Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: Z4LSLTS6emsMt56guz+p99bXCQZcTnhA8it4IL7XB9o=
Subject key identifier: F9:71:1A:B4:35:B4:99:8B:9E:C6:0A:0C:77:A5:B5:50:08:80:26:17
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 096B
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 096A
Signing time: Wed 05 Nov 2025 01:24:33 +0000
Manifest this update: Wed 05 Nov 2025 01:24:33 +0000
Manifest next update: Fri 07 Nov 2025 01:24:32 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: P/XkySA1Cmjxdjl8Bir3OvQ1GRvdLdiwuAk26pwPCaA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2411 (0x96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Nov 5 01:24:33 2025 GMT
Not After : Nov 7 01:24:32 2025 GMT
Subject: CN=690aa751-1b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:50:a1:0e:c5:9f:fd:d0:46:b5:e0:eb:7f:
90:ec:5b:52:a6:3c:0d:f5:2b:6a:70:e9:30:03:9f:
9b:85:90:34:bf:c4:7c:fb:ba:30:f0:76:f7:f5:b9:
3b:6c:4b:6a:3a:86:55:25:46:99:e3:3d:ba:d4:d9:
c5:c7:4e:49:ef:60:1a:58:b1:7c:eb:98:34:17:c2:
ab:eb:fb:4b:5c:a1:d4:72:e8:09:3e:a7:cf:0e:91:
df:dc:86:96:85:e0:ea:02:ea:eb:70:7a:08:73:fe:
cf:9f:80:54:db:ef:c5:75:8d:0c:e1:58:4c:49:82:
cd:2a:81:01:0d:1d:5a:b9:74:9b:6f:c7:be:ed:f8:
c6:7f:75:35:c0:3b:df:33:20:ff:10:f5:3a:53:75:
ff:de:cb:09:e0:72:d6:54:80:70:ba:18:32:89:b3:
fd:f5:c9:60:d5:5f:7d:51:09:bb:56:e1:59:5d:04:
53:67:9a:29:99:9e:a8:0f:f5:9b:51:f6:16:ef:af:
ca:0c:40:b7:4b:5a:a6:f7:e5:d3:4a:12:33:f8:46:
b4:8f:3d:a3:a9:9e:f7:55:cf:41:b5:de:e2:6d:aa:
30:30:e1:11:1a:0b:eb:3e:26:06:42:71:28:a1:c3:
5c:9c:e8:ec:74:80:d8:71:93:89:7c:b0:b4:83:47:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:1A:B4:35:B4:99:8B:9E:C6:0A:0C:77:A5:B5:50:08:80:26:17
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:49:ed:85:43:f2:9f:d7:90:0e:c8:13:85:ce:0a:88:29:51:
ff:72:2b:75:b6:3e:a4:a6:68:cc:5b:c7:19:a7:83:3a:86:cb:
c5:a3:4f:d0:6a:79:1f:79:34:39:10:01:3b:7e:2f:d0:73:7c:
98:83:a3:6b:ff:cb:6f:9d:88:03:39:a5:5c:b0:39:2e:43:4a:
e3:6d:27:21:b4:31:df:a3:8f:51:07:32:72:4b:70:0b:b9:8c:
2d:a6:eb:29:1f:60:3b:9e:48:71:2c:d4:2e:33:1f:4c:fe:9b:
63:71:9c:0a:c5:36:36:06:2f:f4:27:b9:46:38:e4:d6:aa:24:
87:9d:43:05:d0:09:1d:ad:f4:09:e8:f2:c1:75:6e:30:08:89:
61:21:0a:46:69:18:05:0e:fd:a4:b3:87:25:51:0c:37:d8:d5:
be:d7:79:6a:fa:d3:79:18:7a:29:92:0f:f1:67:e7:e2:a9:6c:
24:de:67:85:8c:06:b4:f4:48:47:ec:80:a5:6d:1e:1a:d7:72:
66:44:96:7b:79:97:c6:8c:37:8a:5e:a8:d1:7e:37:d5:92:8c:
63:b2:18:4e:60:d5:e1:43:f8:c1:0b:52:59:86:b6:6d:5b:d3:
5e:6b:8b:2d:39:3a:db:8b:c9:2e:7d:d9:56:d3:84:67:70:99:
7b:59:c2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:53:12 2025 by rpki-client