Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier: YkK9yYEX3FaM081coPMlVy2Rdpj2Pf8ca3PxFce2pow=
Subject key identifier: B5:69:3D:C5:36:C4:F0:25:EB:4E:55:A6:13:D9:F8:EE:29:8F:80:DC
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 0642
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number: 0640
Signing time: Wed 05 Nov 2025 02:26:49 +0000
Manifest this update: Wed 05 Nov 2025 02:26:48 +0000
Manifest next update: Fri 07 Nov 2025 02:26:48 +0000
Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: SZ7lbt7pVeT0Uyihsn5Wq/W3/pB6NATjq6fNE7GksUA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1602 (0x642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Validity
Not Before: Nov 5 02:26:48 2025 GMT
Not After : Nov 7 02:26:48 2025 GMT
Subject: CN=690ab5e9-9c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:df:53:a7:c8:85:ff:8c:91:79:c8:7b:be:
66:a7:78:48:d9:c2:d4:c8:e2:3a:cf:7b:1a:a4:fe:
b6:c7:d7:1d:e6:eb:71:41:a4:9b:55:af:57:b9:fa:
f6:14:a9:1f:d5:fc:a9:c6:13:c2:f6:d6:47:fb:1c:
e0:d4:2b:f1:18:41:60:ca:f5:ab:99:62:39:41:a1:
14:4f:88:72:2c:5b:d4:e3:db:92:5a:a7:25:b1:b7:
47:9b:81:57:9b:c4:04:90:2c:42:9f:f7:a6:34:86:
ff:6d:dd:0e:eb:02:59:ac:cb:42:02:70:af:58:81:
b7:b6:ed:6b:ec:34:57:1e:ad:ba:fe:85:d1:da:04:
37:7d:c6:52:9b:5d:2f:07:30:31:95:87:55:a6:48:
7b:c6:32:49:71:16:af:ba:51:dd:d2:47:e0:66:cb:
f0:d0:1a:09:5e:4d:48:de:ea:db:52:7a:cd:4c:2c:
95:7b:04:66:00:5e:77:af:29:3a:22:a8:f0:32:92:
7e:97:c9:4f:7f:d7:b0:93:df:8b:41:65:2d:be:45:
33:b9:7e:68:11:84:dd:51:f7:0b:3d:96:4d:da:8a:
d8:da:1f:18:6c:28:4d:a0:e6:26:9f:00:f2:72:27:
15:3b:3c:3f:5f:7c:0b:40:58:c8:58:4d:56:ac:39:
69:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:3D:C5:36:C4:F0:25:EB:4E:55:A6:13:D9:F8:EE:29:8F:80:DC
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:bf:c7:75:e9:12:a0:fc:d7:88:91:33:0e:16:e7:00:d5:d7:
84:e8:f7:2b:a2:a4:d5:46:a9:ce:a8:9f:41:24:f8:46:83:24:
b4:b2:ea:ad:25:91:ae:a7:c1:d3:cb:18:06:c1:86:70:e8:df:
f6:03:46:99:4d:c8:d2:0a:10:32:78:59:c4:3d:9e:3a:ea:ae:
43:bb:2f:87:c2:d9:ca:65:d6:6a:8d:07:fe:b8:d5:e3:88:ee:
b1:c1:c1:5e:5f:5d:11:dd:af:93:20:1b:dc:43:b6:15:83:fb:
fa:c8:08:d9:de:d5:ad:b8:36:7f:2c:18:45:4d:4d:75:d1:e2:
b1:02:da:3b:33:bc:cb:fc:2d:ce:a9:06:9f:9a:fb:f4:3a:34:
9f:a2:b8:fe:cc:49:c1:7b:ca:c4:6d:ac:f1:33:9d:14:8e:a8:
a6:ce:5f:82:b9:99:11:22:45:14:64:1c:54:2a:18:8f:53:50:
81:47:69:32:66:28:95:75:09:3a:44:8f:86:8b:9c:57:13:0c:
32:33:e3:23:2c:1a:61:f0:56:49:08:99:15:3b:ac:bd:22:af:
fd:0a:ff:1f:7b:03:37:9a:01:24:04:a0:9a:b6:35:55:6b:83:
4f:56:eb:2f:bd:43:d5:83:d9:29:8c:37:cb:62:49:66:9a:80:
36:54:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:31:30 2025 by rpki-client