
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
File: KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft (raw, json)
Hash identifier: akgnOLKyCgw8ReIUH2Z8ooPSgfEwUymxtWqsqenW8gk=
Subject key identifier: 22:BC:09:05:A1:40:7D:85:59:D5:AD:28:96:EB:9F:2B:8A:5B:10:D5
Authority key identifier: 28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
Certificate issuer: /CN=F36D5F5AAF/serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Certificate serial: 03D9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
Manifest number: 03CF
Signing time: Tue 04 Nov 2025 04:42:46 +0000
Manifest this update: Tue 04 Nov 2025 04:42:46 +0000
Manifest next update: Thu 06 Nov 2025 04:42:46 +0000
Files and hashes: 1: KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl (hash: ckQTnW2SjiigImV3qNMpvzhbNJlXXyfIx+uysAK/rEo=)
2: 3BE81A3892FF11F088E51979DAE4EC9C.roa (hash: Yzg3xjGIsu/ulsgWMNyoDewqrKHbp+zn1cyoVl3O9Yg=)
3: FDA533F092FE11F0BA755DF5DAE4EC9C.roa (hash: pQCV7Xh0G5jeTLV72a/weSIz6eXJKOWd6gDgzxScmXg=)
4: 74B5C16292FF11F0BA81327BDAE4EC9C.roa (hash: X3y3ETyNfJkv+gNamJ5YAN6Cv+s3LQHP84dm6Z/93XY=)
5: 5B36715A92FF11F084841C7BDAE4EC9C.roa (hash: Y8PSOzjedh9cWf7Fh5eBNpi+rFoGWqu8tq9b4nzoOjg=)
6: C65FE1F692FE11F0BC8418F5DAE4EC9C.roa (hash: 36hjpJHDjwEXOIEOe0bkLRIciGsDO/S0H+3g2hxaodo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D5F5AAF, serialNumber=28293436D4D6DA3A93A60ECA3FBEC77D8DC38F61
Validity
Not Before: Nov 4 04:42:46 2025 GMT
Not After : Nov 6 04:42:46 2025 GMT
Subject: CN=69098446-703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5d:39:70:42:a0:ab:20:4a:91:66:e7:d2:aa:
52:e3:a4:17:2d:7f:f8:12:49:3b:6a:31:d7:27:ea:
34:cd:67:69:1c:81:5b:03:c3:b1:99:80:73:a8:55:
11:fa:0d:61:eb:74:04:22:bb:b6:a4:49:46:b3:cc:
11:19:25:b3:c6:e6:8c:a0:f2:2e:ba:58:ad:33:c9:
69:57:61:69:ed:f9:e8:ba:7f:61:52:f3:06:e4:af:
ee:a3:e9:35:ee:fa:9f:4a:31:bc:d2:17:64:75:53:
22:ef:2d:71:51:1f:37:17:cc:40:20:dd:9e:9e:f8:
4d:0c:5a:03:d2:f3:5a:52:e8:83:d5:8e:f1:81:42:
8c:0e:be:72:0d:e3:e7:a3:3a:a5:28:38:96:08:f3:
1a:05:bc:e1:14:11:b7:1f:0e:c0:da:4e:c6:45:55:
fa:31:37:c1:ed:d2:b1:dc:71:23:91:0c:d6:7b:01:
1d:cf:6d:e2:2c:63:0d:93:36:f2:1f:ba:91:11:8b:
07:14:ae:3b:1d:87:92:6f:01:a1:33:4a:73:e3:02:
b5:73:c0:f8:69:e3:72:5d:e6:ab:1a:27:7f:53:be:
1d:9d:21:e9:64:21:4c:6a:0b:82:b1:6a:12:14:05:
4d:bb:d7:c6:5e:7a:32:d6:e3:eb:ae:31:6b:4d:e8:
da:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BC:09:05:A1:40:7D:85:59:D5:AD:28:96:EB:9F:2B:8A:5B:10:D5
X509v3 Authority Key Identifier:
keyid:28:29:34:36:D4:D6:DA:3A:93:A6:0E:CA:3F:BE:C7:7D:8D:C3:8F:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KCk0NtTW2jqTpg7KP77HfY3Dj2E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/2173E83ADAA611ED8227D4C42F6D8C1D/KCk0NtTW2jqTpg7KP77HfY3Dj2E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:de:3a:c0:1d:0f:1d:49:1a:f2:fa:5c:69:ce:5a:3d:2b:
b7:90:a8:c2:60:44:2f:76:78:5d:59:6e:99:6d:0f:25:5b:b8:
f5:93:ea:b7:2b:6f:71:01:69:2b:f3:41:ff:94:e3:f1:93:01:
ab:ce:36:5c:81:4c:fa:05:d3:1b:71:5d:9d:4c:cc:9d:ee:00:
fe:43:54:68:f3:0f:9b:c8:25:05:d2:d2:71:bc:41:10:63:10:
b2:7a:23:e0:7b:51:33:e4:e9:7e:26:c5:68:49:58:9f:b4:43:
37:d3:b7:02:81:79:55:c6:cc:31:cd:02:46:a3:3f:fe:4d:fd:
73:d6:6b:97:8b:ff:f6:f8:b4:d7:df:d9:ff:52:0a:b1:89:9a:
b5:3b:15:b2:f3:9b:76:4f:65:3d:1b:ce:4b:87:89:58:64:05:
5f:d8:8e:18:7f:34:ab:e9:0d:00:13:01:be:8d:83:e5:1e:2c:
fd:a0:b4:c4:f8:7e:ca:36:74:d7:db:65:79:f1:f5:be:26:0b:
8b:f1:32:b1:c3:64:b6:0e:5b:83:f6:5c:69:1c:f9:aa:d3:dd:
45:17:72:f5:54:eb:c0:ab:c2:28:dd:a4:ef:ca:20:26:5b:64:
62:40:0f:4e:0d:b3:2f:59:08:34:75:76:23:ee:cf:63:ff:1b:
98:6e:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:21:05 2025 by rpki-client