Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier: hmT0fI5JhPeWqdFSsMFeUM42LSPhthiFBvvHuLQZSfk=
Subject key identifier: 22:B2:7C:34:1E:19:5C:56:E0:76:82:2A:D0:7E:CA:2D:87:C0:47:AC
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 0533
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number: 0531
Signing time: Wed 05 Nov 2025 02:55:26 +0000
Manifest this update: Wed 05 Nov 2025 02:55:25 +0000
Manifest next update: Fri 07 Nov 2025 02:55:25 +0000
Files and hashes: 1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: NmsxnRvpf4Ik1yYlLthwv2xuEcqB/Sf1L+y4MnQOHF8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1331 (0x533)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: Nov 5 02:55:25 2025 GMT
Not After : Nov 7 02:55:25 2025 GMT
Subject: CN=690abc9e-3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:d7:ed:f8:a7:e3:ef:48:0b:75:51:b5:a0:
7e:8d:d0:fc:7b:38:e9:ae:9c:ef:ba:71:74:84:e2:
83:d4:60:4a:22:b3:14:51:6a:1a:d5:02:54:5e:b3:
a3:3e:a3:83:5c:23:34:84:9f:3e:1b:fd:87:5f:f9:
29:62:6c:50:2e:c7:63:29:42:37:2d:c4:c7:e8:6a:
0b:f4:70:c3:32:95:21:a8:84:97:39:25:32:d8:77:
4e:ef:d8:e2:e1:24:9a:79:37:c7:14:ab:e6:f2:70:
8d:16:99:5a:fa:d2:94:5c:b9:a1:46:e3:db:25:77:
89:06:da:08:c4:c9:bd:14:66:8d:41:74:5f:73:0a:
90:84:f9:81:ce:72:6a:73:b9:73:b7:e0:3a:d7:a8:
05:1f:46:45:ab:55:a1:d8:63:ad:42:eb:40:4a:0a:
ba:bc:f4:59:00:7f:0f:74:04:a5:38:12:66:0c:fb:
8c:09:6f:bd:08:8a:b1:02:6a:bd:8d:bf:29:14:44:
5b:87:f2:50:f6:4c:38:47:83:48:c3:7b:f6:22:70:
12:d7:bf:7e:38:e8:89:54:d0:4a:79:dc:34:e4:d1:
f3:8e:56:db:98:e2:60:da:cd:c8:cf:d3:d6:ef:a3:
00:3a:3d:30:1f:24:08:38:a5:2b:49:f7:48:17:c5:
9d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B2:7C:34:1E:19:5C:56:E0:76:82:2A:D0:7E:CA:2D:87:C0:47:AC
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:05:f8:04:03:50:39:ef:ad:01:89:54:ea:ec:bc:62:ad:e7:
d5:d2:07:20:aa:ad:0e:74:aa:fa:47:66:b5:8c:ff:39:16:42:
22:e4:0e:96:01:c7:90:e2:8f:cd:27:f0:b4:db:ca:72:b3:ef:
6f:a9:c7:41:a7:c2:83:4f:ef:4e:61:72:d1:cc:67:c2:8e:f8:
51:69:8d:f1:bc:88:32:24:f2:fa:61:bb:53:75:4c:b2:72:d9:
6a:d5:30:67:ae:67:f2:24:54:87:ef:03:11:bc:fd:a1:09:c3:
e4:1c:a6:55:03:a4:4b:e4:1f:e2:91:15:6e:94:da:76:88:9d:
5f:6c:99:40:e9:9c:30:f8:9e:43:21:b2:45:b1:97:4d:5e:d5:
21:da:42:32:27:4a:72:db:a9:94:f0:cd:74:fd:85:4d:16:68:
69:8c:be:28:91:88:6a:98:09:2c:eb:ba:22:b0:fb:5c:15:2d:
d5:17:06:7d:99:0f:56:82:8b:cd:db:4b:e7:07:ba:8f:74:03:
51:a6:de:df:22:e5:e3:db:67:b2:c0:5c:0a:73:a1:e2:80:ee:
34:f6:02:7a:dc:86:46:5d:d0:5a:ef:b0:36:24:bc:34:21:72:
fc:81:69:3c:a6:b4:c3:c5:64:1a:d3:44:e7:cd:48:da:88:49:
23:71:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:47:14 2025 by rpki-client