Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
File: j29vvKPGNM2_8Exy6bDsgG-YPKg.mft (raw, json)
Hash identifier: y1oPpivXpuVoCM5C4xXf4bO+PchuqjhGG+e/JgQwSog=
Subject key identifier: 21:24:20:F3:A6:60:35:2D:EB:1E:67:14:2A:9B:63:27:31:E7:86:58
Authority key identifier: 8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
Certificate issuer: /CN=F36B57DFAF/serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Certificate serial: 04AE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
Manifest number: 04AA
Signing time: Wed 05 Nov 2025 03:10:55 +0000
Manifest this update: Wed 05 Nov 2025 03:10:54 +0000
Manifest next update: Fri 07 Nov 2025 03:10:54 +0000
Files and hashes: 1: j29vvKPGNM2_8Exy6bDsgG-YPKg.crl (hash: kS8A1YwzzK/DXKhrVP8S3OBguBgN76QH02G80Wo4sYw=)
2: FB14937C4F2711EF830F0C61762E951A.roa (hash: NKUhSMZnwRNOJiKnhnRiI1tGFsbNrt1VXb7ny/WxBiE=)
3: 44EF15B42F7511ED934148D1F1222468.roa (hash: SVbI5/mcJ+ND6giCV7RVPDPt1p34yK1IAdaZ9mYU07E=)
4: 2C1A7CD22F7411ED88A88DCEF1222468.roa (hash: Sh1RvoN24iiQuOige1NA+5ffJjIAW81e8ojWpZOFayY=)
5: 1B58135E2F7511ED979DE2D0F1222468.roa (hash: DSGqTaxjbT+K9lrWKUIwbu4/OZVecKFE50cHdO72jtI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1198 (0x4ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B57DFAF, serialNumber=8F6F6FBCA3C634CDBFF04C72E9B0EC806F983CA8
Validity
Not Before: Nov 5 03:10:54 2025 GMT
Not After : Nov 7 03:10:54 2025 GMT
Subject: CN=690ac03f-f9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:19:63:0f:f4:a4:e2:e8:d4:27:e6:34:d3:
a2:fa:4d:48:f4:1f:cd:ca:b1:92:56:18:11:bc:13:
bc:cf:8a:2b:c6:f2:5c:71:8b:f0:91:e3:57:7e:0b:
65:14:d3:4d:99:ca:bc:81:cc:36:4d:f2:7f:01:6a:
c7:d5:fb:5c:da:76:24:b2:b6:fc:33:9f:a4:91:3c:
fa:3e:c1:ee:a4:5b:4e:c5:5b:c6:3f:81:24:8f:a1:
0a:3a:11:f3:c5:11:b7:ab:7e:ef:0c:17:83:36:8b:
51:ed:17:ed:72:3d:f4:7a:4f:23:65:fd:20:f4:15:
ea:95:40:ac:2b:c3:93:0e:fd:4a:40:ff:c3:f7:4c:
9f:3b:08:a8:3b:ef:53:d0:da:11:47:bf:c0:5c:39:
dc:64:70:50:80:67:7c:5c:5f:61:33:99:54:dc:0d:
7f:aa:c8:6a:78:2f:69:6c:01:e2:1a:44:69:93:28:
dd:66:56:4e:95:93:6d:6e:e0:74:9f:1c:22:5a:7f:
97:86:79:82:27:b5:aa:5c:1a:96:ba:75:99:e3:01:
c7:9b:47:5d:43:0f:96:7e:01:66:76:fd:e9:ab:9f:
42:e5:4a:80:66:8f:96:6b:21:21:34:1d:6c:ff:23:
20:7c:96:92:47:bd:8b:08:82:b5:50:2d:4e:2a:53:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:24:20:F3:A6:60:35:2D:EB:1E:67:14:2A:9B:63:27:31:E7:86:58
X509v3 Authority Key Identifier:
keyid:8F:6F:6F:BC:A3:C6:34:CD:BF:F0:4C:72:E9:B0:EC:80:6F:98:3C:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j29vvKPGNM2_8Exy6bDsgG-YPKg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B57DF/5FB443762F7311ED91ED78CCF1222468/j29vvKPGNM2_8Exy6bDsgG-YPKg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d5:92:5a:1e:c3:89:39:67:14:8f:db:25:59:3f:ea:e5:92:
b5:eb:dc:09:50:3d:35:c9:fc:fa:d9:64:5d:b8:f7:aa:58:6f:
73:db:5b:ff:c1:e5:fb:2f:3a:86:9f:a5:df:12:44:57:ef:7d:
70:a9:60:ce:da:87:d8:51:e3:3f:fb:67:5e:51:92:eb:c0:e4:
51:8c:ff:a5:c8:52:82:67:0b:c2:dd:fe:07:89:ae:89:b8:d7:
c2:1d:ff:3a:f2:b0:a8:31:83:53:c2:77:d9:9b:a9:10:85:0e:
a1:ef:16:95:25:57:c8:98:aa:08:f7:82:5c:54:37:5e:a2:1c:
93:f3:a4:a6:dd:10:b7:2b:20:2a:68:3c:2f:02:13:cc:18:7b:
1d:41:c4:ba:60:f9:f4:d6:d3:99:66:6f:4d:cd:92:73:a6:b6:
cb:85:63:2d:62:20:15:9a:07:ac:84:fe:28:6c:5a:0e:c2:12:
de:cd:87:3f:cf:1c:6e:5d:ba:7c:f5:82:68:f7:07:05:f9:1e:
e9:38:2c:2d:82:98:99:bc:a2:9a:e9:86:c4:a9:20:90:95:41:
6c:70:97:60:5b:14:8a:4d:c2:47:0e:20:22:d0:15:97:40:51:
8b:09:d7:dd:1e:5a:ee:be:1b:1c:b2:5b:cb:7b:f8:d9:83:89:
e7:b1:c5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:09 2025 by rpki-client