Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File: e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier: LIzJo4YROlUuRo33cd+gfoHqoAEHdNSxuak2bmEoZxk=
Subject key identifier: 57:6B:F0:2B:DE:4B:9D:D4:31:E5:37:31:11:4E:6E:6B:8A:74:3D:23
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer: /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial: 0476
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number: 0476
Signing time: Tue 04 Nov 2025 04:24:11 +0000
Manifest this update: Tue 04 Nov 2025 04:24:10 +0000
Manifest next update: Thu 06 Nov 2025 04:24:10 +0000
Files and hashes: 1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: qtXhMWUjRhoCJ14WAX2r3L2FAE5Eb8N8xnJSAw3ad9A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Validity
Not Before: Nov 4 04:24:10 2025 GMT
Not After : Nov 6 04:24:10 2025 GMT
Subject: CN=69097feb-ef48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:bc:c8:28:7c:88:05:1e:77:d5:f6:50:34:
19:2b:4a:40:b2:90:2f:f1:8b:07:bf:66:cc:71:95:
cc:6c:8f:30:f1:fc:d4:69:8c:28:ae:e5:d3:cd:c0:
8b:7a:0d:29:eb:8f:7c:e7:db:2f:de:41:2c:9b:77:
1a:18:b1:01:3a:c0:56:64:e3:43:52:c0:92:f1:c8:
a7:eb:1e:44:93:8f:91:c9:19:e4:0f:25:d6:2d:96:
e5:dd:60:a3:0e:20:7e:c0:99:dd:c1:cc:b1:c7:22:
47:3a:de:e5:fd:88:a2:b6:1a:84:fa:f9:d1:7b:48:
39:c5:90:14:26:66:66:a8:0d:35:67:c7:89:ff:62:
9f:44:0a:5f:4b:27:9a:5b:66:3d:a0:21:3d:50:75:
5f:60:a9:9e:64:4b:27:40:91:50:58:d1:69:01:88:
0c:1d:a0:93:d1:c1:2b:1e:93:63:eb:09:41:67:4e:
be:14:0f:d2:15:08:00:ba:a3:84:66:86:8b:68:c5:
6b:3e:50:72:78:18:c9:fc:78:a5:a9:69:78:be:5f:
d7:32:85:bc:20:9c:cd:c3:86:d9:70:db:96:1b:47:
8f:86:52:ea:7a:6d:39:6e:c7:81:83:c7:21:85:a7:
97:03:bd:e7:17:b8:30:21:e9:6f:a5:ee:3c:a2:cf:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:F0:2B:DE:4B:9D:D4:31:E5:37:31:11:4E:6E:6B:8A:74:3D:23
X509v3 Authority Key Identifier:
keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
df:74:20:7b:e6:9c:2d:a1:63:19:35:28:32:b6:92:6b:32:42:
0e:30:87:41:77:c1:6e:ad:00:b8:0f:04:7a:81:dc:2a:4d:55:
f8:a5:b9:a0:7d:38:e8:9c:4c:a3:e0:28:82:47:52:7d:f1:80:
39:e4:34:c1:f6:92:18:02:e7:10:52:6d:85:82:25:d0:fc:0f:
e5:77:06:5a:67:d3:db:0b:79:25:19:79:fb:c1:aa:c8:99:fe:
11:60:d9:4b:ca:13:ff:aa:19:d5:44:48:98:89:52:82:9f:61:
88:c6:c9:fc:18:c6:a9:ce:9f:be:0c:8e:ab:34:ac:0d:de:2c:
21:c2:aa:47:cd:37:bc:d4:40:49:c4:b7:67:60:77:2a:03:cc:
cf:ec:38:1a:b3:d9:f3:03:cc:dc:5d:38:62:ab:3e:c0:d0:8e:
67:08:23:09:c9:4c:fa:82:ab:f6:70:bf:fd:22:95:55:cc:08:
51:03:d5:a4:d3:32:6d:ca:70:d4:db:86:e2:45:52:a0:68:96:
ca:a9:91:74:8b:55:e3:40:e7:bf:1d:57:e3:90:69:d4:19:49:
86:14:ea:79:39:52:9a:5d:44:8d:d0:57:4a:0c:8d:9d:11:70:
44:c6:44:a2:43:c5:80:30:3f:9d:6b:6f:b3:fa:23:e0:a9:e8:
8a:e9:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:04 2025 by rpki-client