Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier: pbQw3WyUtifjDP2SAHsTmbjhuPP9knVGCHhfONbyZNk=
Subject key identifier: 72:67:A6:C7:7C:20:1D:7A:82:D1:2B:F9:AC:6D:84:6B:5C:83:96:5E
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer: /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial: 049B
Authority info access: rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number: 049A
Signing time: Tue 04 Nov 2025 04:19:49 +0000
Manifest this update: Tue 04 Nov 2025 04:19:49 +0000
Manifest next update: Thu 06 Nov 2025 04:19:49 +0000
Files and hashes: 1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: J/UcrUylIeodHB3JQLibkZ4A8IoaFEM5qciHRHHPfR0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 06 Nov 2025 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1179 (0x49b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Validity
Not Before: Nov 4 04:19:49 2025 GMT
Not After : Nov 6 04:19:49 2025 GMT
Subject: CN=69097ee5-7b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:08:8f:93:67:1a:3c:0d:35:cf:69:59:00:
c3:1d:f8:90:fc:89:f1:43:02:d7:dd:08:a3:33:fe:
f5:c6:40:c2:50:67:2a:25:50:f8:2a:dc:49:25:6a:
0a:49:7d:1f:71:6c:1a:fa:c2:28:32:9c:36:d8:15:
c8:12:d5:d2:93:6a:15:a7:df:b3:1a:27:af:46:a5:
0d:80:dd:ec:dd:47:23:e9:24:23:d7:37:c0:78:d8:
5c:8d:be:8e:9c:b1:51:68:15:ac:a2:cb:9b:8a:01:
d5:fe:28:f7:1b:38:9e:ad:e0:1a:a4:27:b5:4f:ac:
ac:6b:29:ad:f5:e3:26:7c:00:24:b3:32:97:f6:45:
77:78:e5:0d:c0:fa:c4:b4:76:35:76:af:6f:07:7a:
f8:68:69:63:a2:65:7b:c9:df:f5:cc:d0:6e:e5:7b:
46:5a:0e:57:04:c7:91:d2:d0:e9:ca:be:55:b0:6a:
fa:28:e3:85:65:fa:7b:ab:ec:b7:0e:c3:ad:93:d3:
7b:ef:db:ad:bf:34:f7:b4:2b:5c:70:4e:a2:67:9b:
59:37:15:f3:34:13:75:ec:05:e7:4e:a5:90:35:75:
16:55:d2:40:86:0e:f4:5b:7c:54:b4:65:b7:10:c9:
5b:b1:e2:53:f0:b5:e8:cb:8c:2b:23:da:bd:cd:48:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:67:A6:C7:7C:20:1D:7A:82:D1:2B:F9:AC:6D:84:6B:5C:83:96:5E
X509v3 Authority Key Identifier:
keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:25:14:12:c8:d0:13:73:70:f4:d1:e7:39:a2:b1:00:29:56:
99:98:0d:30:d5:26:3e:b0:ce:d4:8b:3a:92:fb:31:ed:cb:91:
fa:b6:5c:69:b0:5d:9a:00:7f:c8:14:2b:87:0b:36:f2:b6:6c:
0a:df:ba:1a:0d:ba:97:30:88:68:55:3f:99:c6:06:13:08:cd:
e2:84:f7:4f:9e:eb:bb:74:cc:ae:40:8e:d7:48:f4:7f:7d:ad:
0e:5e:a3:68:20:bb:57:3e:16:33:97:3e:fe:37:cb:4a:a9:3b:
8f:a0:33:61:f4:c5:c8:a9:58:0f:1b:b9:7e:57:c2:15:60:f2:
8a:bb:f9:bb:b2:b8:59:82:b4:2e:97:f3:74:6d:c5:09:27:72:
ab:85:39:2a:10:cb:7d:cb:a2:31:d1:4d:e9:c3:59:86:c3:52:
ce:ca:61:91:68:8b:c1:36:f0:f3:30:eb:4a:30:bb:16:98:81:
ba:fb:ea:6d:f3:d9:cf:c5:25:b8:05:9d:b2:7a:9e:05:3a:8c:
d6:f4:76:a1:99:ac:bc:44:f4:50:80:cf:6e:46:61:bd:33:32:
35:68:ee:66:54:4e:73:c9:5c:97:07:5c:dd:a7:f9:d7:80:96:
e6:fb:b9:21:7e:f4:5d:04:06:7f:cd:b3:35:ae:b2:d2:3b:f1:
11:6d:cc:a2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkE1RUFBUjExMC8GA1UEBRMoOTQ3N0YwRTQ3NUE3NDdGOTZDNTYxNjIxNjdGMEMx
NkY5OUM0ODNCQjAeFw0yNTExMDQwNDE5NDlaFw0yNTExMDYwNDE5NDlaMBgxFjAU
BgNVBAMTDTY5MDk3ZWU1LTdiMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3uwiPk2caPA01z2lZAMMd+JD8ifFDAtfdCKMz/vXGQMJQZyolUPgq3Ekl
agpJfR9xbBr6wigynDbYFcgS1dKTahWn37MaJ69GpQ2A3ezdRyPpJCPXN8B42FyN
vo6csVFoFayiy5uKAdX+KPcbOJ6t4BqkJ7VPrKxrKa314yZ8ACSzMpf2RXd45Q3A
+sS0djV2r28HevhoaWOiZXvJ3/XM0G7le0ZaDlcEx5HS0OnKvlWwavoo44Vl+nur
7LcOw62T03vv262/NPe0K1xwTqJnm1k3FfM0E3XsBedOpZA1dRZV0kCGDvRbfFS0
ZbcQyVux4lPwtejLjCsj2r3NSPhrAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcmem
x3wgHXqC0Sv5rG2Ea1yDll4wHwYDVR0jBBgwFoAUlHfw5HWnR/lsVhYhZ/DBb5nE
g7swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBNUVBLzIwOTg5MzBDMzhCMjExRUQ5MERCMkVEQ0YxMjIyNDY4L2xIZnc1
SFduUl9sc1ZoWWhaX0RCYjVuRWc3cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2xIZnc1SFduUl9sc1ZoWWhaX0RCYjVuRWc3cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RkE1RUEvMjA5ODkzMEMzOEIyMTFFRDkwREIyRURDRjEyMjI0
NjgvbEhmdzVIV25SX2xzVmhZaFpfREJiNW5FZzdzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArJRQSyNATc3D00ec5orEAKVaZmA0w1SY+
sM7UizqS+zHty5H6tlxpsF2aAH/IFCuHCzbytmwK37oaDbqXMIhoVT+ZxgYTCM3i
hPdPnuu7dMyuQI7XSPR/fa0OXqNoILtXPhYzlz7+N8tKqTuPoDNh9MXIqVgPG7l+
V8IVYPKKu/m7srhZgrQul/N0bcUJJ3KrhTkqEMt9y6Ix0U3pw1mGw1LOymGRaIvB
NvDzMOtKMLsWmIG6++pt89nPxSW4BZ2yep4FOozW9Hahmay8RPRQgM9uRmG9MzI1
aO5mVE5zyVyXB1zdp/nXgJbm+7khfvRdBAZ/zbM1rrLSO/ERbcyi
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:11 2025 by rpki-client