Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File: sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier: kHzc/Hbb0Z0NCNc5wiq/RPpNbwmt+TSL7erGODxBMMo=
Subject key identifier: 67:C0:30:A1:8A:86:88:12:06:38:8D:94:C0:29:9D:CE:F8:B8:4C:78
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer: /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial: 022F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number: 0229
Signing time: Wed 05 Nov 2025 04:33:03 +0000
Manifest this update: Wed 05 Nov 2025 04:33:03 +0000
Manifest next update: Fri 07 Nov 2025 04:33:03 +0000
Files and hashes: 1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: q/uG5rr/20C1855ykoUBDyD6iV5kwcyYhAXUxMI9NBg=)
2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Validity
Not Before: Nov 5 04:33:03 2025 GMT
Not After : Nov 7 04:33:03 2025 GMT
Subject: CN=690ad37f-efdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:18:80:b6:2a:6c:e6:ef:33:09:d7:78:bb:43:
dc:38:da:04:b9:11:ed:e4:8d:91:42:08:d4:66:0a:
9a:d3:56:18:de:dd:2e:3b:2d:85:95:d6:25:90:1e:
6b:84:89:87:09:f9:6d:dd:54:f5:17:47:f3:1f:ff:
10:99:36:0c:59:79:1e:f3:1d:51:b4:99:d0:8d:48:
34:d8:9f:3a:3d:dd:8f:95:3b:27:5d:63:89:cf:ec:
75:7b:1b:3b:4e:ef:2d:07:83:2a:dd:d8:98:0d:f5:
51:42:0b:fd:62:88:ce:b4:21:70:19:4b:ba:4c:16:
dd:01:9e:c5:07:11:54:dc:83:b2:ca:31:bb:2e:d2:
69:49:15:8a:3a:6e:fe:90:f7:a6:00:4f:0a:31:00:
81:3b:a9:aa:63:09:81:e7:1d:32:1c:12:ee:7e:e0:
da:3f:da:d5:3d:83:95:66:cc:dd:db:7d:63:48:07:
4e:bf:d0:3f:d8:23:37:8a:c3:3c:19:d4:1d:1c:fc:
d0:5c:b7:b5:3b:56:21:5c:a9:9c:ec:72:ca:29:6b:
a5:f8:62:a4:7d:b5:8e:90:1e:3a:25:3b:a6:27:ae:
09:45:9a:1a:92:c9:02:db:f6:76:66:5d:98:9b:5b:
0a:98:be:9e:39:3b:10:b1:09:c9:0c:8c:02:4b:06:
46:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C0:30:A1:8A:86:88:12:06:38:8D:94:C0:29:9D:CE:F8:B8:4C:78
X509v3 Authority Key Identifier:
keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:ec:30:24:4b:d9:dc:23:92:92:1f:ef:2f:7c:e5:d8:43:
46:73:27:7c:7a:35:33:1f:9b:74:5e:a5:23:6e:f4:d7:7b:a9:
6d:d6:5b:42:c3:73:8f:44:dc:17:2e:cf:b5:65:c8:f1:d6:d8:
06:38:d1:5b:a8:17:d7:0c:cb:87:ec:5c:c3:ce:da:ae:58:0e:
ea:a1:04:4d:fd:bc:72:f2:0b:eb:fd:45:19:d9:00:a8:53:62:
e7:37:ca:bc:a1:2f:fc:4b:23:84:a5:2e:96:ba:f3:3f:fc:72:
55:de:17:a8:ef:24:0c:f9:50:54:73:c0:a2:6c:f0:97:c4:16:
c3:fc:88:a3:15:3f:a0:4c:37:e5:e7:b7:f3:7e:c3:e1:f9:60:
b8:bb:7d:34:4b:d7:34:cf:de:0e:a7:06:e1:f3:76:50:8a:9d:
9b:11:89:c1:3b:cb:cf:0f:de:94:ab:ca:09:44:a4:a8:88:a3:
ca:ef:db:c3:57:db:33:96:f2:cc:cc:b8:d8:20:70:b5:a2:3a:
71:fd:92:db:39:96:b5:1d:7a:75:40:48:8d:c7:48:7f:4f:f1:
d3:cd:ee:3b:eb:3c:02:bb:f1:02:f1:84:2e:ec:7f:dd:c9:e8:
d6:fe:24:01:49:a7:49:8f:c6:e4:02:b4:de:ff:03:fb:0e:61:
81:2b:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:30 2025 by rpki-client