
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: lvJMAo9K2WQHmH+5PlxReZ5hqUgETcnROIh08DHJ5IU=
Subject key identifier: EE:60:95:09:91:80:51:46:AA:17:DF:13:C8:DC:D1:D0:5F:77:43:D2
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 0644
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 0642
Signing time: Wed 05 Nov 2025 02:25:34 +0000
Manifest this update: Wed 05 Nov 2025 02:25:33 +0000
Manifest next update: Fri 07 Nov 2025 02:25:33 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: rNFfqeo5NkyF/Z1Ars1wbmI7JPWDTy7yF7dW8s6wVOI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Nov 5 02:25:33 2025 GMT
Not After : Nov 7 02:25:33 2025 GMT
Subject: CN=690ab59e-4035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:72:68:af:2d:20:6f:76:2d:4a:92:ed:8c:
6a:c1:6d:03:69:b8:71:a5:ba:6b:f1:11:9f:fd:bb:
20:9d:cb:3a:93:4d:b9:5b:08:8a:d3:17:79:fa:55:
e5:91:b7:c2:68:15:6c:88:56:fe:48:8f:a2:4d:51:
77:51:55:0f:36:47:0f:40:a0:eb:58:64:20:60:9e:
cc:4d:47:2f:49:f1:a5:c8:c8:29:74:f3:74:f9:38:
f9:c5:13:76:77:10:02:cd:40:1b:54:74:ce:ca:a9:
cc:69:ea:d7:d8:8e:ae:45:b5:46:18:30:ec:00:42:
16:34:55:81:36:2e:15:9b:83:10:4f:ff:8a:19:40:
13:41:68:71:01:18:8f:11:09:22:dc:7d:35:35:7e:
4a:f3:00:6c:d4:a1:26:da:a7:e0:05:57:6a:52:a4:
e6:8f:3d:cd:45:b6:b1:e2:c7:af:70:29:6f:ec:a9:
c3:3e:0c:11:81:b1:f2:9b:fd:49:f5:42:40:07:48:
61:72:80:e6:98:f3:94:df:32:bf:80:5a:ec:32:5d:
3a:42:78:41:ec:b5:4f:53:cb:e3:f0:40:e3:fc:86:
cf:0e:87:f0:17:b4:05:26:22:b6:ff:75:91:77:c0:
e4:8f:50:64:b9:2b:62:87:99:c8:bd:54:c9:73:e0:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:60:95:09:91:80:51:46:AA:17:DF:13:C8:DC:D1:D0:5F:77:43:D2
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:86:d4:57:cb:46:66:31:7f:f9:b1:98:45:c2:15:2b:f3:1e:
93:6a:4c:35:31:c0:ae:98:90:41:61:95:56:b9:65:53:0f:2f:
f9:17:6c:49:fc:46:42:41:43:23:b3:76:54:c6:2f:2b:23:18:
51:71:8d:22:2f:5f:ef:df:8d:6d:b1:c8:8b:b8:8f:83:32:34:
81:a7:51:d9:00:eb:bd:25:08:d8:59:19:44:09:4b:31:ef:46:
40:08:b3:02:b1:12:aa:74:3c:31:bc:63:47:51:e3:86:43:b7:
0c:c3:a5:57:0f:65:d5:ad:95:79:8c:31:47:3f:67:08:e0:45:
fa:9e:6d:ae:ad:1f:d6:ba:4e:ec:45:0d:08:77:fc:b6:04:32:
21:32:b7:88:5d:70:b0:a9:54:0f:c7:cb:ac:79:27:9c:d5:b0:
a0:68:81:f1:22:e8:47:c2:46:7e:fa:19:ec:82:99:1a:66:9a:
01:6c:9b:f5:8a:d1:df:17:87:54:79:74:ae:77:63:2e:f1:24:
8c:62:c2:f8:c1:cd:3f:d2:8d:bb:68:c8:52:a8:67:c8:40:10:
2f:34:6c:35:3a:3d:98:6c:8b:56:cb:fc:ea:1a:ef:b4:d0:32:
8f:39:ea:f1:a5:b3:92:07:5b:b9:a8:66:2a:c4:51:81:1f:8e:
4d:54:5f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:21:06 2025 by rpki-client