Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File: M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier: LcAr7go280mkx63DgeYI9VAcbdyKLhq4DB3yXn/nGoU=
Subject key identifier: 68:75:3A:10:62:02:F8:D1:56:97:EE:6D:6F:D3:36:E4:1F:B1:0C:00
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: 0169
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number: 0168
Signing time: Tue 04 Nov 2025 06:14:13 +0000
Manifest this update: Tue 04 Nov 2025 06:14:12 +0000
Manifest next update: Thu 06 Nov 2025 06:14:12 +0000
Files and hashes: 1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: GzcIcRSer+uqxGOdSO3gdXL3BC4Xu1wEoR5MqJUEdgk=)
2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 06:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Validity
Not Before: Nov 4 06:14:12 2025 GMT
Not After : Nov 6 06:14:12 2025 GMT
Subject: CN=690999b4-d3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:69:fa:3d:c7:e3:9d:47:a4:4b:5c:ca:b8:7e:
41:17:ed:3b:4f:8d:64:f0:e9:8f:99:d7:07:d0:09:
5c:f1:c9:23:33:28:da:21:5e:25:9c:69:d5:4a:aa:
ed:b9:27:4b:e3:dd:46:67:48:b0:e2:b2:08:16:7b:
cd:19:13:8a:cd:de:e2:e3:41:ff:fa:b9:94:d3:fa:
50:71:20:25:08:d5:d5:d3:1c:79:05:e1:df:f2:63:
12:0c:41:06:35:88:d3:77:09:ea:ac:c0:89:83:64:
fd:32:69:4f:87:f0:de:f6:23:a1:92:e9:10:69:01:
ec:f8:a3:52:ae:2b:5b:50:45:a0:94:b4:50:f2:bd:
35:c0:ad:ac:30:7e:8f:7a:0b:31:10:f1:af:03:42:
75:f1:26:86:0c:8e:92:f0:41:66:15:c8:68:ca:31:
f0:b5:79:f9:41:a6:32:bb:8c:6d:ac:d5:cd:96:85:
b8:c8:26:f0:fa:e9:db:ae:31:5a:34:66:62:ed:99:
1a:6a:6e:0b:19:69:fc:4a:de:c8:7c:0c:6a:32:ad:
ca:e0:ed:b4:26:15:2b:bc:c8:3e:1a:6a:fc:7d:d3:
4e:df:c0:98:77:db:a8:cd:06:9d:07:19:2c:18:88:
94:d0:01:f0:87:ae:fe:5d:53:b0:67:bb:3a:ed:16:
14:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:3A:10:62:02:F8:D1:56:97:EE:6D:6F:D3:36:E4:1F:B1:0C:00
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3f:a3:9c:b1:be:3b:8c:c7:8c:3f:48:05:41:69:30:9c:ae:
e2:d9:0b:ab:ca:78:59:cf:28:c6:06:93:61:b2:b1:3d:a1:12:
8a:da:27:24:f7:6e:65:fa:05:f7:dd:b7:05:1b:5d:9b:94:09:
5d:1f:0f:8f:ed:82:10:f6:c8:c9:eb:df:db:49:e5:1c:f7:3d:
4a:e0:30:c7:68:a7:2a:e0:a0:ab:7e:9e:b8:96:35:50:5b:67:
84:4d:3b:a9:91:dc:b4:70:e7:ca:0b:2f:36:86:fb:42:f3:ba:
5f:5d:a8:f8:a4:bd:c3:63:c8:43:8c:84:23:49:74:91:02:e4:
14:ff:c0:b7:ea:2d:8e:f5:c5:7d:00:e1:f7:68:10:b6:2f:f2:
60:e7:3a:11:ce:76:7a:23:5b:c3:20:08:e2:5e:96:ff:70:2d:
44:ed:22:25:3a:a4:b1:bc:1d:1e:d9:31:8a:ac:a4:fe:f4:60:
81:d1:7d:ab:5b:53:fb:00:e3:bc:33:b4:20:17:f6:9b:49:b4:
fa:39:f9:76:92:7b:fd:b5:84:6f:ea:d4:13:b3:f9:32:1a:e4:
1d:f4:d4:91:24:0d:29:58:5a:ad:42:e7:d6:f6:fe:f8:88:af:
9e:ca:87:ef:9c:99:33:a3:a8:63:c4:a4:14:4e:44:f7:ee:d2:
44:e1:43:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:06:26 2025 by rpki-client