
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: jdFf32WjdknL7p0nwrHNHPFf0YtcaLJQU3dYk4EKHIw=
Subject key identifier: 75:47:CF:A1:E6:12:29:9A:3F:19:B0:5E:36:BA:72:CC:4B:10:C0:46
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0EA5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0EA5
Signing time: Wed 05 Nov 2025 00:57:49 +0000
Manifest this update: Wed 05 Nov 2025 00:57:49 +0000
Manifest next update: Fri 07 Nov 2025 00:57:49 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: ivpkuajrwYTtMU91wXRHwqONxWoRdBjpWxHJi+g6Yw0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Validity
Not Before: Nov 5 00:57:49 2025 GMT
Not After : Nov 7 00:57:49 2025 GMT
Subject: CN=690aa10d-a952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:57:fc:ce:60:89:52:c3:08:2a:43:0f:78:
26:e2:de:a6:a1:6f:c0:e2:cb:b8:78:57:a2:ef:30:
ee:f9:8c:31:73:44:49:20:47:a0:bd:ad:0d:75:3a:
a0:46:c5:61:88:a9:a4:a9:7d:99:ed:d3:b6:d7:de:
c2:20:23:b0:d3:11:02:2e:25:d0:2d:59:0b:ba:fa:
94:5c:17:1a:cf:50:55:79:29:96:45:ef:48:1e:fa:
12:bc:28:5d:01:95:27:e8:76:4b:ba:2f:87:1b:bd:
c3:c8:51:75:6d:71:eb:d6:62:5b:74:6c:c6:d2:fd:
02:7c:ba:d6:73:a4:e0:7d:30:da:e1:50:23:c0:b4:
1b:df:7e:58:78:75:e3:43:d2:62:7a:a7:63:88:82:
29:e3:1d:d5:07:aa:75:78:6d:50:a4:b4:e1:f6:ee:
83:5d:35:bc:c8:c5:df:84:4b:be:30:85:55:62:0e:
ce:c6:fa:42:ec:cd:d4:0e:3f:50:ea:91:ac:b5:c9:
94:3c:ed:2d:d2:0a:6e:56:a7:48:f9:e0:38:a4:40:
7b:8d:ed:66:61:7d:5f:86:8d:6e:b7:b2:40:ec:c7:
54:d5:9d:c9:9a:6c:11:68:7e:47:c7:a9:41:a7:61:
c0:74:86:c6:d7:63:06:5d:f3:e6:d8:4d:88:29:34:
e1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:47:CF:A1:E6:12:29:9A:3F:19:B0:5E:36:BA:72:CC:4B:10:C0:46
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:a8:37:0e:f3:b2:2c:5e:cd:37:4f:a9:6b:12:d7:8c:08:9c:
47:78:71:de:34:13:c4:5d:2c:b3:8e:e1:51:8b:86:75:fd:5d:
fa:62:41:3b:ee:5b:90:a9:7b:19:52:5d:5b:24:cf:c1:65:75:
6e:5e:fc:a8:72:34:9c:f2:2e:e8:be:c8:ec:9a:d7:6b:70:6c:
86:59:40:6b:67:94:f4:cf:ea:ba:85:7b:77:7d:0b:2d:c2:f5:
44:89:88:63:8d:5b:9f:bf:25:98:18:85:f6:b3:3f:ad:de:91:
4d:40:2e:b8:ce:e0:16:f8:a3:e7:28:0f:ca:0e:43:a9:05:12:
a6:e8:0d:c5:5d:e5:71:4b:82:9c:89:b3:87:59:94:18:22:18:
99:b5:44:2c:c4:18:f0:41:33:8d:d6:09:b5:46:4b:ff:9a:cc:
42:6d:d6:f5:9d:7e:45:08:21:ec:5f:ce:e7:ef:60:0b:b0:23:
54:f7:81:48:7f:79:c5:91:23:88:29:ef:d5:80:e0:6e:42:85:
e9:f8:7d:12:89:50:fb:23:fc:68:d1:88:2d:13:1e:20:a9:21:
50:bc:c5:d5:30:1b:fd:96:e7:f0:ac:64:cc:cc:0b:b2:ce:d6:
87:bf:f0:99:2e:18:8a:c4:d2:22:99:cf:45:1e:5a:00:9f:d0:
0d:2f:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:02:37 2025 by rpki-client