Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: O4tq0PiEV4c+tu7sFqD9KuZfACMC+L6eh3/+qyjg2Qk=
Subject key identifier: 5B:B9:10:DC:2D:50:D8:5C:9D:8B:7E:5E:95:AE:73:5F:8E:EB:D3:AA
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0625
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0625
Signing time: Wed 13 Aug 2025 02:21:00 +0000
Manifest this update: Wed 13 Aug 2025 02:20:59 +0000
Manifest next update: Fri 15 Aug 2025 02:20:59 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: w4r+tCN3NuiCQotHceuwA/TiW1paEWtGRKiyrZHOl7A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 Aug 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1573 (0x625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Aug 13 02:20:59 2025 GMT
Not After : Aug 15 02:20:59 2025 GMT
Subject: CN=689bf68c-2e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:59:48:83:b6:f2:10:a5:d5:18:80:2d:f9:
56:b8:e1:fd:a4:b1:24:49:f0:50:11:cb:11:21:12:
95:fb:44:f7:77:9e:d2:60:dc:60:4a:c6:dd:31:9a:
8a:5e:a3:6b:4b:5a:00:78:d9:10:36:f8:39:42:23:
8e:00:61:8e:cd:cb:93:0b:92:cc:91:74:03:81:00:
4d:c4:ee:55:be:24:74:3e:76:37:f4:ef:81:a1:08:
fd:ea:88:29:01:63:6b:de:7f:12:60:30:8f:15:0a:
01:be:6c:79:c9:68:7c:b0:bd:d8:12:62:76:c6:53:
47:70:67:b6:ba:59:59:7f:52:67:eb:94:51:9c:bc:
cc:67:f5:9f:1d:a5:1e:2a:09:b5:a4:0e:2c:86:0f:
97:79:23:aa:6c:ad:f6:bf:52:11:79:4a:56:6f:26:
00:52:bb:6b:6b:23:c0:09:2e:59:62:ee:97:36:f2:
4a:02:f4:b0:f3:93:a5:9e:e4:47:4b:b6:17:fe:c6:
d7:c6:e3:80:78:93:85:39:8d:ac:dc:29:f4:6e:ca:
66:57:e0:7c:8c:aa:e8:3c:7a:fd:4a:7d:39:93:55:
af:2f:0f:75:6b:bb:d7:05:7a:5c:9c:69:87:05:50:
83:49:b9:86:48:f3:5e:01:42:b7:07:d1:19:2d:e5:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B9:10:DC:2D:50:D8:5C:9D:8B:7E:5E:95:AE:73:5F:8E:EB:D3:AA
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8b:6a:b7:94:df:a3:76:22:bb:31:d0:38:1d:12:81:39:17:
7a:e4:68:fb:4a:a8:b8:dc:a0:49:89:c7:e8:40:9f:12:c7:f8:
f6:b5:c1:b5:91:ae:89:a4:3a:87:9a:e6:91:c8:5c:70:9e:ad:
61:2e:a9:88:3f:a1:aa:3c:1b:2d:f0:09:da:6e:4b:0f:e7:ac:
26:98:9a:c2:2d:54:dc:1f:af:6c:0e:37:02:02:bd:b9:0d:0c:
d7:67:19:75:c9:31:41:8f:58:61:f4:85:90:e2:df:79:6c:53:
0d:69:a2:a2:8e:99:25:15:43:e1:54:1d:14:b5:a8:78:94:5b:
a5:87:c1:9a:a4:8e:dd:c0:25:02:a2:8a:9b:95:12:3e:20:53:
ec:e3:34:92:0c:15:6e:b4:b3:0c:b4:f3:1b:05:f5:fd:cd:c8:
68:d7:84:f9:81:69:b5:82:92:53:ff:52:27:db:ca:02:5e:50:
cc:76:c3:0a:48:5d:b8:43:0d:9f:7a:18:25:2b:88:ba:37:34:
ec:a8:97:51:b4:5d:03:a3:21:e7:e7:f5:43:14:af:b4:24:cb:
e6:a3:50:90:4c:76:fb:3e:0b:a0:d6:ee:f0:b8:d5:ce:78:83:
05:c7:ac:12:d4:e5:33:c5:1c:c3:d5:1e:30:8c:2e:e9:81:bc:
9c:93:5c:b8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNTA4MTMwMjIwNTlaFw0yNTA4MTUwMjIwNTlaMBgxFjAU
BgNVBAMTDTY4OWJmNjhjLTJlN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6f1lIg7byEKXVGIAt+Va44f2ksSRJ8FARyxEhEpX7RPd3ntJg3GBKxt0x
mopeo2tLWgB42RA2+DlCI44AYY7Ny5MLksyRdAOBAE3E7lW+JHQ+djf074GhCP3q
iCkBY2vefxJgMI8VCgG+bHnJaHywvdgSYnbGU0dwZ7a6WVl/UmfrlFGcvMxn9Z8d
pR4qCbWkDiyGD5d5I6psrfa/UhF5SlZvJgBSu2trI8AJLlli7pc28koC9LDzk6We
5EdLthf+xtfG44B4k4U5jazcKfRuymZX4HyMqug8ev1KfTmTVa8vD3Vru9cFelyc
aYcFUINJuYZI814BQrcH0Rkt5VjpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUW7kQ
3C1Q2Fydi35ela5zX47r06owHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCui2q3lN+jdiK7MdA4HRKBORd65Gj7
Sqi43KBJicfoQJ8Sx/j2tcG1ka6JpDqHmuaRyFxwnq1hLqmIP6GqPBst8AnabksP
56wmmJrCLVTcH69sDjcCAr25DQzXZxl1yTFBj1hh9IWQ4t95bFMNaaKijpklFUPh
VB0Utah4lFulh8GapI7dwCUCooqblRI+IFPs4zSSDBVutLMMtPMbBfX9zcho14T5
gWm1gpJT/1In28oCXlDMdsMKSF24Qw2fehglK4i6NzTsqJdRtF0DoyHn5/VDFK+0
JMvmo1CQTHb7Pgug1u7wuNXOeIMFx6wS1OUzxRzD1R4wjC7pgbyck1y4
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:17 2025 by rpki-client