Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File: dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier: ZM3sfC4+JHfytwiVNm7iJ9wvLiLuyV0rlHFOYq3f4hc=
Subject key identifier: 32:19:A3:18:AA:DA:50:07:CB:6E:37:B2:F5:C7:7A:AE:D7:F0:C4:7C
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer: /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial: 01F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number: 01EF
Signing time: Wed 05 Nov 2025 04:42:09 +0000
Manifest this update: Wed 05 Nov 2025 04:42:08 +0000
Manifest next update: Fri 07 Nov 2025 04:42:08 +0000
Files and hashes: 1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: xPhR1XvU7LgwKQC+qKYFBQCDrocHqIntgjNj7DHzOYQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 496 (0x1f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
Validity
Not Before: Nov 5 04:42:08 2025 GMT
Not After : Nov 7 04:42:08 2025 GMT
Subject: CN=690ad5a1-d17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:fb:80:b3:9f:8e:aa:f6:2a:4c:7d:22:f3:
78:9f:51:3c:68:57:67:5e:13:1f:3c:c4:82:6e:94:
1c:c4:28:29:88:84:2a:6c:6b:b1:e9:2b:65:9e:24:
8a:4e:ce:87:3e:ef:c8:dc:f7:06:61:4c:73:5e:17:
51:ce:f4:5b:71:a7:0b:dc:40:57:38:c3:8c:7d:d7:
67:76:d6:29:84:1e:f1:f0:dc:c1:c8:32:bb:c3:03:
7f:6d:71:13:6f:a9:8b:5b:fb:56:e3:62:46:72:fa:
08:c3:82:2f:95:e9:3f:93:c7:b6:d3:55:ff:de:e7:
88:14:48:aa:8d:05:03:d2:60:a7:83:ee:77:a3:87:
c6:c3:c9:f9:29:5c:81:18:9d:68:75:23:28:3c:c0:
ff:9f:ac:26:28:df:05:72:ee:13:67:d6:4c:ed:a3:
f5:e0:5a:df:64:03:b5:48:a6:a9:22:86:a1:00:c9:
b4:bb:cd:6f:b5:62:ec:14:51:1f:33:a0:06:67:f4:
32:19:35:ec:cf:a0:6a:98:2a:fa:de:a7:73:aa:03:
2c:28:ee:53:b9:4f:38:ef:e5:73:01:34:22:92:f8:
d5:e1:20:7d:4b:8d:24:cf:be:f1:97:63:b9:41:80:
cb:e9:bd:36:9c:7c:1d:61:2e:b0:71:c4:74:81:0f:
c5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:19:A3:18:AA:DA:50:07:CB:6E:37:B2:F5:C7:7A:AE:D7:F0:C4:7C
X509v3 Authority Key Identifier:
keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:28:a1:12:89:0b:66:43:d8:bb:22:ae:27:12:43:f0:ce:62:
d7:f8:97:04:aa:c2:8c:60:0e:d7:56:31:bf:e3:44:c8:67:56:
80:24:7e:98:6e:c8:46:62:58:74:8e:fd:a7:fb:e4:1e:a8:55:
9a:b3:fd:a9:28:77:af:10:68:ac:79:58:53:7f:ab:be:ae:7e:
08:5b:56:71:18:e4:57:47:21:51:ee:e7:7d:b6:1b:67:dd:b5:
e3:c4:ae:25:c8:e1:e4:2a:69:f9:a7:da:70:26:de:d4:98:21:
bd:dc:6f:32:80:ac:ad:44:ef:6d:64:95:9d:94:65:61:5b:d3:
50:a9:a5:9c:6e:c4:5e:b7:a6:7c:a4:fb:85:8a:8c:e8:6d:90:
da:5c:01:a4:4e:8d:1e:f9:43:f2:ec:85:3b:c2:d4:2f:08:b4:
6e:97:04:21:8e:24:03:7a:c5:ac:6a:a5:7b:b5:55:a2:94:b7:
da:33:18:0f:6f:0a:b8:1e:ec:9c:88:b2:37:37:2c:b6:67:ce:
77:5b:d3:8d:8f:50:87:57:6e:db:62:00:f4:ba:22:eb:5b:0d:
18:f5:33:a9:a3:57:87:36:57:9f:bf:c5:b2:89:b6:a1:e6:9b:
50:87:64:38:81:e4:64:bd:5f:fb:ea:b3:8f:78:38:c6:21:bf:
74:e9:56:ee
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAfAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODM2QjFBRjExMC8GA1UEBRMoNzUxRDEwN0YwNTk5Mzg2NjQzODRBMzcwNzhFMzg1
OTc5MEJBMjhENDAeFw0yNTExMDUwNDQyMDhaFw0yNTExMDcwNDQyMDhaMBgxFjAU
BgNVBAMTDTY5MGFkNWExLWQxN2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxm/uAs5+OqvYqTH0i83ifUTxoV2deEx88xIJulBzEKCmIhCpsa7HpK2We
JIpOzoc+78jc9wZhTHNeF1HO9FtxpwvcQFc4w4x912d21imEHvHw3MHIMrvDA39t
cRNvqYtb+1bjYkZy+gjDgi+V6T+Tx7bTVf/e54gUSKqNBQPSYKeD7nejh8bDyfkp
XIEYnWh1Iyg8wP+frCYo3wVy7hNn1kzto/XgWt9kA7VIpqkihqEAybS7zW+1YuwU
UR8zoAZn9DIZNezPoGqYKvrep3OqAywo7lO5Tzjv5XMBNCKS+NXhIH1LjSTPvvGX
Y7lBgMvpvTacfB1hLrBxxHSBD8XXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMhmj
GKraUAfLbjey9cd6rtfwxHwwHwYDVR0jBBgwFoAUdR0QfwWZOGZDhKNweOOFl5C6
KNQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzNkIxLzQ1MEQ4MzQ4NDA0MjExRUY5QjgyQTU5Mjc2MkU5NTFBL2RSMFFm
d1daT0daRGhLTndlT09GbDVDNktOUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RSMFFmd1daT0daRGhLTndlT09GbDVDNktOUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODM2QjEvNDUwRDgzNDg0MDQyMTFFRjlCODJBNTkyNzYy
RTk1MUEvZFIwUWZ3V1pPR1pEaEtOd2VPT0ZsNUM2S05RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDKKESiQtmQ9i7Iq4nEkPwzmLX+JcE
qsKMYA7XVjG/40TIZ1aAJH6YbshGYlh0jv2n++QeqFWas/2pKHevEGiseVhTf6u+
rn4IW1ZxGORXRyFR7ud9thtn3bXjxK4lyOHkKmn5p9pwJt7UmCG93G8ygKytRO9t
ZJWdlGVhW9NQqaWcbsRet6Z8pPuFiozobZDaXAGkTo0e+UPy7IU7wtQvCLRulwQh
jiQDesWsaqV7tVWilLfaMxgPbwq4HuyciLI3Nyy2Z853W9ONj1CHV27bYgD0uiLr
Ww0Y9TOpo1eHNlefv8Wyibah5ptQh2Q4geRkvV/76rOPeDjGIb906Vbu
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:34:34 2025 by rpki-client