Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File: yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier: u5cHAv6EatotXvvsttwMrs4NurBvGQZZLN+t/fOxUA4=
Subject key identifier: AF:0E:6F:84:50:77:8C:EB:FF:28:78:26:D3:E8:AD:C3:64:08:D3:42
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer: /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial: 02A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number: 02A2
Signing time: Wed 05 Nov 2025 04:18:17 +0000
Manifest this update: Wed 05 Nov 2025 04:18:16 +0000
Manifest next update: Fri 07 Nov 2025 04:18:16 +0000
Files and hashes: 1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: 3vq3D84rBTooNBlzF9t55Au9rP5O8d/9vI1UIvbxPiw=)
2: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (hash: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677 (0x2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Validity
Not Before: Nov 5 04:18:16 2025 GMT
Not After : Nov 7 04:18:16 2025 GMT
Subject: CN=690ad009-f19b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:aa:20:57:e0:c7:8f:83:2d:3b:7f:5e:90:78:
85:33:19:42:c4:cf:73:50:a3:bc:52:ad:ef:10:13:
8d:98:03:08:fd:de:27:bf:e5:86:00:36:84:cc:3f:
34:2c:7a:3c:e2:93:7e:84:65:e5:a6:27:ba:ad:e5:
45:86:18:9e:aa:84:04:8c:5a:69:89:f4:74:01:65:
25:70:17:4a:08:89:71:25:be:c7:27:ac:43:85:95:
d6:ac:9f:c2:de:d1:c4:cb:0d:99:63:6e:40:f1:7d:
e9:40:24:65:0d:aa:e0:ee:0f:49:da:bf:e7:5e:e4:
bc:d1:11:0e:74:f6:12:a5:9c:55:7d:26:ab:d4:1e:
9c:56:72:d6:20:80:ff:64:81:7c:a1:6a:bb:98:e2:
c8:cf:03:e1:2a:83:ec:b5:54:bb:00:0a:ec:ce:e6:
26:4a:10:e0:88:c3:2d:b2:55:49:69:d5:ea:b6:a0:
2d:2c:8d:7b:08:d7:e9:6e:0c:9b:d1:f5:7d:41:b3:
b0:41:76:c7:ae:b9:fd:c2:ef:32:17:6c:0b:34:66:
d8:42:df:8f:85:26:32:ed:0e:44:c8:19:ad:b6:a8:
ee:53:1f:6e:bc:3d:8c:18:db:81:53:be:78:a2:53:
9a:7a:93:a1:af:71:85:f4:f7:ab:aa:d5:44:69:fc:
3f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0E:6F:84:50:77:8C:EB:FF:28:78:26:D3:E8:AD:C3:64:08:D3:42
X509v3 Authority Key Identifier:
keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:3f:7c:77:90:9d:c4:ca:0b:76:2f:cc:eb:58:b3:e0:36:93:
dd:09:75:c8:1f:21:76:7e:2d:a9:3d:1a:89:db:8c:7d:fa:48:
eb:6c:87:c3:18:86:42:62:1f:7a:0b:24:67:7e:d6:80:23:5c:
c2:41:18:aa:61:56:8b:f9:b6:44:a2:1d:d6:86:3f:2d:f1:45:
07:70:96:f1:44:10:4b:13:3c:9a:71:af:e7:e8:d1:76:6a:df:
43:b1:21:90:92:5a:2a:17:9b:4a:0c:04:7e:36:db:7c:88:09:
50:1f:92:9c:68:35:f2:aa:f8:e5:2f:86:30:fe:93:2c:ae:7a:
08:10:2b:cf:53:5c:99:93:de:59:c5:04:63:cb:90:b8:1a:f1:
68:0f:e7:e3:75:43:08:88:e7:e5:43:79:4e:27:32:6f:fe:ae:
46:da:58:fc:eb:10:86:02:02:58:38:f5:3a:2c:61:e3:a5:73:
36:69:1f:b6:3c:2b:8b:fe:56:38:26:5d:d7:5f:5a:8f:71:16:
32:dd:a8:9c:18:ad:f2:91:ec:71:0a:cf:1b:81:d5:df:8f:a6:
5f:14:87:23:1b:90:5c:ce:63:9b:5b:fa:61:9c:db:b2:5b:c8:
ee:fb:3b:dc:d3:b2:16:78:86:75:a0:2c:ab:8c:23:09:0b:0c:
13:5f:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:07:50 2025 by rpki-client