Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: 4mj7nUXzWSk4n9ixRF56/WhVuZfIqKcdAD1UTx1w4FM=
Subject key identifier: E9:78:EF:DF:36:43:B4:B6:46:2C:A8:D9:1D:F7:EB:61:65:71:99:A7
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 0240
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 0240
Signing time: Wed 05 Nov 2025 04:29:59 +0000
Manifest this update: Wed 05 Nov 2025 04:29:59 +0000
Manifest next update: Fri 07 Nov 2025 04:29:59 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: /cXnGRmy7Os4fIkBdOZS5QC0YBK3rxkCelHRsbNh3g0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 576 (0x240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Nov 5 04:29:59 2025 GMT
Not After : Nov 7 04:29:59 2025 GMT
Subject: CN=690ad2c7-a02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:da:53:56:ac:19:6d:92:1f:7b:f9:3b:9f:
93:47:cd:f4:8d:fc:e0:c5:30:7b:cd:ef:31:36:97:
d9:8b:b9:02:ed:eb:69:94:6f:f5:63:2e:35:86:0e:
92:15:2e:d1:f6:18:cd:09:91:75:b9:61:d6:fe:28:
06:1a:09:46:10:76:50:6e:c1:b9:0b:fb:a2:86:e2:
aa:f1:f7:85:e1:14:88:aa:83:3f:81:aa:9f:5a:5e:
fe:46:04:55:1e:a8:3b:e8:36:b2:05:3f:da:c5:81:
25:f9:af:b1:54:b0:6d:5f:71:d2:57:09:29:55:0e:
a1:aa:2f:60:f9:6c:47:b0:63:6a:00:aa:df:4b:e2:
98:db:8a:a3:bf:c6:b1:d1:9c:bd:39:ca:1d:02:a1:
c7:8a:96:0e:c3:9e:b3:37:40:17:40:38:f3:cf:05:
55:92:dd:27:9f:37:4d:a7:3b:36:a3:0e:26:9d:6c:
bd:b1:22:6b:b6:4b:36:43:7b:69:48:7a:23:54:10:
61:ec:56:27:28:2c:52:93:35:26:50:48:3c:21:c7:
6a:46:cf:e9:12:2b:29:91:cf:30:e4:3d:c4:67:f2:
fc:9a:e8:52:16:63:a0:ed:83:19:3a:8a:37:78:bc:
bd:86:c9:23:39:e2:16:31:af:c8:59:f0:c1:ec:47:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:78:EF:DF:36:43:B4:B6:46:2C:A8:D9:1D:F7:EB:61:65:71:99:A7
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a6:ae:07:16:d2:34:71:64:38:d4:70:57:10:ce:50:89:72:71:
59:28:d5:35:73:85:c3:54:27:42:03:25:d6:34:ea:5f:09:bd:
e8:26:21:a2:3d:7e:2e:26:a1:6e:50:54:08:3b:c2:7b:b2:db:
96:4a:0e:1a:af:13:d8:56:32:b0:13:de:08:95:dd:98:63:2b:
d7:00:44:ff:5a:97:55:f6:2e:e4:c8:51:8e:96:82:62:da:50:
df:a6:2e:cc:38:ba:e4:6f:2a:82:45:99:48:47:e8:2d:86:a6:
f5:a4:0a:73:11:03:4d:66:c4:97:3a:b8:54:a5:15:29:e7:42:
de:f4:7f:5b:a4:16:48:76:1f:3b:a8:c5:40:77:9e:95:17:41:
fe:1b:59:3d:a8:3e:ec:d9:c2:78:30:4d:a6:f9:c4:b2:5d:a7:
47:97:8d:9a:fc:e6:3c:e3:9a:17:95:75:24:ca:39:dc:5c:da:
65:47:13:9e:53:17:c4:b4:80:ad:33:8a:c8:26:57:04:1f:aa:
d2:ff:a1:86:3e:20:51:53:88:02:1c:19:82:82:eb:87:d4:b0:
a3:06:90:11:7c:74:2b:a9:f1:a3:41:36:f7:54:f3:0e:7c:d7:
3d:24:5e:f0:40:9b:73:78:61:7e:5b:74:67:73:80:ce:cb:39:
97:9c:47:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNTExMDUwNDI5NTlaFw0yNTExMDcwNDI5NTlaMBgxFjAU
BgNVBAMTDTY5MGFkMmM3LWEwMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtT9pTVqwZbZIfe/k7n5NHzfSN/ODFMHvN7zE2l9mLuQLt62mUb/VjLjWG
DpIVLtH2GM0JkXW5Ydb+KAYaCUYQdlBuwbkL+6KG4qrx94XhFIiqgz+Bqp9aXv5G
BFUeqDvoNrIFP9rFgSX5r7FUsG1fcdJXCSlVDqGqL2D5bEewY2oAqt9L4pjbiqO/
xrHRnL05yh0CoceKlg7DnrM3QBdAOPPPBVWS3SefN02nOzajDiadbL2xImu2SzZD
e2lIeiNUEGHsVicoLFKTNSZQSDwhx2pGz+kSKymRzzDkPcRn8vya6FIWY6Dtgxk6
ijd4vL2GySM54hYxr8hZ8MHsRx+hAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6Xjv
3zZDtLZGLKjZHffrYWVxmacwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmrgcW0jRxZDjUcFcQzlCJcnFZKNU1
c4XDVCdCAyXWNOpfCb3oJiGiPX4uJqFuUFQIO8J7stuWSg4arxPYVjKwE94Ild2Y
YyvXAET/WpdV9i7kyFGOloJi2lDfpi7MOLrkbyqCRZlIR+gthqb1pApzEQNNZsSX
OrhUpRUp50Le9H9bpBZIdh87qMVAd56VF0H+G1k9qD7s2cJ4ME2m+cSyXadHl42a
/OY845oXlXUkyjncXNplRxOeUxfEtICtM4rIJlcEH6rS/6GGPiBRU4gCHBmCguuH
1LCjBpARfHQrqfGjQTb3VPMOfNc9JF7wQJtzeGF+W3Rnc4DOyzmXnEc4
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:03:26 2025 by rpki-client