Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File: _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier: VeFruE60gCKC4iszdAsGIsKGUeZgEGpU8Q3dpvqQmjk=
Subject key identifier: AC:80:E6:4B:47:1B:D4:E7:5F:C6:CE:16:90:B2:9B:98:55:55:5B:A3
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer: /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial: 0289
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number: 0289
Signing time: Tue 04 Nov 2025 05:23:39 +0000
Manifest this update: Tue 04 Nov 2025 05:23:39 +0000
Manifest next update: Thu 06 Nov 2025 05:23:39 +0000
Files and hashes: 1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: 2QW9VqWH7NLDhN4bpvijieA2zakahaARRopEMgmGP/0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 05:23:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 649 (0x289)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Validity
Not Before: Nov 4 05:23:39 2025 GMT
Not After : Nov 6 05:23:39 2025 GMT
Subject: CN=69098ddb-131a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:de:e0:fe:b8:df:f7:8e:47:e5:23:aa:4a:c2:
c3:b7:10:a8:3c:15:3b:0c:87:d0:bd:93:bc:39:b4:
a4:d0:b0:ac:73:70:9d:bc:8b:ea:5e:1c:f1:71:9c:
fc:57:08:33:7f:18:f8:9f:29:d5:5c:18:e6:5b:b9:
56:f4:cf:df:3a:68:ab:ff:b1:94:b3:44:1d:dc:79:
21:b2:cd:86:b1:5e:3c:0e:8a:c2:98:7c:71:63:6c:
a1:9a:91:52:bb:4f:27:ce:ea:07:1f:ec:ec:bc:b6:
6f:99:2f:f5:60:13:27:da:37:fe:9c:d7:87:4c:15:
c6:c1:04:58:6c:b7:31:f0:bc:84:c9:a6:4e:fd:a6:
39:d7:bb:47:ed:5d:e1:15:c1:20:e3:35:18:d6:33:
99:3e:6d:ff:4a:26:7a:99:50:06:dd:d3:40:68:f6:
ce:5d:d3:43:e0:6f:de:5e:7b:69:4b:50:96:ff:c1:
ad:c1:17:09:ab:08:35:fd:74:dc:dc:e2:ee:b3:d2:
da:00:26:39:52:16:28:7c:c6:c2:97:60:7a:fe:97:
76:7b:02:46:2d:6e:af:6c:29:42:47:a0:93:43:b4:
30:3c:c6:92:33:1c:3b:86:35:d6:55:4e:d8:69:d6:
0c:5b:51:7b:b1:f4:c2:0a:e8:1d:b3:5f:32:c0:27:
1b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:80:E6:4B:47:1B:D4:E7:5F:C6:CE:16:90:B2:9B:98:55:55:5B:A3
X509v3 Authority Key Identifier:
keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:41:cc:35:2e:30:41:79:21:31:2e:65:c7:fc:25:1f:20:b4:
90:19:55:f1:d1:d9:5c:e2:da:8c:e6:75:10:fc:43:c0:b9:6b:
2a:f4:8f:19:c4:20:e5:86:f0:3d:d5:d4:7f:bf:6f:e9:c6:d2:
b3:68:9e:49:77:30:d8:db:4b:f7:85:09:e7:68:94:fb:79:af:
00:fe:d7:c8:a1:ff:0e:1f:9f:57:5c:bb:96:32:16:37:25:c6:
e1:ef:f9:23:d8:50:b4:b0:dd:8c:a2:64:a7:7f:e6:ef:ac:ba:
39:f7:89:96:30:64:d9:6c:bb:7b:ca:bd:e0:79:de:f5:8f:7c:
55:17:8c:d4:21:b1:4c:b8:ba:c2:31:c0:a6:52:76:37:df:4a:
d9:04:fa:cb:77:e6:c9:0b:9d:66:fd:b9:7b:4c:b3:ee:96:d8:
86:a8:dc:d8:93:de:48:b7:ff:5a:48:29:9c:be:45:f6:44:93:
11:60:48:09:f4:d9:bd:ee:11:6c:5c:d1:c0:33:3c:ba:c2:9c:
a2:d4:a7:4d:47:ac:5e:fa:53:93:45:ab:b1:7b:04:a1:2a:b8:
72:19:88:8f:82:c3:fe:46:e0:81:1f:04:7f:41:bb:b1:a7:17:
45:78:75:7d:ff:8b:dd:cc:e0:19:dc:c4:a1:c4:74:ed:52:92:
1a:96:d6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:49 2025 by rpki-client