83:41:4b:49:7e:b3:a3:9e:f9:88:62:35:b2:9d:64:
23:3a:e0:6b:ff:5f:51:31:1b:ff:1b:c7:34:7a:8d:
ef:3e:1a:3a:01:3a:fe:f4:44:f8:83:b3:8a:ce:7e:
cf:32:49:70:af:4a:f3:ed:2d:9d:b9:17:9d:9d:17:
07:52:7a:90:5f:97:13:80:2e:7a:0d:aa:70:e1:b3:
83:36:bb:77:e5:56:95:f8:ef:c8:08:5e:4a:42:bd:
4d:b4:c9:8f:e7:73:45:3d:83:7b:f7:19:d1:69:20:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:94:8C:03:75:14:F8:6A:1F:1F:E9:EB:D2:93:46:10:B6:27:3E
X509v3 Authority Key Identifier:
keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e1:4d:18:4f:1c:bf:14:8d:a6:32:3d:86:b7:d8:c5:d8:6f:
73:43:22:b6:08:ac:4b:f6:4f:a5:e7:91:f5:79:25:5f:a9:dd:
6a:c7:fd:a7:fb:00:d2:5c:41:13:4e:2e:45:62:ce:e0:95:a5:
31:4c:f2:92:24:d5:c7:97:28:6f:dc:99:c5:27:be:38:33:10:
0f:ba:cc:3e:d1:8a:9c:14:60:52:80:7f:5c:4f:29:b7:3b:5e:
27:d3:71:1b:42:9b:d2:ec:1e:40:0d:dd:74:5d:93:1b:5b:23:
a2:a6:ba:1a:c3:32:d0:d6:43:4c:86:9d:85:ee:ed:22:12:e2:
c1:39:8c:d2:ad:7a:bf:25:3f:2b:35:a1:64:45:48:b5:e4:d3:
50:1e:dc:52:0d:02:f2:53:bb:eb:50:bc:96:6a:ae:49:35:9c:
d7:1a:cf:3a:3c:55:ec:5a:03:21:36:fc:24:70:87:65:cd:22:
86:00:30:42:22:6b:00:2d:df:e5:ac:5c:68:b8:3d:c3:52:db:
79:52:ed:86:5b:a0:95:ae:aa:ca:27:45:6a:c7:4b:4d:ff:d1:
09:9d:f6:7f:5d:5b:51:5f:27:ff:78:ec:47:f8:b1:03:c1:8d:
ea:fd:0f:57:71:88:ff:54:6a:e2:55:be:2e:3f:a9:e9:ae:b9:
76:51:00:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:41:46 2025 by rpki-client