Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
File: HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft (raw, json)
Hash identifier: YpedtVfvjHb+HmJgw/6SHYGqbFTz8UyfHD2MMTzSNzE=
Subject key identifier: 16:B1:C4:BA:BE:C0:29:F6:08:C9:85:C8:AD:CA:4C:E1:52:11:02:2A
Authority key identifier: 1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
Certificate issuer: /CN=F36B13C7AF/serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Certificate serial: 0869
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
Manifest number: 0864
Signing time: Wed 05 Nov 2025 01:42:28 +0000
Manifest this update: Wed 05 Nov 2025 01:42:27 +0000
Manifest next update: Fri 07 Nov 2025 01:42:27 +0000
Files and hashes: 1: HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl (hash: E/zMGZKR9nKjuUtRVDeX/A+waqynXszz7Wo4muuCJ+o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2153 (0x869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B13C7AF, serialNumber=1DC02BDC1B2F287E0E348277BDF6BEDF9C3C1BF9
Validity
Not Before: Nov 5 01:42:27 2025 GMT
Not After : Nov 7 01:42:27 2025 GMT
Subject: CN=690aab84-fec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c5:6d:86:cc:92:f3:4b:92:d1:ad:4f:50:5c:
c4:a3:68:13:5f:09:0f:72:56:e1:f6:e6:d7:95:ea:
63:fc:c2:4f:5f:d4:b3:b5:e2:94:f0:d2:a8:f9:7c:
e5:98:d6:7c:c0:c4:f7:8d:2f:ef:19:08:90:84:71:
23:6e:ad:f0:00:34:a1:25:9d:54:21:38:74:6a:d0:
5a:e3:39:de:df:fd:21:c3:9f:ee:aa:9f:a6:bb:ec:
e9:45:83:a3:15:89:0a:4e:fc:07:88:e6:71:a8:04:
02:71:50:e3:ab:33:5b:2e:4e:0e:74:49:cc:a6:1d:
b3:fa:1b:b7:78:8a:45:30:98:7b:21:2a:9c:89:6f:
f8:0a:69:27:e4:2d:7f:e6:0b:ec:21:43:ef:45:a2:
7c:88:50:de:22:c8:a3:b3:2a:06:ae:fb:b1:18:90:
a9:4d:77:38:d8:45:4d:60:d2:94:b1:ef:42:a7:5a:
c9:c0:06:05:9d:16:aa:bd:bc:1a:3c:1c:1a:b5:20:
5b:23:32:0c:d7:f4:86:0f:3c:e8:04:df:f7:6a:82:
62:dc:69:dc:b8:84:fa:4d:ed:41:c4:e8:7c:61:78:
a6:6a:28:b7:0d:23:a6:11:c0:e8:62:00:42:38:3d:
d1:38:c4:4a:bc:43:02:88:ce:07:d7:21:0a:dc:7e:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B1:C4:BA:BE:C0:29:F6:08:C9:85:C8:AD:CA:4C:E1:52:11:02:2A
X509v3 Authority Key Identifier:
keyid:1D:C0:2B:DC:1B:2F:28:7E:0E:34:82:77:BD:F6:BE:DF:9C:3C:1B:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcAr3BsvKH4ONIJ3vfa-35w8G_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B13C7/9160B44E56AF11EA9954C976F8AEA228/HcAr3BsvKH4ONIJ3vfa-35w8G_k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:03:2d:1a:a2:dd:8c:8b:01:18:aa:ee:f1:5f:fa:90:54:11:
1b:8d:ad:10:91:c3:dd:8e:47:90:41:99:a4:00:eb:4f:5b:3b:
e5:c5:01:26:d3:f8:4a:b0:7c:5f:34:24:8e:60:99:a5:09:94:
73:27:6d:1b:7e:f2:3b:c8:a0:cb:cf:96:e7:6c:68:f5:fe:87:
83:23:84:90:68:19:de:a3:b0:35:ea:5d:a1:9b:56:87:dd:4a:
6c:4c:dd:eb:e5:6d:2a:c4:6a:7e:54:87:25:c1:1b:e3:14:67:
05:06:c0:a5:5f:fa:8c:81:44:08:a9:84:18:81:1f:51:ea:b7:
32:ae:51:20:b7:2c:4e:9d:11:87:c5:e1:99:db:e9:f8:66:d5:
8d:e6:fb:6d:5f:04:52:69:6a:73:f5:34:c1:4d:f7:bd:75:7e:
ed:dc:34:2b:0a:eb:a1:14:50:50:c5:02:e1:48:20:0b:60:49:
ec:55:c3:91:f8:2d:f8:0c:9b:6c:58:3b:60:e2:d7:0e:a2:9b:
13:f3:e5:c0:a8:67:14:b9:5f:17:66:ad:b9:78:21:bf:ac:a6:
b3:e5:ba:b8:d5:71:e2:7e:fc:fb:ef:63:51:89:fb:76:2a:7e:
e4:7b:00:b1:08:02:25:c8:24:c1:87:b2:f5:b4:e0:0e:74:46:
09:1e:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:48:03 2025 by rpki-client