Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
File: CFZSep0iAmz-gRG6M4cl_B6GyqA.mft (raw, json)
Hash identifier: ylQz/XS2zdrjMSiJPblYoKY4be0tv1u3eKv7V7BRqL0=
Subject key identifier: 33:84:40:B7:A8:41:F8:E9:A1:7E:72:29:EC:62:4C:F3:C7:EF:78:09
Authority key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Certificate issuer: /CN=F36993D4AF/serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Certificate serial: BE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
Manifest number: BB
Signing time: Tue 04 Nov 2025 06:28:53 +0000
Manifest this update: Tue 04 Nov 2025 06:28:53 +0000
Manifest next update: Thu 06 Nov 2025 06:28:52 +0000
Files and hashes: 1: CFZSep0iAmz-gRG6M4cl_B6GyqA.crl (hash: 9bKiIWmzElGLdZ+1clPPP/875xIzuZbJKsugxKmBpc4=)
2: 13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa (hash: WbFTeA4PMTVD0fXbeP2ec+8+4PF17WQg0dVXFVp7fgM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 06:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 190 (0xbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Validity
Not Before: Nov 4 06:28:53 2025 GMT
Not After : Nov 6 06:28:52 2025 GMT
Subject: CN=69099d25-a3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:17:ce:71:67:8a:53:84:59:a8:64:83:72:
1c:44:c3:71:1c:e4:53:59:dc:fe:49:b6:f9:1e:76:
b5:52:fc:20:d6:a2:7c:11:34:e4:4b:d1:09:ba:49:
01:91:f2:ab:e6:19:ba:19:40:47:98:d3:ae:a9:8a:
34:07:93:78:cc:3e:85:95:5a:1e:4f:7a:c4:4a:49:
f2:08:14:7a:80:c5:de:cc:28:29:76:b0:19:40:a8:
34:f3:97:72:f9:ff:da:f1:f4:46:9f:87:3e:f0:7c:
c1:9d:01:1d:c7:91:cb:3d:74:49:84:6b:98:72:ec:
d4:1b:44:ac:1d:40:2a:db:94:c4:58:66:28:3f:89:
05:49:7e:bb:b4:02:4a:d5:98:cd:05:a6:e2:47:18:
91:a4:a1:fb:a0:5c:a4:c6:0e:f4:c6:e6:a3:d5:3f:
46:fd:d5:64:73:b4:72:26:ac:57:d6:08:bc:24:c5:
06:64:3e:27:da:cd:40:38:88:60:93:4a:b3:33:83:
5f:5c:86:51:a8:18:82:61:15:f3:d2:f4:f6:f2:45:
9a:e7:24:c6:05:a7:44:76:0f:a8:f2:50:34:6d:74:
fa:7f:5f:97:ef:fb:f4:95:de:ff:4e:d3:3a:2a:ed:
08:24:e6:1c:da:1a:ed:35:ec:fe:f1:f8:15:9f:65:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:84:40:B7:A8:41:F8:E9:A1:7E:72:29:EC:62:4C:F3:C7:EF:78:09
X509v3 Authority Key Identifier:
keyid:08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
80:43:a1:ac:d3:4e:85:05:80:d2:ff:65:77:28:6a:74:06:ed:
98:af:e8:a2:e9:e5:05:ad:98:ad:34:65:a2:2a:f4:12:7d:10:
22:b2:96:4b:9b:f3:4a:0c:52:a0:91:1e:17:f2:35:28:f6:07:
a0:98:09:c4:30:35:4e:3d:52:61:0c:f2:c3:8d:01:85:f6:e9:
fe:35:17:f5:93:9c:cb:77:bd:49:0f:fd:0e:03:51:89:2e:bc:
a9:02:89:55:6d:b7:7c:a5:f4:3f:c9:d0:9f:d5:0c:62:4c:48:
8c:4f:d3:43:f5:89:82:9a:3f:64:a9:45:2c:a6:9f:e8:cc:21:
9c:96:65:5c:5e:fe:9d:32:04:41:aa:4c:51:60:10:21:58:15:
58:54:c0:07:ee:62:1a:3b:e0:2f:7b:98:ca:f6:50:63:c3:39:
e7:b0:12:78:f2:cb:50:a6:a6:4f:9b:4e:6c:73:c8:09:0f:a7:
6e:fe:c2:c8:4a:f1:c8:9a:12:87:90:87:26:6c:0d:c2:49:f7:
89:7e:b4:fc:7d:b9:3d:ef:8d:55:ee:77:c4:5a:31:5e:64:c9:
25:0a:e4:51:c1:47:24:f2:5a:a7:20:11:d4:81:55:c0:0c:e6:
17:8f:76:46:de:9b:21:55:8f:e0:b2:d9:d2:c9:cb:3d:0e:7b:
e4:4d:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:01 2025 by rpki-client