Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier: RCKY8N/tCuh/kdLtjhwQ9GJitsIn0CL8YD4Marj16ys=
Subject key identifier: D0:76:CF:6F:46:74:1E:57:F2:D8:1D:0D:12:05:72:61:89:1F:5D:88
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer: /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial: 09A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number: 09A0
Signing time: Tue 04 Nov 2025 01:24:25 +0000
Manifest this update: Tue 04 Nov 2025 01:24:24 +0000
Manifest next update: Thu 06 Nov 2025 01:24:24 +0000
Files and hashes: 1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: 6Onj+wnOTnFzcEhI348ZEnUCPAYkyI7k6JT3X7OvARM=)
2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2465 (0x9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Validity
Not Before: Nov 4 01:24:24 2025 GMT
Not After : Nov 6 01:24:24 2025 GMT
Subject: CN=690955c9-6248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:13:0c:92:e1:d6:00:0b:85:26:13:2e:a8:
b6:73:e4:a2:db:57:ca:b7:0b:c1:ff:df:46:a5:f0:
d8:49:c0:8e:77:13:36:52:19:b0:36:bf:b1:ba:33:
6a:51:de:47:34:42:78:2b:e3:2a:7d:85:57:1a:6f:
80:03:ed:97:19:5b:fc:b9:c5:f1:a6:fd:35:2e:f4:
fc:13:a6:53:ea:d1:e2:45:98:50:85:65:1c:16:67:
4d:8b:5d:09:24:3d:fe:e4:ee:01:8d:12:df:ae:13:
37:7a:12:7b:5f:29:71:d3:74:30:2b:eb:0b:de:43:
36:fd:8f:c4:84:c8:8c:e9:8b:cb:e9:49:9c:99:59:
4a:2b:d6:da:fa:c8:4a:ed:82:75:67:7d:18:6a:79:
a5:ac:e6:6e:00:2d:f5:df:5b:16:d5:a2:67:b2:7b:
9e:c6:a4:4a:c0:aa:69:a6:12:58:b1:a8:5e:b1:ab:
b5:b8:8f:15:ea:e2:cf:12:99:22:58:d5:10:03:f7:
5b:04:31:2f:db:46:17:1b:ea:de:c9:5e:90:f4:24:
53:68:bd:6b:a8:50:5d:95:ff:83:0d:6d:89:ab:11:
b5:11:da:51:3c:b8:90:7e:de:ce:40:da:13:78:f6:
06:85:86:1a:08:0c:7c:01:02:df:79:d6:90:21:fe:
c7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:CF:6F:46:74:1E:57:F2:D8:1D:0D:12:05:72:61:89:1F:5D:88
X509v3 Authority Key Identifier:
keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:71:f3:01:2f:62:c1:c7:31:a5:f8:7e:27:90:cd:49:7f:4b:
ed:1b:dd:5b:48:8d:a1:0d:ad:33:d8:ea:72:0e:01:38:34:89:
be:78:a1:d7:b9:cf:2c:f1:86:29:79:9b:1c:9e:5b:0e:2a:3b:
58:2b:82:6e:4e:ec:bd:49:44:5a:16:b8:4f:25:b3:bc:9f:a6:
9b:ae:93:1f:e2:2e:a2:5b:0d:67:f2:17:22:b3:77:e4:41:7c:
5b:d7:e6:7b:b8:1a:69:ba:77:a4:00:19:35:88:96:a6:61:95:
73:cc:42:68:94:ae:56:c6:e5:01:c1:bd:56:3b:84:ae:14:74:
5b:93:bc:e6:2c:85:b7:a8:6b:a7:50:4c:8f:49:48:75:51:c5:
47:1f:c3:b3:8b:86:dc:41:7c:b8:e2:4d:3c:b2:35:ec:bb:30:
c8:7a:8c:4b:da:c7:bd:0d:cf:91:28:b2:d2:c3:bc:a8:53:e2:
04:f2:1f:db:28:cc:ba:b5:9b:1e:71:b4:db:30:0c:4b:41:d6:
83:23:22:c8:4c:c6:57:f9:ba:c2:f6:07:e5:22:71:0e:96:cc:
f5:ad:d5:7f:94:b4:4f:00:82:ce:4b:cc:63:83:52:9c:47:31:
1f:04:d3:e3:69:ec:2d:d7:cc:0d:b8:19:de:5b:09:9a:2a:15:
b6:8e:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:08:09 2025 by rpki-client