Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier: krheS7/orhLMMyWrTGBQY9q2RqU5nsdQiBhztq/TmxQ=
Subject key identifier: 70:26:DF:84:98:49:03:8A:0B:DD:C2:EE:45:80:D8:6A:00:C5:15:16
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer: /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial: 04A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number: 04A5
Signing time: Tue 04 Nov 2025 04:17:17 +0000
Manifest this update: Tue 04 Nov 2025 04:17:17 +0000
Manifest next update: Thu 06 Nov 2025 04:17:17 +0000
Files and hashes: 1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: iK6MvenLTQB0y4ss3Bi1IGdI1YCmn+fhB3f70v/xpHk=)
2: E3F54648303711ED9A084DD9F1222468.roa (hash: gFeaumPVCdd6tZ5UsCnpNw/LwtGf891vKHW1FGcYpBY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1190 (0x4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Validity
Not Before: Nov 4 04:17:17 2025 GMT
Not After : Nov 6 04:17:17 2025 GMT
Subject: CN=69097e4d-bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e0:84:d4:c0:77:8a:70:11:39:c6:a2:4e:c1:
c2:57:92:9d:6e:e5:c4:26:be:1a:9f:35:f3:dc:7e:
be:ee:c8:d4:65:f1:88:6a:15:f9:c3:96:f0:95:3e:
33:d4:6e:d4:36:45:a6:ce:fd:c2:c6:85:c9:5c:f8:
8a:ef:5d:2d:91:17:a4:05:16:36:7a:c0:d0:da:3b:
81:fe:83:1e:cf:92:4a:16:5c:fc:30:18:8e:56:74:
93:77:32:1b:40:62:ed:f1:f0:de:f0:fc:a1:e4:9e:
59:24:4f:39:94:3e:b9:1f:43:fe:2e:c5:4f:01:01:
2c:10:7b:d1:80:28:5f:bf:8b:f7:48:e5:19:3b:af:
85:11:cd:d5:ff:1f:46:38:c8:be:0c:17:e4:b7:3f:
8c:4d:9c:d3:96:e1:dc:ab:56:a8:04:4e:af:2f:14:
03:be:f1:19:43:3e:0f:71:a2:f8:73:18:11:3e:f5:
a9:9e:52:18:5f:66:ca:01:5c:38:9c:bb:3c:93:26:
3f:f5:d4:b9:b7:70:32:9a:cf:f5:d9:a7:34:34:98:
58:00:84:6d:7e:4e:d9:ff:ea:4b:71:07:9a:41:f4:
a0:48:67:dc:e1:9a:e2:6e:c2:81:b2:d6:7a:a7:e5:
fb:60:4c:52:49:e1:e4:6f:74:0c:a6:7c:aa:f7:03:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:26:DF:84:98:49:03:8A:0B:DD:C2:EE:45:80:D8:6A:00:C5:15:16
X509v3 Authority Key Identifier:
keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e8:3e:fc:98:15:a8:2f:f5:bd:1e:b2:53:aa:00:11:92:a3:
6a:8c:ec:ed:11:2c:f6:e6:7a:a9:8b:48:0d:2d:53:2e:8f:27:
12:39:2d:31:20:28:c5:04:6f:94:c4:da:f9:98:f1:91:0e:c8:
cd:3e:40:bc:2e:86:87:0f:74:48:ea:3d:68:be:fa:0e:7c:d2:
fc:60:d9:46:c6:5d:f7:a6:ab:36:ff:bb:39:e1:11:fa:03:cc:
5f:9e:f1:6f:ec:ca:a4:ab:29:4e:b0:ac:ad:a7:d2:e5:f2:fc:
c9:f1:87:04:b2:9a:3e:18:1b:a3:5b:d5:47:01:05:95:de:bb:
d3:75:f0:13:72:54:84:b5:bd:df:f1:40:2d:52:58:5c:14:27:
75:af:d5:82:e1:cc:7c:34:b4:02:d6:0d:cf:88:86:a5:3a:3b:
86:f5:04:fe:92:04:48:7d:71:f4:dd:b7:bc:ae:4b:4b:c4:2f:
4c:64:df:f6:b3:fb:b0:dc:9d:35:06:2f:46:d2:80:8a:51:05:
05:77:8b:73:be:73:aa:be:a3:69:15:02:05:4c:c1:06:33:fe:
85:f3:56:28:4f:fd:3e:5b:2d:eb:4f:67:e4:3e:70:4b:94:95:
70:d6:ba:0c:d7:33:22:41:d6:f0:17:4c:c5:77:e0:be:9a:06:
8b:64:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:17 2025 by rpki-client