Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: zeun7fRSYSttphFXk7l40/pbuJ/6i1SiMfFgz3mc2Sk=
Subject key identifier: 02:9F:D7:73:09:15:12:0A:1C:2D:DD:7A:FD:18:1C:A4:24:0C:29:29
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 0355
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 034F
Signing time: Wed 05 Nov 2025 03:52:15 +0000
Manifest this update: Wed 05 Nov 2025 03:52:14 +0000
Manifest next update: Fri 07 Nov 2025 03:52:14 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: hs8SVASHLIm5aHmIp91t7HeQ4pMMe0nDvqXwLApaZXg=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 853 (0x355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Nov 5 03:52:14 2025 GMT
Not After : Nov 7 03:52:14 2025 GMT
Subject: CN=690ac9ee-1201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:3e:09:36:f1:0f:73:f3:8b:95:c9:d5:e7:
93:58:7a:4d:c7:b4:09:fb:c7:fc:67:29:d7:ac:1b:
26:c4:b4:57:56:a4:6e:b2:f7:39:54:c2:cc:33:57:
4e:54:79:e3:00:15:9b:13:6d:86:a7:96:03:ca:40:
f3:a7:25:f2:59:2f:09:c0:96:17:c3:82:dc:f6:10:
6d:00:bb:4a:26:ea:9e:ca:a6:f0:c7:86:a7:ae:af:
d7:ac:45:18:83:70:79:44:e2:0a:0b:1c:b3:79:47:
10:b7:d5:8a:cb:9b:64:97:87:78:7c:9c:72:cf:4c:
4e:ac:68:02:7d:9c:da:2d:54:30:ab:2d:de:d9:4c:
22:b2:fc:a8:14:8e:28:2a:9b:58:f2:ba:1e:9c:15:
a9:b9:a2:5a:db:a6:ef:31:4e:68:a2:33:96:21:18:
7a:bb:c3:77:df:15:a2:92:f6:1d:e7:54:53:46:5d:
26:07:c2:93:65:9b:6c:81:92:53:dd:ef:9e:8a:c4:
25:35:b3:c4:68:fb:a2:40:4d:75:f1:fa:fd:18:90:
fe:30:8b:17:6a:8d:55:f6:1c:c7:a4:d0:66:83:e5:
92:d0:85:61:67:f5:84:36:93:ce:79:76:16:36:04:
68:ee:ba:86:a6:19:c6:34:f3:80:52:40:f3:46:a4:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:9F:D7:73:09:15:12:0A:1C:2D:DD:7A:FD:18:1C:A4:24:0C:29:29
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:be:71:80:d3:d1:f1:b8:13:1a:d9:ba:dd:33:55:47:f5:9b:
ca:45:5a:7f:f4:13:03:13:a3:dc:80:90:12:f1:00:90:26:2f:
b2:9d:55:c1:e4:05:02:15:e2:33:1d:9c:f9:5a:f6:db:f1:4d:
ac:fc:aa:16:b2:20:bb:0d:3e:7f:7b:2d:5a:32:a5:3d:9a:a2:
44:10:6a:99:b9:ae:74:fc:37:ad:26:c5:4b:e4:1a:d0:58:11:
50:d4:31:cf:92:4d:52:01:12:79:a1:d3:9f:ed:d0:9c:99:ee:
27:a1:3c:a5:29:14:06:b9:22:e6:9b:28:b8:fe:0f:78:f4:6f:
7e:43:66:12:b7:5c:68:df:a2:ff:f9:cb:55:69:27:91:72:4a:
77:f0:a7:c1:93:22:f6:22:c1:9d:ca:f5:ab:96:7d:24:d2:5f:
8a:88:b3:2c:bf:91:31:b4:5b:c7:4b:b9:8f:99:f4:71:26:54:
c0:23:ba:9e:19:0e:47:3f:66:bd:b8:65:a0:42:90:43:32:22:
14:12:32:4a:a4:b4:3a:17:37:a9:c9:d2:f1:0b:18:95:32:6f:
b9:a8:b7:ad:8e:bd:e6:36:f6:4e:74:c1:3d:fb:c4:67:7b:33:
4e:85:87:a0:8f:67:2c:3f:e7:f0:cc:80:1b:1f:94:3e:31:57:
0f:21:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:12 2025 by rpki-client