
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File: _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier: YFFhUZvIUio8r0soBHmPPFs7BGsLbdqh+bEDLEIw1XQ=
Subject key identifier: 46:5B:76:4A:B9:D7:2D:9E:64:4A:53:42:2A:1C:E5:C6:85:87:E7:27
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer: /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial: 0DCE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number: 0DCD
Signing time: Wed 05 Nov 2025 01:01:19 +0000
Manifest this update: Wed 05 Nov 2025 01:01:19 +0000
Manifest next update: Fri 07 Nov 2025 01:01:19 +0000
Files and hashes: 1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: NdlHxxDVrBwhzfJVFNKAnfMClWdX/MXyTTV6pKt8TYQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3534 (0xdce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Validity
Not Before: Nov 5 01:01:19 2025 GMT
Not After : Nov 7 01:01:19 2025 GMT
Subject: CN=690aa1df-47bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:e3:74:86:8c:18:05:87:87:f0:42:6d:eb:
7a:cc:73:c3:93:f2:83:cb:de:78:d7:b9:3a:38:4d:
37:a0:0d:cd:da:b8:f1:47:fb:1a:13:e5:f6:9c:43:
15:4f:1e:aa:80:a9:b6:cb:e8:55:59:26:92:2e:24:
21:e3:c4:57:5e:62:9e:4e:a9:a4:4b:5c:28:eb:35:
81:3e:e4:bb:de:0d:c2:8d:94:48:06:8f:27:72:92:
18:86:54:25:ea:10:7f:20:2a:76:0e:0a:b5:c3:15:
3b:03:2f:0f:6c:58:3c:a9:29:77:37:53:0b:b0:bc:
9c:94:5c:bb:e6:80:dd:ed:d2:c0:07:7e:d7:95:40:
d0:30:fc:c7:1b:5e:59:cb:86:e1:e6:a4:f7:7c:c7:
eb:d0:17:ea:87:50:37:2d:a7:5d:af:d8:98:e4:2d:
5a:7e:0f:8d:4b:7a:4c:ee:52:1a:bc:c7:54:b7:9b:
9d:d6:ab:fb:25:5f:a8:ed:13:c5:13:f7:ad:51:a5:
3c:0e:e2:86:81:76:be:2c:83:b4:9a:38:55:f2:8c:
36:4f:49:a0:7d:44:b8:b1:b0:56:db:03:7c:8f:be:
1b:43:83:df:d5:cc:43:39:e8:89:93:ce:f8:5b:36:
78:1e:40:62:e8:b4:0f:9c:7b:bd:51:b7:97:17:11:
05:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5B:76:4A:B9:D7:2D:9E:64:4A:53:42:2A:1C:E5:C6:85:87:E7:27
X509v3 Authority Key Identifier:
keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:59:c3:03:55:98:90:a8:0f:92:22:ee:be:1b:b2:77:07:49:
44:23:41:a4:9d:68:67:de:43:03:7f:ac:08:76:05:7d:2a:f6:
69:bc:54:c1:a4:93:3e:a4:3d:0e:ca:0e:7a:13:30:f9:34:e8:
9f:5c:36:67:64:49:94:db:2a:41:6c:9a:c6:10:fd:70:13:8b:
1a:28:f7:5c:59:b3:50:dd:79:01:28:12:b9:7d:c2:9c:aa:bd:
c1:9b:df:3b:15:e9:67:f6:a3:9a:fc:ac:fe:27:c9:8f:a1:3a:
ee:1e:01:c9:cd:60:52:e1:3c:32:b1:c5:a7:2c:55:7a:aa:72:
a5:03:6b:21:24:15:29:83:4a:35:8f:fc:aa:dc:38:24:c3:be:
c8:6b:3c:5f:9b:29:a0:fc:b9:12:0d:41:76:7a:a9:aa:7b:ec:
e1:dc:c7:47:25:f9:ac:a3:6e:89:39:a8:c6:32:87:93:cd:f7:
34:7d:f2:47:72:54:57:34:88:f5:4e:6e:fe:09:42:d6:b2:8c:
3a:a3:15:32:7e:04:88:be:18:10:4c:45:4e:8b:0d:ea:46:6a:
b8:09:be:b1:b6:14:35:05:02:e0:9b:65:44:83:ff:43:da:2f:
37:df:89:95:74:df:9d:9c:27:9d:ed:a9:e3:7a:8c:62:05:50:
61:19:a0:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDc4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ5RkFBRjExMC8GA1UEBRMoRkQ1OUFDMjA3NzM1OUIwRDcyM0QyMEFBOTk5QThF
MTZBODRCNDE5MzAeFw0yNTExMDUwMTAxMTlaFw0yNTExMDcwMTAxMTlaMBgxFjAU
BgNVBAMTDTY5MGFhMWRmLTQ3YmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiTuN0howYBYeH8EJt63rMc8OT8oPL3njXuTo4TTegDc3auPFH+xoT5fac
QxVPHqqAqbbL6FVZJpIuJCHjxFdeYp5OqaRLXCjrNYE+5LveDcKNlEgGjydykhiG
VCXqEH8gKnYOCrXDFTsDLw9sWDypKXc3UwuwvJyUXLvmgN3t0sAHfteVQNAw/Mcb
XlnLhuHmpPd8x+vQF+qHUDctp12v2JjkLVp+D41LekzuUhq8x1S3m53Wq/slX6jt
E8UT961RpTwO4oaBdr4sg7SaOFXyjDZPSaB9RLixsFbbA3yPvhtDg9/VzEM56ImT
zvhbNngeQGLotA+ce71Rt5cXEQVNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURlt2
SrnXLZ5kSlNCKhzlxoWH5ycwHwYDVR0jBBgwFoAU/VmsIHc1mw1yPSCqmZqOFqhL
QZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4QUVBMjI4L19WbXNJ
SGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19WbXNJSGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ5RkEvQTI1NTkxOUMxQzFDMTFFNkJBMUU1QzBDRjhB
RUEyMjgvX1Ztc0lIYzFtdzF5UFNDcW1acU9GcWhMUVpNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiWcMDVZiQqA+SIu6+G7J3B0lEI0Gk
nWhn3kMDf6wIdgV9KvZpvFTBpJM+pD0Oyg56EzD5NOifXDZnZEmU2ypBbJrGEP1w
E4saKPdcWbNQ3XkBKBK5fcKcqr3Bm987Feln9qOa/Kz+J8mPoTruHgHJzWBS4Twy
scWnLFV6qnKlA2shJBUpg0o1j/yq3Dgkw77Iazxfmymg/LkSDUF2eqmqe+zh3MdH
Jfmso26JOajGMoeTzfc0ffJHclRXNIj1Tm7+CULWsow6oxUyfgSIvhgQTEVOiw3q
Rmq4Cb6xthQ1BQLgm2VEg/9D2i8334mVdN+dnCed7anjeoxiBVBhGaAr
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:26:34 2025 by rpki-client