Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier: oSLUYok7tJgdtQU9R/wVk6dM1DgXZaCttuOggLGCGhU=
Subject key identifier: 2F:85:DB:16:EF:9C:65:08:E1:5D:F4:A6:75:74:4B:75:9D:5D:61:51
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer: /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial: 0415
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number: 0410
Signing time: Wed 05 Nov 2025 03:27:18 +0000
Manifest this update: Wed 05 Nov 2025 03:27:17 +0000
Manifest next update: Fri 07 Nov 2025 03:27:17 +0000
Files and hashes: 1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: M9zqjuGoERkJpkuBoBvjMUd3dDczHlJW9X+LE7v+BNI=)
2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1045 (0x415)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Validity
Not Before: Nov 5 03:27:17 2025 GMT
Not After : Nov 7 03:27:17 2025 GMT
Subject: CN=690ac416-3198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:c1:7d:6a:04:7a:93:3c:08:51:65:17:e9:
1a:3a:cf:d0:52:ee:ab:f6:16:64:d1:73:e2:5b:5f:
7e:ac:fd:6f:60:44:ba:6d:68:e2:b8:07:07:92:3d:
17:49:67:91:92:dd:91:7e:6f:ec:bf:d9:d5:eb:aa:
f9:22:b7:39:43:91:91:1a:42:db:06:24:2d:af:73:
1b:53:46:55:6e:ac:2e:84:72:5a:fc:5c:7d:6a:e3:
2b:b0:72:c9:8c:c6:9d:3a:2a:c4:ed:ca:74:c5:54:
31:35:4f:d1:ee:a9:f1:19:a0:d4:15:14:fd:c4:8d:
2b:77:f9:81:9d:1b:df:86:a9:f9:e1:da:8e:e3:86:
e9:41:d1:82:5f:d7:af:b6:a0:81:c1:03:4b:1b:b1:
49:07:b5:99:5a:52:fa:d7:06:85:35:5b:80:28:1f:
89:70:4b:5d:63:2e:b6:15:24:af:a9:ae:d8:4b:ae:
74:42:fe:cf:f6:b1:9b:3f:c9:64:9f:6d:c6:1d:6f:
43:07:1b:ff:62:db:3e:85:ed:d1:c5:cb:18:f1:e9:
b3:66:4c:35:e8:56:5b:24:6f:38:2a:fc:9c:01:3d:
34:f0:3c:c3:3e:5f:37:a0:d2:a5:7e:c5:5d:5d:f2:
af:fa:58:14:7c:72:d9:a4:f9:c6:c0:60:51:a0:b7:
73:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:85:DB:16:EF:9C:65:08:E1:5D:F4:A6:75:74:4B:75:9D:5D:61:51
X509v3 Authority Key Identifier:
keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e5:2b:5b:b7:a1:06:06:8b:01:e2:11:f5:9c:70:85:fa:a3:
91:02:68:b0:af:67:cc:2c:09:8d:3b:34:c7:fe:5d:e2:a9:92:
be:6a:14:00:b6:d0:b6:22:1f:61:3a:a4:e2:dd:92:ce:d0:d8:
41:35:52:b4:c0:88:98:5f:30:be:57:e1:95:fa:55:75:e2:06:
14:c7:e2:45:51:a4:69:c9:23:87:de:51:dc:1f:53:cf:bf:41:
91:ac:1e:25:29:fb:fc:bb:04:07:f2:1c:82:04:5a:12:a4:b7:
97:ce:5f:fb:7f:05:e6:13:21:d0:91:07:7b:6a:34:49:77:64:
a1:31:c5:83:22:ba:7c:0e:45:9e:4c:cd:e2:5d:a2:8e:0e:c7:
8e:d8:dc:04:12:d8:68:9b:ad:a5:6d:92:2b:97:cb:0b:2d:54:
0b:2d:f0:78:fb:74:57:a2:58:b4:a5:e2:7b:35:2b:ae:e3:ca:
84:b0:f0:a3:94:66:bb:f5:ba:fc:06:09:c8:88:68:e6:85:2a:
86:63:8c:cd:5a:57:f3:39:cc:7f:30:7c:ab:ed:b5:bc:c5:cb:
c2:a0:52:39:cc:81:12:a9:25:14:a0:cf:c1:24:49:5b:3d:57:
fc:c7:8f:63:64:28:3e:d1:51:ca:a3:70:d4:85:72:d0:86:29:
1e:6c:ae:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBRjExMC8GA1UEBRMoODMzRDRBMjRFMzlDREM5NDJDQkM1NzgyNTQxQjgx
RDRERDk2QUVBODAeFw0yNTExMDUwMzI3MTdaFw0yNTExMDcwMzI3MTdaMBgxFjAU
BgNVBAMTDTY5MGFjNDE2LTMxOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcA8F9agR6kzwIUWUX6Ro6z9BS7qv2FmTRc+JbX36s/W9gRLptaOK4BweS
PRdJZ5GS3ZF+b+y/2dXrqvkitzlDkZEaQtsGJC2vcxtTRlVurC6Eclr8XH1q4yuw
csmMxp06KsTtynTFVDE1T9HuqfEZoNQVFP3EjSt3+YGdG9+Gqfnh2o7jhulB0YJf
16+2oIHBA0sbsUkHtZlaUvrXBoU1W4AoH4lwS11jLrYVJK+prthLrnRC/s/2sZs/
yWSfbcYdb0MHG/9i2z6F7dHFyxjx6bNmTDXoVlskbzgq/JwBPTTwPMM+Xzeg0qV+
xV1d8q/6WBR8ctmk+cbAYFGgt3N9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUL4Xb
Fu+cZQjhXfSmdXRLdZ1dYVEwHwYDVR0jBBgwFoAUgz1KJOOc3JQsvFeCVBuB1N2W
rqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYxMjIyNDY4L2d6MUtK
T09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d6MUtKT09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUNBQTIvNTNBRTFFRENBNjA5MTFFRDk0MjJDMUI5RjEy
MjI0NjgvZ3oxS0pPT2MzSlFzdkZlQ1ZCdUIxTjJXcnFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAw5Stbt6EGBosB4hH1nHCF+qORAmiw
r2fMLAmNOzTH/l3iqZK+ahQAttC2Ih9hOqTi3ZLO0NhBNVK0wIiYXzC+V+GV+lV1
4gYUx+JFUaRpySOH3lHcH1PPv0GRrB4lKfv8uwQH8hyCBFoSpLeXzl/7fwXmEyHQ
kQd7ajRJd2ShMcWDIrp8DkWeTM3iXaKODseO2NwEEthom62lbZIrl8sLLVQLLfB4
+3RXoli0peJ7NSuu48qEsPCjlGa79br8BgnIiGjmhSqGY4zNWlfzOcx/MHyr7bW8
xcvCoFI5zIESqSUUoM/BJElbPVf8x49jZCg+0VHKo3DUhXLQhikebK6X
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:26:56 2025 by rpki-client