Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File: vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier: dh9K3m7X0qv67aikEkVOE+NpB1gqOWwCcP6luv2Dh/M=
Subject key identifier: EA:55:57:69:69:3C:88:94:FB:CC:AD:2D:01:31:DD:66:B6:C8:55:64
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer: /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial: 02C2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number: 02C1
Signing time: Wed 05 Nov 2025 04:15:40 +0000
Manifest this update: Wed 05 Nov 2025 04:15:39 +0000
Manifest next update: Fri 07 Nov 2025 04:15:39 +0000
Files and hashes: 1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: tAh7so9mAF73aE/UYozXH0PSGRKqTPNwyq7sh39YMhQ=)
2: E2C1EE3A9E5311EEAAC0551CD25BE465.roa (hash: a/6txB+MVfLWSEULkMJVclmn38cp7SIU8WSE2UEIKek=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 706 (0x2c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Validity
Not Before: Nov 5 04:15:39 2025 GMT
Not After : Nov 7 04:15:39 2025 GMT
Subject: CN=690acf6b-8d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:89:bc:f0:3b:53:d6:92:8b:3e:e8:a3:64:
6c:d5:e9:6c:2f:93:83:38:31:67:b8:48:10:4b:bd:
23:a8:4f:42:8d:74:7b:6a:63:fd:75:60:09:21:9e:
0a:fe:2f:5a:0b:db:a7:e4:2b:21:ff:0e:4b:33:ac:
c4:ae:46:ee:08:88:05:29:a4:b5:e8:c0:9d:5a:71:
37:2f:5f:f6:f4:cc:05:09:94:4d:97:59:33:e5:7e:
d2:f2:31:7b:b6:35:34:ac:78:dc:a9:ad:ea:a9:cb:
31:13:15:9e:7c:9c:4d:c4:0b:0f:b1:68:72:4e:f7:
f8:e1:68:21:95:0b:31:e5:d8:5b:16:ee:ba:c0:f2:
3a:35:9f:3c:bc:39:a2:f3:c2:6d:b7:af:da:d1:c9:
10:9d:ad:d2:20:0c:59:bb:8a:91:25:dc:b7:85:50:
71:42:c1:ca:0d:fb:d6:15:67:04:0e:a3:bc:9c:0a:
85:bd:30:90:51:95:dc:13:a6:45:8a:a0:68:aa:75:
e2:b6:ca:5d:a7:d3:79:2b:c9:3c:41:e4:e8:6d:d0:
8f:c3:5d:e4:45:ff:4e:d8:c2:b9:66:49:f7:a2:65:
a6:3b:20:15:04:10:60:63:fe:21:c1:d8:30:99:ea:
73:79:f9:d3:18:d7:34:86:a5:c0:ab:42:11:82:de:
6c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:57:69:69:3C:88:94:FB:CC:AD:2D:01:31:DD:66:B6:C8:55:64
X509v3 Authority Key Identifier:
keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:57:87:d3:f4:d1:bf:39:f4:30:b5:6d:27:ed:a6:fd:c4:1c:
96:67:2b:d5:70:f3:1e:17:a1:4a:0b:bc:08:df:e1:f4:f6:da:
6e:01:d3:78:b2:aa:d0:87:69:74:95:b6:b9:12:90:e2:83:83:
ee:26:e5:9c:49:77:76:ff:dd:cf:28:78:36:ce:d5:79:43:d0:
47:6a:ec:7b:e2:86:e9:b7:36:5f:36:c7:d1:13:89:e6:c6:4f:
3b:cf:cd:46:c3:73:28:ee:1d:0d:9b:fa:68:dc:7f:9f:ac:c7:
5b:9a:ee:e3:d9:9f:c7:83:46:21:da:d9:ae:0f:aa:85:07:4e:
ee:6a:f1:05:25:08:56:f4:b8:f7:97:d6:6a:89:7a:32:96:48:
35:dd:7f:58:d8:ba:9e:59:de:35:42:e0:25:39:7e:fa:7a:0a:
55:24:82:ec:b6:7a:48:33:8c:34:23:35:08:ef:28:12:e7:c0:
42:12:cc:7d:fb:02:47:7f:67:45:e6:8c:55:85:9d:b6:75:55:
9f:9a:20:9a:2a:62:49:6f:99:1e:e5:9d:d1:eb:6a:a3:5e:96:
d9:38:ab:79:14:4a:7f:1b:fa:fa:75:b6:ca:97:14:35:ce:ad:
ce:56:5c:2d:7e:26:94:15:02:0a:10:fa:b0:0c:41:6f:b5:5e:
80:c1:fa:50
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QThBQTNBRjExMC8GA1UEBRMoQkRCMUM4MzI0NDJBMTcwNkJGNzdGQzRFQzQzNzE4
MTlCQTNGQzFBNjAeFw0yNTExMDUwNDE1MzlaFw0yNTExMDcwNDE1MzlaMBgxFjAU
BgNVBAMTDTY5MGFjZjZiLThkMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDa+4m88DtT1pKLPuijZGzV6Wwvk4M4MWe4SBBLvSOoT0KNdHtqY/11YAkh
ngr+L1oL26fkKyH/DkszrMSuRu4IiAUppLXowJ1acTcvX/b0zAUJlE2XWTPlftLy
MXu2NTSseNypreqpyzETFZ58nE3ECw+xaHJO9/jhaCGVCzHl2FsW7rrA8jo1nzy8
OaLzwm23r9rRyRCdrdIgDFm7ipEl3LeFUHFCwcoN+9YVZwQOo7ycCoW9MJBRldwT
pkWKoGiqdeK2yl2n03kryTxB5Oht0I/DXeRF/07YwrlmSfeiZaY7IBUEEGBj/iHB
2DCZ6nN5+dMY1zSGpcCrQhGC3mzlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6lVX
aWk8iJT7zK0tATHdZrbIVWQwHwYDVR0jBBgwFoAUvbHIMkQqFwa/d/xOxDcYGbo/
waYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE4QUEzLzk0NzA3OEVDOUU1MjExRUVBQ0UxMEExQUQyNUJFNDY1L3ZiSElN
a1FxRndhX2RfeE94RGNZR2JvX3dhWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZiSElNa1FxRndhX2RfeE94RGNZR2JvX3dhWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QThBQTMvOTQ3MDc4RUM5RTUyMTFFRUFDRTEwQTFBRDI1
QkU0NjUvdmJISU1rUXFGd2FfZF94T3hEY1lHYm9fd2FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASV4fT9NG/OfQwtW0n7ab9xByWZyvV
cPMeF6FKC7wI3+H09tpuAdN4sqrQh2l0lba5EpDig4PuJuWcSXd2/93PKHg2ztV5
Q9BHaux74obptzZfNsfRE4nmxk87z81Gw3Mo7h0Nm/po3H+frMdbmu7j2Z/Hg0Yh
2tmuD6qFB07uavEFJQhW9Lj3l9ZqiXoylkg13X9Y2LqeWd41QuAlOX76egpVJILs
tnpIM4w0IzUI7ygS58BCEsx9+wJHf2dF5oxVhZ22dVWfmiCaKmJJb5ke5Z3R62qj
XpbZOKt5FEp/G/r6dbbKlxQ1zq3OVlwtfiaUFQIKEPqwDEFvtV6AwfpQ
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:01:10 2025 by rpki-client