
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
File: 35Ti668FVkXR68M9dxpKkrH1obo.mft (raw, json)
Hash identifier: IFWN/9ZPTHkgEJGtxLLsaiQN6Sl+vsV3/INufGsfmqU=
Subject key identifier: D5:92:5F:D1:0A:9A:D5:E7:FB:0E:0E:FF:4F:E8:B7:54:25:40:C7:94
Authority key identifier: DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
Certificate issuer: /CN=F36B4943AR/serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Certificate serial: 04A2
Authority info access: rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
Manifest number: 04A1
Signing time: Tue 04 Nov 2025 04:18:34 +0000
Manifest this update: Tue 04 Nov 2025 04:18:33 +0000
Manifest next update: Thu 06 Nov 2025 04:18:33 +0000
Files and hashes: 1: 35Ti668FVkXR68M9dxpKkrH1obo.crl (hash: AQFyf6ESvO/plIFV33x0c2yv9DS9inb1yeg8nwnIfbE=)
2: 22DB7C2C343B11ED93BC198DF1222468.roa (hash: MYN14FUjceVL/wAPb2hSaQa3Lgxp0KPz1gwNzEYrDaM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1186 (0x4a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4943AR, serialNumber=DF94E2EBAF055645D1EBC33D771A4A92B1F5A1BA
Validity
Not Before: Nov 4 04:18:33 2025 GMT
Not After : Nov 6 04:18:33 2025 GMT
Subject: CN=69097e9a-80de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:01:71:a9:1a:40:1e:bd:bd:67:f5:11:29:
83:d3:d5:8c:63:53:51:a8:a6:93:1c:07:ef:e6:fe:
e3:8b:b1:e3:7e:52:fe:ea:0b:44:cf:40:24:98:d9:
24:1c:93:53:33:a9:a8:05:0b:94:89:e4:45:3e:50:
aa:21:df:14:56:f1:63:76:7c:ec:b4:17:84:b4:4d:
bc:0d:c5:47:1d:a6:f8:37:6a:aa:8a:90:df:9c:27:
c9:9b:a9:94:8a:4d:83:e0:5f:f3:67:8d:9c:5e:45:
2c:b6:06:cd:4e:a9:2d:43:3c:9b:6d:a0:13:fb:4e:
bc:bd:67:35:f5:35:13:0c:cd:6f:cd:8f:f6:75:b6:
05:6e:64:03:30:a9:ad:ce:29:ba:96:f5:24:fa:33:
c5:e3:64:3a:5a:3e:97:69:2f:f7:de:28:04:1b:b2:
49:17:ff:da:f8:7c:29:eb:54:d0:87:7e:3e:4f:7d:
3a:a8:3c:c4:21:09:42:29:6d:d5:c3:b7:a1:2d:64:
6e:80:5a:b2:34:a1:d8:85:7f:03:78:97:fd:de:2e:
3f:db:d2:a1:72:68:f1:0a:92:ca:88:ac:ed:3d:05:
53:b0:a3:a4:65:76:55:36:81:fa:a5:23:9d:e8:19:
d2:9c:b1:ce:81:39:ee:32:1f:8e:d7:0a:c3:f0:a5:
48:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:92:5F:D1:0A:9A:D5:E7:FB:0E:0E:FF:4F:E8:B7:54:25:40:C7:94
X509v3 Authority Key Identifier:
keyid:DF:94:E2:EB:AF:05:56:45:D1:EB:C3:3D:77:1A:4A:92:B1:F5:A1:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/35Ti668FVkXR68M9dxpKkrH1obo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/193F6428343911ED8497D187F1222468/35Ti668FVkXR68M9dxpKkrH1obo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:98:ce:38:68:58:59:7b:71:c7:f0:a7:07:15:e5:d3:ea:b7:
