Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File: ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier: SN1bkqorxWF6oN4SWo4cLa6MzGupf382sqE3jln/yeI=
Subject key identifier: 41:8B:8C:9A:9A:B8:B3:91:B7:8C:D4:42:B7:60:3A:F0:C2:E3:EE:5D
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer: /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial: 0421
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number: 0420
Signing time: Wed 05 Nov 2025 03:24:36 +0000
Manifest this update: Wed 05 Nov 2025 03:24:36 +0000
Manifest next update: Fri 07 Nov 2025 03:24:36 +0000
Files and hashes: 1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: zismUlqrhZg3AeHDCQ4+OXtXiJFjmifvxBk1nTjUVjw=)
2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Validity
Not Before: Nov 5 03:24:36 2025 GMT
Not After : Nov 7 03:24:36 2025 GMT
Subject: CN=690ac374-40fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:96:b1:72:58:c3:2d:a7:07:18:4f:8d:a5:
61:c1:2a:aa:0c:4f:59:45:e4:9e:8d:d4:44:b1:5d:
16:0a:bb:bc:bd:90:a3:14:1b:94:0d:77:af:a0:87:
a7:1f:6d:13:23:25:e9:40:ee:ed:21:f1:9f:76:a2:
c5:e2:5a:6e:5a:4b:d0:c5:e1:0f:cb:d7:01:a5:fb:
ac:11:86:50:0a:4d:a1:44:ae:ea:b6:dc:66:e7:59:
e7:f9:14:08:ea:23:b1:38:0a:50:2a:57:a4:34:f1:
e0:e1:b4:a6:c5:7e:81:c4:43:1f:a5:64:51:b8:a4:
5d:1b:ef:a5:8c:7f:d0:e8:72:8a:00:43:21:69:3b:
cf:74:ce:10:41:4d:be:c5:92:a9:07:0a:06:c1:fa:
86:84:81:81:ca:8d:90:30:04:9a:0c:95:79:fe:2a:
0f:3d:68:f6:9b:1d:bb:38:37:76:bf:e9:69:a9:7e:
31:ea:3b:57:52:88:60:a5:f0:04:d3:01:16:eb:19:
62:d1:7c:02:3c:26:10:59:9a:a5:57:11:8a:ec:86:
5e:db:32:b9:1d:23:99:98:ce:63:79:8a:70:54:fc:
d0:d2:b9:f9:5a:bc:35:09:ce:e5:38:86:41:45:db:
2e:06:9a:31:ff:15:89:ee:e0:64:d6:48:23:1f:9d:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:8C:9A:9A:B8:B3:91:B7:8C:D4:42:B7:60:3A:F0:C2:E3:EE:5D
X509v3 Authority Key Identifier:
keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:98:2f:37:f5:73:d6:6d:cb:cd:65:78:82:4b:53:eb:25:11:
a1:36:19:ec:c8:6e:ec:03:c3:c4:18:07:89:d7:dc:9b:1e:f6:
e3:f2:37:06:92:dd:5e:e1:7d:eb:36:f5:e0:b3:ef:96:59:4d:
43:14:33:86:49:60:da:55:f5:fd:a5:f8:5f:87:cf:96:d6:f0:
df:f9:a5:9b:bc:96:51:bd:fe:2a:24:59:80:f1:60:51:4a:2b:
a1:46:c6:65:21:ae:6a:e5:d8:7c:8d:50:5c:60:1b:a5:fe:52:
79:39:5b:df:79:24:16:57:98:4f:af:a5:5d:ab:50:15:d0:57:
aa:3c:aa:8d:7a:e0:43:8c:d4:93:34:55:07:66:1b:97:b4:d7:
77:e9:af:4f:c6:4a:0f:89:74:0c:9e:7b:82:ed:4b:a8:04:32:
2a:01:13:5f:61:a5:28:e4:f6:02:5c:72:cb:f4:83:f8:48:de:
ee:c8:f4:cc:82:da:0f:b5:6d:55:84:52:cd:0b:c6:dc:b6:d1:
eb:aa:63:37:22:42:21:08:f5:36:a3:b2:6d:a0:3a:98:ad:e7:
59:d5:30:4e:94:1c:24:be:e4:50:7e:60:02:ad:7a:ef:38:d4:
25:a7:b8:62:83:8d:42:39:88:05:57:bb:ce:ba:28:b4:13:85:
4a:df:3a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:22:57 2025 by rpki-client