Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: RClMHEI503TekLu2KiU6mFTuOk75eHNrtVWhqVz/XAc=
Subject key identifier: AA:D7:77:D0:4B:1E:0F:D6:0D:94:85:D8:B8:33:1D:D2:08:BE:54:1E
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 0231
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 0230
Signing time: Wed 05 Nov 2025 04:32:39 +0000
Manifest this update: Wed 05 Nov 2025 04:32:38 +0000
Manifest next update: Fri 07 Nov 2025 04:32:38 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: QFm4OgptFiXE2wMGKNJ8Jz2KkcxrrqVXwZ8mC+Hilqs=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 561 (0x231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Validity
Not Before: Nov 5 04:32:38 2025 GMT
Not After : Nov 7 04:32:38 2025 GMT
Subject: CN=690ad367-197d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:94:c7:b6:e5:81:d0:c1:14:71:b7:a4:c8:
d6:d0:35:d0:9d:be:ea:f1:44:cc:b4:e3:36:b5:21:
8a:0f:35:00:27:2d:96:45:a2:1e:ad:29:a0:7f:9f:
a3:5b:59:cf:a6:e8:f3:2f:77:bb:c2:3d:72:df:78:
d5:33:79:48:0d:8c:d0:d8:90:eb:47:11:4f:f8:87:
98:0a:3b:e3:6f:21:0c:49:f0:38:ec:8b:4f:b6:9d:
fd:36:c9:bb:b4:93:a6:02:52:6c:c8:c5:99:93:66:
ae:45:03:1c:c3:ea:f1:0c:51:0f:35:42:40:0d:56:
97:3e:8b:f8:f7:5c:40:5d:24:88:77:06:19:ad:37:
b7:6b:8f:76:ce:ee:62:1e:4f:df:19:1b:f5:89:c7:
99:e9:93:cf:fb:67:e1:b3:53:d1:6f:10:23:19:da:
21:4b:e3:fb:25:8e:f6:17:5a:75:cb:88:2d:ae:e4:
ee:4d:aa:f4:b8:40:58:52:aa:99:9f:bb:8c:65:43:
eb:4f:90:08:ff:82:82:16:77:6e:76:d9:ef:e7:2f:
61:67:47:29:9f:e4:b5:a4:ae:d3:66:63:21:d9:d1:
9f:ce:be:1e:9a:88:62:e2:c8:67:0d:67:28:ef:70:
76:35:d4:84:ec:09:80:72:2e:05:31:2a:e8:ad:86:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D7:77:D0:4B:1E:0F:D6:0D:94:85:D8:B8:33:1D:D2:08:BE:54:1E
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:a9:7b:79:c4:5c:f6:2a:e9:5c:42:26:9e:79:61:d1:1f:29:
91:93:09:05:8e:c4:50:73:f7:98:d6:95:4f:d6:2a:d4:c1:de:
0c:33:7d:7a:bb:2e:e4:5c:0f:27:32:af:fe:b6:c9:d3:11:45:
13:ae:d0:d8:7b:d4:71:6f:98:f4:44:99:ee:20:d2:de:64:e1:
3e:ab:2d:95:78:9d:ad:79:49:58:1d:96:ef:1b:4a:fb:3c:aa:
b1:4b:15:de:96:00:76:52:3d:6b:ec:fa:f5:20:d6:3e:60:5b:
23:5a:9a:1f:5f:5a:bb:e1:f0:e1:86:c6:84:70:80:13:aa:4f:
e5:1b:be:e0:eb:8f:6a:2f:c3:16:eb:31:e6:c2:88:0c:38:51:
1b:74:c6:ba:e2:64:c1:3a:db:ce:15:9d:01:e7:3b:f4:b7:29:
12:d1:f1:21:e3:4f:2f:21:ba:c1:43:3d:91:25:06:31:f2:c3:
d3:26:d9:8e:b2:81:55:28:f5:36:b7:74:bc:2b:67:b0:81:a8:
5d:a1:de:dd:97:f7:fe:fe:17:c5:87:36:20:ee:b1:43:2e:a5:
9e:27:82:24:9c:1d:e5:8d:60:b7:3d:0a:9c:8d:74:4f:0a:19:
e6:c0:cf:2b:81:8c:b7:8f:29:96:a3:e7:de:ad:c7:1d:3c:2e:
c9:f1:f6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:34:15 2025 by rpki-client