Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
File: aL00PB2fcEbGL5VfhnMZ2FKxShA.mft (raw, json)
Hash identifier: uXQPL1pZHYM0lk7MkDbwueGB/epSyI9i3j0F92dmvKg=
Subject key identifier: B5:47:50:3C:36:07:ED:BB:4D:8A:41:DF:C2:00:68:A4:70:F1:82:C6
Authority key identifier: 68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
Certificate issuer: /CN=F36E6802AF/serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Certificate serial: 01BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
Manifest number: 01BE
Signing time: Tue 04 Nov 2025 05:49:18 +0000
Manifest this update: Tue 04 Nov 2025 05:49:18 +0000
Manifest next update: Thu 06 Nov 2025 05:49:18 +0000
Files and hashes: 1: aL00PB2fcEbGL5VfhnMZ2FKxShA.crl (hash: lTcVVpuV3c+4aROJbTIsI5hjujVeMNFdihWMFFF2QqA=)
2: 10CA293E653F11EF8C440393762E951A.roa (hash: nhNLmRsBHLhK6LTWVHLzqZimVfw7FMGqSN9TfNAWHoE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 05:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447 (0x1bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6802AF, serialNumber=68BD343C1D9F7046C62F955F867319D852B14A10
Validity
Not Before: Nov 4 05:49:18 2025 GMT
Not After : Nov 6 05:49:18 2025 GMT
Subject: CN=690993de-61f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:2d:a9:71:b2:c3:f8:5c:4e:a1:9e:8f:db:
17:f1:0a:11:a8:2d:f6:fe:86:ae:a5:8c:03:d5:ba:
87:39:94:d2:71:7f:95:dd:ed:7f:ba:9f:0e:75:c5:
0b:8b:87:a4:ac:42:63:84:7d:90:92:6d:08:28:d7:
52:7a:84:81:72:7d:ac:67:bd:df:f3:06:0b:54:77:
75:92:5a:09:b6:92:77:35:c2:df:f1:e7:0e:84:da:
73:48:a6:79:44:92:98:06:f3:ea:ce:c9:96:69:c3:
a3:1e:45:45:3c:e9:ac:82:1a:ef:60:d8:84:eb:3a:
c9:02:01:ee:1a:92:03:4b:94:09:0f:34:14:f3:d2:
f1:9e:ea:0a:b5:31:46:fd:10:a4:98:9d:56:34:a6:
d1:d8:73:30:ef:ec:75:d7:de:8a:e8:08:df:f1:23:
b9:36:70:92:00:5c:a5:9d:40:46:fe:e7:aa:49:fb:
8c:25:40:7d:e0:2d:dd:82:22:81:d9:81:19:49:2e:
e0:f9:8a:f6:19:48:3a:fd:01:7b:e8:02:eb:9b:19:
a8:ef:40:a1:92:0f:5f:8c:62:8f:ce:c0:6f:6e:f0:
ae:68:c3:f4:2f:35:93:7b:05:64:cf:22:64:e5:f1:
2b:76:4d:17:7a:4a:83:a8:55:2c:11:be:4a:00:1e:
73:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:47:50:3C:36:07:ED:BB:4D:8A:41:DF:C2:00:68:A4:70:F1:82:C6
X509v3 Authority Key Identifier:
keyid:68:BD:34:3C:1D:9F:70:46:C6:2F:95:5F:86:73:19:D8:52:B1:4A:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aL00PB2fcEbGL5VfhnMZ2FKxShA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6802/F6AA6EE8653D11EF844B268E762E951A/aL00PB2fcEbGL5VfhnMZ2FKxShA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:05:96:1e:b4:ed:20:32:df:8b:68:c2:fd:24:c6:3e:c7:
