
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File: zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier: NAVNMWQYXnH31bXnleVJ7YufGDfjKncL+L7nR5sXmB4=
Subject key identifier: 52:F2:96:E7:23:3C:F6:C4:EF:D9:18:23:51:1F:E5:AD:46:60:F2:86
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 01EB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number: 01E7
Signing time: Wed 05 Nov 2025 04:44:12 +0000
Manifest this update: Wed 05 Nov 2025 04:44:11 +0000
Manifest next update: Fri 07 Nov 2025 04:44:11 +0000
Files and hashes: 1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: pL/zYHjik+gffGCzyCCx/PCZgm90N5RIIIrwWPfyHwQ=)
2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 491 (0x1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Nov 5 04:44:11 2025 GMT
Not After : Nov 7 04:44:11 2025 GMT
Subject: CN=690ad61c-bb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:3c:e4:75:db:15:3c:09:d7:e0:bb:ae:f2:
9d:6c:d7:40:af:c5:55:a8:54:16:ee:a7:13:20:db:
2d:19:ee:98:85:93:9a:44:bd:cd:75:3d:45:66:12:
c5:33:67:11:94:71:06:13:8c:9c:5b:f4:d7:16:db:
8b:31:8c:03:2e:2e:05:50:d4:90:7f:3e:61:f3:7c:
b1:e6:a0:ff:2a:e3:29:34:48:36:09:86:4d:2a:c8:
1a:7c:fc:09:15:30:c3:2a:14:95:6b:12:44:7e:89:
19:ec:7e:29:3f:c9:d9:b8:6c:84:2e:e6:6d:6c:90:
08:89:f2:d4:91:9b:14:13:b5:42:fe:c3:c5:af:f0:
1f:c4:f0:02:b2:df:7a:45:0b:a1:0a:29:7e:72:56:
d1:cf:fe:48:a3:37:30:c2:1d:f0:98:a8:ea:4c:bc:
40:92:b1:fc:f4:43:5c:c5:15:a8:b3:b9:f1:5f:53:
d2:0d:8d:73:8a:e4:d3:1d:fd:7d:0f:0e:1b:95:26:
70:19:f7:75:31:fd:bc:6a:92:a2:e5:c8:50:90:ae:
77:a1:16:f6:fe:8b:7c:bb:20:d8:4c:df:43:85:68:
6a:1c:dc:1e:6a:69:af:9f:75:dd:ee:32:fa:44:10:
7b:82:f0:1a:c5:1f:5d:4c:4a:ec:f9:cd:6c:88:90:
fd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F2:96:E7:23:3C:F6:C4:EF:D9:18:23:51:1F:E5:AD:46:60:F2:86
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:24:5c:0f:26:80:5b:5b:ab:ea:dc:33:26:46:3e:0a:81:e2:
13:95:9d:cd:da:e5:28:1f:4c:d4:98:47:84:17:97:a0:f5:22:
d0:62:8f:73:b7:58:48:40:ae:c2:f6:01:70:7d:83:8f:12:96:
7f:a6:1a:71:ad:8b:d2:39:c8:c1:8b:8e:9d:e7:2c:96:f9:04:
d0:1c:44:dd:19:a1:1e:a1:d1:1c:2f:41:45:d9:b5:f1:09:33:
92:95:4c:d5:fa:18:2e:97:40:be:e6:62:50:df:f2:51:8d:82:
87:1d:32:99:2f:63:a8:be:a5:69:d1:f6:52:7f:29:ee:50:fc:
cb:e3:81:4f:01:26:c4:31:5f:69:34:e3:06:10:85:29:70:c5:
50:6c:f8:91:8c:7b:cf:9f:44:b9:70:7c:9f:64:4f:57:63:c4:
eb:03:8f:91:08:af:bd:de:e2:fe:90:54:58:14:31:f6:cf:8a:
ae:b4:16:08:36:58:03:f3:95:50:15:2b:62:52:be:07:f7:02:
76:33:7d:bb:4f:ac:c6:86:58:91:a8:17:e0:da:b6:6e:d8:8c:
2c:13:da:29:d5:fa:6b:54:ab:68:8a:3c:42:5b:4f:3c:56:be:
98:49:05:ce:bd:9a:88:dd:59:05:59:05:54:a6:4d:ef:0a:d6:
c0:3f:1d:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAeswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdFNjhBRjExMC8GA1UEBRMoQ0UxRUNEQTRGMDU2OTY3MEI1ODZFMkNEMzUyQkQ3
MjA2RkQ4NzgwNDAeFw0yNTExMDUwNDQ0MTFaFw0yNTExMDcwNDQ0MTFaMBgxFjAU
BgNVBAMTDTY5MGFkNjFjLWJiNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDWTzkddsVPAnX4Luu8p1s10CvxVWoVBbupxMg2y0Z7piFk5pEvc11PUVm
EsUzZxGUcQYTjJxb9NcW24sxjAMuLgVQ1JB/PmHzfLHmoP8q4yk0SDYJhk0qyBp8
/AkVMMMqFJVrEkR+iRnsfik/ydm4bIQu5m1skAiJ8tSRmxQTtUL+w8Wv8B/E8AKy
33pFC6EKKX5yVtHP/kijNzDCHfCYqOpMvECSsfz0Q1zFFaizufFfU9INjXOK5NMd
/X0PDhuVJnAZ93Ux/bxqkqLlyFCQrnehFvb+i3y7INhM30OFaGoc3B5qaa+fdd3u
MvpEEHuC8BrFH11MSuz5zWyIkP35AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUvKW
5yM89sTv2RgjUR/lrUZg8oYwHwYDVR0jBBgwFoAUzh7NpPBWlnC1huLNNSvXIG/Y
eAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3RTY4LzVCMzI1QjI2NEE2MDExRUY4NjAxODI4RTc2MkU5NTFBL3poN05w
UEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3poN05wUEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdFNjgvNUIzMjVCMjY0QTYwMTFFRjg2MDE4MjhFNzYy
RTk1MUEvemg3TnBQQldsbkMxaHVMTk5TdlhJR19ZZUFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3JFwPJoBbW6vq3DMmRj4KgeITlZ3N
2uUoH0zUmEeEF5eg9SLQYo9zt1hIQK7C9gFwfYOPEpZ/phpxrYvSOcjBi46d5yyW
+QTQHETdGaEeodEcL0FF2bXxCTOSlUzV+hgul0C+5mJQ3/JRjYKHHTKZL2OovqVp
0fZSfynuUPzL44FPASbEMV9pNOMGEIUpcMVQbPiRjHvPn0S5cHyfZE9XY8TrA4+R
CK+93uL+kFRYFDH2z4qutBYINlgD85VQFStiUr4H9wJ2M327T6zGhliRqBfg2rZu
2IwsE9op1fprVKtoijxCW088Vr6YSQXOvZqI3VkFWQVUpk3vCtbAPx1L
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:44:26 2025 by rpki-client