11:2b:ee:6a:79:8a:08:69:d2:11:f1:76:54:91:7e:a8:85:a4:
06:e9:ed:77:65:d9:4a:d6:a3:86:39:8d:dc:f5:a7:e5:8e:fe:
84:e7:29:a3:f1:62:d7:32:d5:c7:a3:cc:c4:82:68:af:a7:f4:
4e:96:c4:cf:3e:21:dc:95:4c:14:4d:3a:1b:92:11:53:9f:fc:
ac:16:08:89:b2:58:8e:0a:da:99:ce:e9:0f:ee:16:9d:d9:02:
33:4a:09:d4:27:14:63:a4:6c:61:d6:21:ab:41:9d:88:5a:60:
f5:c1:9f:90:d9:a6:6b:1e:b4:75:3d:5a:4c:ee:57:64:05:df:
85:31:e5:55:b5:28:de:26:1c:46:94:52:bc:d0:27:05:a0:ff:
ff:f0:8f:74:78:54:5b:2f:c8:40:b8:67:3b:bf:2d:30:75:44:
4d:e0:5e:92:23:35:32:3e:28:ae:0a:28:62:93:07:c6:5b:49:
8d:3c:e5:5c:e8:a6:bf:75:7d:a0:fc:5e:f4:2f:22:ad:3f:0f:
8e:c6:f2:a5:f9:8e:4f:5f:01:a5:24:a9:c9:93:4f:02:fb:14:
77:4e:aa:72:ae:0e:73:91:2a:d6:6d:6f:e2:c8:96:03:88:24:
6a:bb:ed:fc
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBKIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5NDNBUjExMC8GA1UEBRMoREY5NEUyRUJBRjA1NTY0NUQxRUJDMzNENzcxQTRB
OTJCMUY1QTFCQTAeFw0yNTExMDQwNDE4MzNaFw0yNTExMDYwNDE4MzNaMBgxFjAU
BgNVBAMTDTY5MDk3ZTlhLTgwZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+KgFxqRpAHr29Z/URKYPT1YxjU1GoppMcB+/m/uOLseN+Uv7qC0TPQCSY
2SQck1MzqagFC5SJ5EU+UKoh3xRW8WN2fOy0F4S0TbwNxUcdpvg3aqqKkN+cJ8mb
qZSKTYPgX/NnjZxeRSy2Bs1OqS1DPJttoBP7Try9ZzX1NRMMzW/Nj/Z1tgVuZAMw
qa3OKbqW9ST6M8XjZDpaPpdpL/feKAQbskkX/9r4fCnrVNCHfj5PfTqoPMQhCUIp
bdXDt6EtZG6AWrI0odiFfwN4l/3eLj/b0qFyaPEKksqIrO09BVOwo6RldlU2gfql
I53oGdKcsc6BOe4yH47XCsPwpUh9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU1ZJf
0Qqa1ef7Dg7/T+i3VCVAx5QwHwYDVR0jBBgwFoAU35Ti668FVkXR68M9dxpKkrH1
obowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OTQzLzE5M0Y2NDI4MzQzOTExRUQ4NDk3RDE4N0YxMjIyNDY4LzM1VGk2
NjhGVmtYUjY4TTlkeHBLa3JIMW9iby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzM1VGk2NjhGVmtYUjY4TTlkeHBLa3JIMW9iby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjQ5NDMvMTkzRjY0MjgzNDM5MTFFRDg0OTdEMTg3RjEyMjI0
NjgvMzVUaTY2OEZWa1hSNjhNOWR4cEtrckgxb2JvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgmM44aFhZe3HH8KcHFeXT6rcRK+5qeYoI
adIR8XZUkX6ohaQG6e13ZdlK1qOGOY3c9afljv6E5ymj8WLXMtXHo8zEgmivp/RO
lsTPPiHclUwUTTobkhFTn/ysFgiJsliOCtqZzukP7had2QIzSgnUJxRjpGxh1iGr
QZ2IWmD1wZ+Q2aZrHrR1PVpM7ldkBd+FMeVVtSjeJhxGlFK80CcFoP//8I90eFRb
L8hAuGc7vy0wdURN4F6SIzUyPiiuCihikwfGW0mNPOVc6Ka/dX2g/F70LyKtPw+O
xvKl+Y5PXwGlJKnJk08C+xR3Tqpyrg5zkSrWbW/iyJYDiCRqu+38
-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:35 2025 by rpki-client