Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
File: rwNfxJBpXa-3lvnHN19zijES_Ds.mft (raw, json)
Hash identifier: THWVnM1iTPqhH6vjMw4vWihzfEbB6vhHUsvVApIeWOI=
Subject key identifier: B4:0F:31:F9:DB:BE:BE:E4:B9:0C:5A:E8:84:4F:11:99:C2:C9:39:45
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Certificate issuer: /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial: 086C
Authority info access: rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
Manifest number: 0864
Signing time: Wed 05 Nov 2025 01:43:05 +0000
Manifest this update: Wed 05 Nov 2025 01:43:04 +0000
Manifest next update: Fri 07 Nov 2025 01:43:04 +0000
Files and hashes: 1: rwNfxJBpXa-3lvnHN19zijES_Ds.crl (hash: RHdRt646qfQ3LNy/KuDDlHIMNKXQJPHgpFpS+GSZPxc=)
2: 21886F0EB6A911EA91807C30F8AEA228.roa (hash: TV2ABY5r46tKbY4VJ67UTwENeFi5pRfNFMuvJZMh1Ig=)
3: F9049C56B6A811EAB7AD5330F8AEA228.roa (hash: puJnHm1yKIQzNnKozYu1/czI3lgLvuYWXkZKSjpCIAg=)
4: 66014E80B6A911EA8CCCD130F8AEA228.roa (hash: Acfk0sMfwafASajx4yozyWp5SI9yDQ3iqQnRyzzNIjk=)
5: C826A9BACBE011EA8AB11F1BF8AEA228.roa (hash: S2bChUKGsfQAiJQ183YhdQy2q5jddxkEYopSyi4QCaQ=)
6: 443B4FD0B6A911EA8BB19A30F8AEA228.roa (hash: DtlptNQu9HFFByv5u/iYfT6/AVvlDXCMfH1RWr1fnig=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2156 (0x86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2303AR, serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Validity
Not Before: Nov 5 01:43:04 2025 GMT
Not After : Nov 7 01:43:04 2025 GMT
Subject: CN=690aaba9-c92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:ed:f3:68:ae:8a:e7:4e:a7:fc:6f:70:f3:
dd:16:d2:6c:8f:5f:89:57:81:2c:91:f7:2b:1e:56:
0c:07:a6:fd:31:d2:c7:9d:93:34:37:9a:5f:7f:2b:
85:02:31:07:16:be:71:6c:df:0a:12:9c:80:b3:83:
4e:64:0b:f8:df:1c:ac:d4:5e:f7:71:5e:02:c7:96:
f8:87:70:bb:77:c0:1c:b4:62:11:d1:d1:0a:8c:9a:
ee:8b:2b:44:36:e5:0e:8d:50:7b:4a:9a:a7:86:f2:
ad:7e:14:be:48:34:5c:30:ff:bc:a1:f2:e6:fa:a2:
91:08:e7:e5:76:c1:d3:2a:88:e6:be:a4:3a:1a:70:
26:4a:e9:48:14:52:42:96:ba:f6:40:eb:b9:db:5b:
6f:d6:74:bb:37:d0:92:44:09:c8:1c:5d:74:e1:e7:
f4:bd:0d:a0:b2:85:02:ad:98:e2:87:cc:34:95:95:
00:59:1b:6b:fe:9b:a8:14:45:5d:78:3a:27:03:fe:
92:94:89:43:61:73:c5:48:36:ec:dc:dc:58:3c:e8:
9f:94:c9:db:bd:e8:4f:70:4b:26:35:a3:94:52:fc:
26:68:de:a0:c4:0b:4d:3e:0a:61:c9:3d:dd:03:a3:
a2:8f:17:74:d2:c1:77:0a:74:06:88:de:fc:ca:da:
ad:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0F:31:F9:DB:BE:BE:E4:B9:0C:5A:E8:84:4F:11:99:C2:C9:39:45
X509v3 Authority Key Identifier:
keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:cd:95:ba:67:1e:78:22:e8:1e:87:e1:a2:9a:61:0b:bd:54:
22:b0:a2:e4:26:14:ea:3a:bf:bf:a4:12:a5:fa:91:65:e0:1a:
fe:4f:1c:ff:c7:39:49:e3:94:62:9b:18:3f:75:58:85:a3:07:
3b:6d:e5:32:63:cf:b7:03:cf:b7:13:d6:b1:92:c1:71:c5:53:
d5:12:be:db:f1:ca:7c:70:45:f1:43:53:cc:c9:c7:4a:60:e3:
a2:42:11:18:3a:ad:60:ea:07:59:fc:bb:59:a7:4b:6e:d4:94:
7f:4f:4c:04:1d:83:a5:00:c6:96:c6:2d:66:2f:a1:e0:7a:3e:
57:4e:e6:91:88:eb:89:40:73:90:3e:12:23:14:d1:4a:b2:2e:
da:1d:66:7a:71:66:1f:9c:7f:a9:b5:44:8c:38:37:0e:b0:a7:
59:e5:1c:1e:1f:4d:4b:ca:b6:4c:32:3a:d4:12:9b:6a:1b:20:
fb:63:b4:38:43:6c:10:c6:2a:9e:eb:82:91:f7:88:fa:14:25:
b6:e9:5a:5a:f2:67:4d:64:84:58:c3:af:02:f1:94:98:e1:ee:
05:ca:86:8c:f7:25:ed:7b:18:eb:a8:22:93:f6:bf:0e:ee:4d:
57:d6:b6:3f:9e:86:ed:9b:77:3b:8f:72:57:50:d2:14:9b:88:
d1:f7:89:f0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCGwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTIzMDNBUjExMC8GA1UEBRMoQUYwMzVGQzQ5MDY5NURBRkI3OTZGOUM3Mzc1Rjcz
OEEzMTEyRkMzQjAeFw0yNTExMDUwMTQzMDRaFw0yNTExMDcwMTQzMDRaMBgxFjAU
BgNVBAMTDTY5MGFhYmE5LWM5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsqu3zaK6K506n/G9w890W0myPX4lXgSyR9yseVgwHpv0x0sedkzQ3ml9/
K4UCMQcWvnFs3woSnICzg05kC/jfHKzUXvdxXgLHlviHcLt3wBy0YhHR0QqMmu6L
K0Q25Q6NUHtKmqeG8q1+FL5INFww/7yh8ub6opEI5+V2wdMqiOa+pDoacCZK6UgU
UkKWuvZA67nbW2/WdLs30JJECcgcXXTh5/S9DaCyhQKtmOKHzDSVlQBZG2v+m6gU
RV14OicD/pKUiUNhc8VINuzc3Fg86J+Uydu96E9wSyY1o5RS/CZo3qDEC00+CmHJ
Pd0Do6KPF3TSwXcKdAaI3vzK2q1lAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUtA8x
+du+vuS5DFrohE8RmcLJOUUwHwYDVR0jBBgwFoAUrwNfxJBpXa+3lvnHN19zijES
/DswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyMzAzLzc4Q0I2Rjk2NTk0MzExRUE4RTJFNjE2MUY4QUVBMjI4L3J3TmZ4
SkJwWGEtM2x2bkhOMTl6aWpFU19Ecy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3J3TmZ4SkJwWGEtM2x2bkhOMTl6aWpFU19Ecy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTIzMDMvNzhDQjZGOTY1OTQzMTFFQThFMkU2MTYxRjhBRUEy
MjgvcndOZnhKQnBYYS0zbHZuSE4xOXppakVTX0RzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnzZW6Zx54Iugeh+GimmELvVQisKLkJhTq
Or+/pBKl+pFl4Br+Txz/xzlJ45Rimxg/dViFowc7beUyY8+3A8+3E9axksFxxVPV
Er7b8cp8cEXxQ1PMycdKYOOiQhEYOq1g6gdZ/LtZp0tu1JR/T0wEHYOlAMaWxi1m
L6Hgej5XTuaRiOuJQHOQPhIjFNFKsi7aHWZ6cWYfnH+ptUSMODcOsKdZ5RweH01L
yrZMMjrUEptqGyD7Y7Q4Q2wQxiqe64KR94j6FCW26Vpa8mdNZIRYw68C8ZSY4e4F
yoaM9yXtexjrqCKT9r8O7k1X1rY/nobtm3c7j3JXUNIUm4jR94nw
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:59:14 2025 by rpki-client