c0:dc:da:bb:d2:52:9c:0a:5e:56:8a:18:a6:b5:b8:da:f3:5d:
5d:8a:6f:cf:0c:48:78:6b:dd:58:c7:ff:34:bc:20:f4:61:d4:
22:9e:c5:d6:d2:37:ac:55:ba:c1:2b:9c:e5:46:1a:dc:eb:60:
cc:28:20:a4:b2:ee:3d:72:92:0e:0a:2c:54:5d:53:1a:95:65:
06:8a:39:ed:91:d3:8b:b4:e4:d6:30:da:41:3f:04:57:1b:0b:
24:45:f1:cd:bd:04:06:d5:52:87:a9:dd:37:3a:63:09:a0:cf:
e5:4e:8b:27:ef:22:b1:ac:bf:44:e8:1f:ba:c8:c3:97:2c:58:
77:d3:6c:49:82:9b:52:09:d5:08:61:41:0d:40:97:65:54:7d:
35:b4:71:5c:6e:5e:72:31:64:d8:d6:97:90:75:35:d7:05:2d:
c2:f2:a6:78:9c:3b:5e:52:3d:e1:d3:8e:b3:e1:4a:8f:12:a2:
28:44:90:40:6a:a9:28:f8:dd:88:d9:82:49:dc:6b:c8:26:ef:
55:d0:4e:65:36:39:d9:68:72:87:c8:47:4f:47:7a:ff:ac:5c:
da:b0:9d:19:07:e9:d4:ec:90:b9:79:70:d2:f7:2f:2d:a6:b4:
bc:e9:9f:48
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAb8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTY4MDJBRjExMC8GA1UEBRMoNjhCRDM0M0MxRDlGNzA0NkM2MkY5NTVGODY3MzE5
RDg1MkIxNEExMDAeFw0yNTExMDQwNTQ5MThaFw0yNTExMDYwNTQ5MThaMBgxFjAU
BgNVBAMTDTY5MDk5M2RlLTYxZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDN6C2pcbLD+FxOoZ6P2xfxChGoLfb+hq6ljAPVuoc5lNJxf5Xd7X+6nw51
xQuLh6SsQmOEfZCSbQgo11J6hIFyfaxnvd/zBgtUd3WSWgm2knc1wt/x5w6E2nNI
pnlEkpgG8+rOyZZpw6MeRUU86ayCGu9g2ITrOskCAe4akgNLlAkPNBTz0vGe6gq1
MUb9EKSYnVY0ptHYczDv7HXX3oroCN/xI7k2cJIAXKWdQEb+56pJ+4wlQH3gLd2C
IoHZgRlJLuD5ivYZSDr9AXvoAuubGajvQKGSD1+MYo/OwG9u8K5ow/QvNZN7BWTP
ImTl8St2TRd6SoOoVSwRvkoAHnOvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtUdQ
PDYH7btNikHfwgBopHDxgsYwHwYDVR0jBBgwFoAUaL00PB2fcEbGL5VfhnMZ2FKx
ShAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2ODAyL0Y2QUE2RUU4NjUzRDExRUY4NDRCMjY4RTc2MkU5NTFBL2FMMDBQ
QjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FMMDBQQjJmY0ViR0w1VmZobk1aMkZLeFNoQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTY4MDIvRjZBQTZFRTg2NTNEMTFFRjg0NEIyNjhFNzYy
RTk1MUEvYUwwMFBCMmZjRWJHTDVWZmhuTVoyRkt4U2hBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFDgWWHrTtIDLfi2jC/STGPsfA3Nq7
0lKcCl5Wihimtbja811dim/PDEh4a91Yx/80vCD0YdQinsXW0jesVbrBK5zlRhrc
62DMKCCksu49cpIOCixUXVMalWUGijntkdOLtOTWMNpBPwRXGwskRfHNvQQG1VKH
qd03OmMJoM/lTosn7yKxrL9E6B+6yMOXLFh302xJgptSCdUIYUENQJdlVH01tHFc
bl5yMWTY1peQdTXXBS3C8qZ4nDteUj3h046z4UqPEqIoRJBAaqko+N2I2YJJ3GvI
Ju9V0E5lNjnZaHKHyEdPR3r/rFzasJ0ZB+nU7JC5eXDS9y8tprS86Z9I
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:59:10 2025 by rpki-client