
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File: l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier: 11cS+O9tI0xyBbygptuX1CWgOCAAHe5ilmk5ERfq2PI=
Subject key identifier: D3:2E:49:B2:57:3C:4A:B7:68:9D:A0:ED:61:1E:66:E6:44:15:79:07
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer: /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial: 067E
Authority info access: rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number: 067C
Signing time: Wed 05 Nov 2025 02:20:04 +0000
Manifest this update: Wed 05 Nov 2025 02:20:03 +0000
Manifest next update: Fri 07 Nov 2025 02:20:03 +0000
Files and hashes: 1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: WE5UI4dJAKNrx2XZWrS06RBwQkFuf39XCtR+3NmKg9M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1662 (0x67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Validity
Not Before: Nov 5 02:20:03 2025 GMT
Not After : Nov 7 02:20:03 2025 GMT
Subject: CN=690ab454-8bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:96:b6:2f:32:bd:e6:9d:0e:af:13:10:d2:
3c:9e:74:bb:3d:74:ec:58:0b:f0:3c:75:9d:0c:fa:
35:30:29:44:91:2f:88:17:60:8c:20:32:09:0f:21:
4c:f5:3f:f0:cb:1d:97:2d:24:c0:20:02:32:7a:30:
fc:07:b5:de:e4:36:98:7f:c0:56:e4:ee:a5:79:f8:
b4:e8:fb:59:4b:29:6f:c2:72:0f:63:e2:6c:6e:48:
e1:3e:4f:76:5b:04:b9:a5:af:b6:39:f8:fa:86:4c:
d9:37:6c:46:68:13:57:d6:8f:35:5f:d0:db:18:c9:
22:89:84:59:f2:0d:4d:02:06:a2:93:79:aa:aa:70:
3b:a5:bc:63:e0:9c:41:c3:15:d0:5a:1a:03:c4:89:
7e:f3:1c:63:b0:db:b2:57:a8:e5:3e:2d:f3:76:c0:
f4:fa:b0:21:c1:b9:fe:26:de:28:73:8e:4d:c1:3f:
a5:a7:de:48:3f:60:73:24:80:be:d6:d1:e6:40:f4:
f3:89:2c:37:20:3e:b3:0d:e0:66:4c:b6:ec:40:2c:
46:29:66:b4:d3:14:91:4f:c6:37:6a:0f:54:2e:02:
e9:ca:e3:0a:c9:34:6c:23:d8:3d:98:d9:1d:46:77:
2d:ed:5d:d4:cc:5f:f3:58:06:42:9d:cc:a2:bc:30:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2E:49:B2:57:3C:4A:B7:68:9D:A0:ED:61:1E:66:E6:44:15:79:07
X509v3 Authority Key Identifier:
keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:07:8d:0d:9a:c9:70:f7:57:c8:aa:99:89:ca:6e:95:0b:cd:
33:fc:75:2f:8a:7c:f2:a0:2b:80:37:8b:c1:ae:16:03:d1:54:
03:53:cf:7b:3d:c1:51:9d:9d:f9:80:10:51:85:51:fb:3d:96:
80:b5:c6:36:fe:bb:12:0a:21:03:f3:b1:96:a3:a8:5f:b5:1d:
ac:60:32:11:b0:9c:8c:6f:87:1c:0d:08:4e:81:e8:65:b5:f1:
bb:fc:cf:5e:04:d3:c5:6b:e3:88:c9:ab:ca:3f:9e:74:f0:5d:
60:d9:1e:4d:46:33:36:0f:2a:04:c0:21:7f:31:c2:3c:e9:f1:
fe:62:af:eb:fa:c6:49:34:6c:54:6e:95:fe:30:c4:07:c9:54:
ff:d1:3a:ec:b9:f7:84:37:ee:d4:2e:aa:fc:fa:44:b5:a3:c3:
72:57:cc:66:03:26:8a:a1:b1:83:b9:e9:c5:36:4a:e3:1a:33:
7b:33:ab:a6:2e:0e:a3:61:a0:7c:98:44:29:4b:41:c1:a6:94:
cf:a9:11:30:8a:fc:f5:2e:0d:3b:9e:ac:38:25:6e:1d:d6:7a:
69:f6:9d:e2:7b:1e:7b:0d:ea:da:cd:46:8e:57:52:01:e5:17:
84:fb:ea:21:d9:b8:0d:f0:28:9c:70:5f:bc:75:50:0c:42:d2:
07:23:6b:d3
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBUjExMC8GA1UEBRMoOTc2MUEyRDI4MURCOTQ3RUZFODdFNUJBOTE1MDI3
OERCQjk4OTZFRjAeFw0yNTExMDUwMjIwMDNaFw0yNTExMDcwMjIwMDNaMBgxFjAU
BgNVBAMTDTY5MGFiNDU0LThiY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmlZa2LzK95p0OrxMQ0jyedLs9dOxYC/A8dZ0M+jUwKUSRL4gXYIwgMgkP
IUz1P/DLHZctJMAgAjJ6MPwHtd7kNph/wFbk7qV5+LTo+1lLKW/Ccg9j4mxuSOE+
T3ZbBLmlr7Y5+PqGTNk3bEZoE1fWjzVf0NsYySKJhFnyDU0CBqKTeaqqcDulvGPg
nEHDFdBaGgPEiX7zHGOw27JXqOU+LfN2wPT6sCHBuf4m3ihzjk3BP6Wn3kg/YHMk
gL7W0eZA9POJLDcgPrMN4GZMtuxALEYpZrTTFJFPxjdqD1QuAunK4wrJNGwj2D2Y
2R1Gdy3tXdTMX/NYBkKdzKK8MMcPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU0y5J
slc8SrdonaDtYR5m5kQVeQcwHwYDVR0jBBgwFoAUl2Gi0oHblH7+h+W6kVAnjbuY
lu8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0I2NjdCODI4QzdDNDExRUI5NzM2Qzc2OEY4QUVBMjI4L2wyR2kw
b0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2wyR2kwb0hibEg3LWgtVzZrVkFuamJ1WWx1OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODgyQTEvQjY2N0I4MjhDN0M0MTFFQjk3MzZDNzY4RjhBRUEy
MjgvbDJHaTBvSGJsSDctaC1XNmtWQW5qYnVZbHU4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnB40Nmslw91fIqpmJym6VC80z/HUvinzy
oCuAN4vBrhYD0VQDU897PcFRnZ35gBBRhVH7PZaAtcY2/rsSCiED87GWo6hftR2s
YDIRsJyMb4ccDQhOgehltfG7/M9eBNPFa+OIyavKP5508F1g2R5NRjM2DyoEwCF/
McI86fH+Yq/r+sZJNGxUbpX+MMQHyVT/0TrsufeEN+7ULqr8+kS1o8NyV8xmAyaK
obGDuenFNkrjGjN7M6umLg6jYaB8mEQpS0HBppTPqREwivz1Lg07nqw4JW4d1npp
9p3iex57DerazUaOV1IB5ReE++oh2bgN8CiccF+8dVAMQtIHI2vT
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:55:24 2025 by rpki-client