Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File: ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier: KKDsDTPuL/5pFqoY7mGcsEpIfaHHgTghCjk2w06ScC4=
Subject key identifier: 4A:3E:EE:51:A3:33:8D:CC:4C:04:FF:E0:18:31:DC:F6:24:68:5B:B8
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer: /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial: 0759
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number: 0759
Signing time: Wed 05 Nov 2025 02:00:08 +0000
Manifest this update: Wed 05 Nov 2025 02:00:07 +0000
Manifest next update: Fri 07 Nov 2025 02:00:07 +0000
Files and hashes: 1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: PE+BnckXDZ8RD7N0Y84iavK94Vwqv6mPU5YhjNqGl+0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1881 (0x759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Validity
Not Before: Nov 5 02:00:07 2025 GMT
Not After : Nov 7 02:00:07 2025 GMT
Subject: CN=690aafa8-8fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:19:78:63:d8:d0:6c:cd:f1:1f:12:02:8c:8e:
ad:98:9a:fa:03:3b:f1:36:b5:88:3e:d6:41:9d:51:
b5:f8:53:56:72:42:8d:6f:1d:b6:96:cc:16:31:85:
41:b8:75:a3:8d:71:26:16:62:0f:7a:e9:be:ba:e9:
de:74:4a:be:54:a5:3f:c8:b8:04:33:3c:fd:d8:48:
ee:83:79:b6:61:b2:54:b4:f4:d2:63:5c:23:11:f5:
23:3e:93:81:34:62:be:f9:c3:fe:60:75:aa:21:46:
39:1c:1e:a8:39:a4:c3:ca:56:1c:92:bf:4b:58:60:
c5:ab:15:2c:bd:1b:3b:29:91:17:29:0f:e0:a0:61:
c0:2c:e3:0a:94:2a:36:ef:d8:27:3a:a0:5d:d8:b8:
99:b7:18:ec:66:63:86:69:30:b2:b8:44:99:aa:91:
5a:2c:0e:63:1e:2e:a3:9f:d8:88:bc:f9:26:c9:12:
75:51:70:cc:b5:58:e4:4b:0b:ff:c8:a8:5d:20:51:
4e:f5:0d:2a:b5:62:ff:90:89:a1:0a:b7:fc:9c:54:
cc:4a:2f:c6:db:88:4d:dd:a6:e8:59:3e:63:b2:8e:
90:28:ad:1c:10:51:4b:01:72:3e:f7:aa:5f:35:d4:
d7:3a:12:2a:06:80:3d:a4:b2:4d:ff:35:92:4f:da:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3E:EE:51:A3:33:8D:CC:4C:04:FF:E0:18:31:DC:F6:24:68:5B:B8
X509v3 Authority Key Identifier:
keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:99:40:a9:8c:57:2e:fc:4c:e3:87:46:68:de:67:e9:a7:cb:
7a:20:22:31:62:b2:bd:4e:33:01:7c:33:df:37:7a:fa:42:1d:
bd:05:58:28:a6:67:52:97:86:12:a3:77:49:1a:24:56:72:74:
47:5b:9e:ed:23:61:5f:fd:2d:dd:fa:41:93:12:b0:67:d2:db:
54:fd:fd:5c:ad:b5:95:10:b6:fb:80:ae:7b:be:ed:28:76:c1:
54:30:42:82:f4:0c:dd:bc:2c:28:30:8f:1c:55:eb:fd:45:e4:
1a:a3:10:14:c9:69:73:c9:d3:48:96:a1:08:6c:6c:b5:6e:64:
3e:ec:6f:4b:78:81:f2:cd:b0:4f:1d:e2:4d:48:29:4f:58:d0:
e4:91:f6:62:71:7b:fe:f1:b8:37:1b:76:e0:63:e0:2f:32:11:
77:be:d9:95:d9:31:79:c5:0d:27:00:1e:b0:9a:8b:0f:f0:46:
cc:92:fa:bd:22:a1:46:ba:a6:b6:9e:a8:c9:26:01:07:18:1c:
b0:8c:ad:08:09:19:65:3e:af:0e:75:50:8e:8f:61:58:75:95:
04:bc:9c:58:dd:fb:c1:74:20:48:d2:77:45:a9:1a:d1:f9:5e:
3d:39:e5:17:f9:dc:aa:11:15:47:d3:bb:d4:8f:66:6a:85:02:
69:35:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:36 2025 by rpki-client