Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier: clHRlNNlpb2Pf+ddhz2baAFHL0/nmVjN2oWq0d7h8CQ=
Subject key identifier: F3:C5:C0:B5:C3:0A:8B:29:68:0E:23:F5:4F:E7:58:FB:47:8F:7F:24
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer: /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial: 04E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number: 04E5
Signing time: Tue 04 Nov 2025 04:09:19 +0000
Manifest this update: Tue 04 Nov 2025 04:09:18 +0000
Manifest next update: Thu 06 Nov 2025 04:09:18 +0000
Files and hashes: 1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: gx3usq44rDSsOLXKx+iDcLUr1hr5fMrXyyROkx5QA5M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 04:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1254 (0x4e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Validity
Not Before: Nov 4 04:09:18 2025 GMT
Not After : Nov 6 04:09:18 2025 GMT
Subject: CN=69097c6f-923c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b7:c7:c2:7b:9b:97:8a:be:d0:68:c1:d3:b5:
8c:0d:c3:21:50:02:e5:b4:e4:21:fb:7a:e6:0c:c8:
88:eb:c7:72:9d:7a:d8:fd:fb:e9:c8:2c:72:7e:b8:
10:1b:b8:8c:ec:c5:59:db:77:38:e1:e1:96:e3:9e:
ae:d3:26:60:1a:b7:13:78:2f:0e:23:7c:54:75:36:
10:05:3f:46:4e:8e:fb:41:c3:16:1e:ee:51:0f:cb:
7d:c4:a5:ab:b6:47:47:23:74:6f:50:b2:fe:45:a2:
22:b5:e4:5c:de:df:01:94:16:63:83:38:c6:aa:5d:
64:ab:12:51:53:48:f0:36:a6:ab:1b:b3:04:4d:46:
c2:2b:83:4c:79:e8:d1:b5:33:0c:36:54:c2:3b:1c:
04:7b:b6:5c:a1:3e:3f:7e:d9:39:9f:fc:4b:52:26:
a6:6e:14:cc:b4:3c:32:25:12:aa:59:b9:5e:70:19:
1c:56:9d:78:11:e1:c0:96:f2:a1:93:f7:54:d2:e6:
70:68:01:52:02:a3:13:b6:47:a6:ec:8e:04:ab:b2:
45:29:3d:11:0e:3f:4b:6d:cb:65:d9:05:fc:2a:75:
9c:54:04:99:21:7b:e6:a4:75:58:c6:5d:7a:50:6f:
12:6a:b5:11:d8:6a:a1:67:2f:0c:43:c9:7b:ad:90:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C5:C0:B5:C3:0A:8B:29:68:0E:23:F5:4F:E7:58:FB:47:8F:7F:24
X509v3 Authority Key Identifier:
keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fc:c6:08:e1:f4:27:91:3e:d2:cc:8b:41:51:7e:4a:a1:a8:
96:0a:2a:1f:2e:f9:3f:93:99:7f:6f:24:e6:c3:af:d1:25:26:
48:7b:61:af:d1:15:28:1d:ab:18:27:98:a4:87:9b:be:14:45:
0a:e2:6c:8f:5e:fa:3a:42:bf:97:16:a7:6d:4e:8c:75:b5:52:
28:87:ff:2f:7a:8c:e8:2c:80:7b:b0:59:b1:2c:34:66:e9:09:
b5:b0:3d:c8:fb:90:49:5d:e4:bd:ad:bf:5f:f1:3c:5b:23:cc:
de:8f:05:eb:2c:01:13:bc:87:4a:4f:c5:4f:e3:e8:ab:9e:7f:
32:70:62:38:c3:d8:3d:a1:dd:2b:70:af:da:ae:43:da:72:c0:
5e:b6:c5:c9:4a:20:5f:27:61:f7:8b:ef:a6:40:cd:4a:24:82:
8c:05:b0:13:c7:69:b1:6d:e2:e4:d5:be:43:4d:1f:31:0e:9d:
92:5c:3b:aa:fc:bd:c6:10:33:f4:cf:e5:dc:94:d6:d9:3d:32:
5c:43:3f:59:02:15:36:23:ce:a4:db:23:1e:ab:e9:fd:27:ab:
90:82:35:1e:24:29:44:6d:b9:23:95:3c:7d:26:bc:34:f1:69:
6c:f0:6b:91:33:bd:e4:52:6e:2d:9b:b7:f4:ad:69:3a:6e:d1:
53:cc:5f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:03:38 2025 by rpki-client