
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: cJWu25ZUT/UXhl2ynjNXNRFAfTAOJEnFU/9eyCcR1xI=
Subject key identifier: AB:F2:AA:54:20:9E:7A:76:FF:12:22:0A:85:94:25:BC:7B:92:E7:C6
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 58
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C5
Signing time: Wed 10 Sep 2025 08:00:19 +0000
Manifest this update: Wed 10 Sep 2025 08:00:19 +0000
Manifest next update: Fri 17 Oct 2025 08:00:19 +0000
Files and hashes: 1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: Q/B2VplXkIk4c6zmZi0CweOvRX1/EaJI52uAmfRA9Fw=)
4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 17 Oct 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88 (0x58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Sep 10 08:00:19 2025 GMT
Not After : Oct 17 08:00:19 2025 GMT
Subject: CN=68c13013-deb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:1b:c0:ff:e8:f9:5d:c4:66:01:d8:67:1e:
9c:0e:9b:3a:1f:3e:1f:34:b4:f4:d4:5a:2d:b4:6b:
43:d7:43:1d:f7:c1:32:a0:5e:6b:33:41:f4:9e:22:
e7:fd:db:83:56:04:74:8d:05:24:20:51:00:8c:ff:
e0:00:e8:1b:0d:d1:46:27:6c:ae:d2:0e:36:24:f9:
fc:37:35:06:ea:18:b2:dc:19:32:a3:28:d2:e2:c3:
3f:ad:55:02:14:56:ab:12:ba:8e:f6:3e:7f:90:20:
9a:fc:5a:35:6a:34:bb:7b:fe:a5:83:55:65:56:f5:
70:7f:78:fd:e2:9b:a4:80:31:bf:1d:b1:53:49:43:
c7:73:de:ad:2b:6b:25:07:13:1c:27:89:04:0b:21:
f3:65:9d:1b:cf:8a:7c:3b:5f:6e:bd:0e:5b:37:66:
04:7e:36:cd:e4:68:53:a9:8d:ac:72:9d:48:9e:43:
32:0c:4e:64:95:d3:70:d7:a1:60:21:e0:13:5a:b3:
29:5b:89:05:da:82:9c:b6:34:45:ca:63:2a:59:2a:
2b:f8:85:ea:8c:1b:79:20:45:5f:f7:04:7c:76:e6:
60:45:d8:bc:69:37:d3:c3:84:b6:e0:04:e0:ed:b8:
2f:66:96:cc:52:c7:dc:ba:8f:99:51:f3:ff:bd:c1:
eb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F2:AA:54:20:9E:7A:76:FF:12:22:0A:85:94:25:BC:7B:92:E7:C6
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:de:6e:83:fc:a8:07:fc:f5:86:bd:94:f6:72:f1:81:5c:
c3:1c:d0:45:3e:7e:87:5e:48:71:ab:f4:05:15:11:13:24:78:
de:88:6b:4b:13:e2:9b:ea:c6:12:ac:68:8c:af:73:9c:8c:55:
a7:1f:a1:ee:d9:d1:94:4e:44:f0:fb:6d:fa:f3:af:a5:2a:d3:
b4:c8:30:36:cf:a5:fb:ae:24:75:0b:e2:2f:ed:e0:9a:66:5b:
53:1e:60:78:53:92:78:d5:ab:ad:e9:7d:f7:7c:c1:9e:cc:b4:
bd:83:73:6a:1b:51:9b:0e:3f:a9:50:64:73:8b:c0:ab:4a:7a:
dd:ad:0b:0c:8e:98:d6:58:ad:39:a2:1d:81:72:b9:f5:04:1d:
28:b8:f8:9f:1f:cc:a6:4c:75:b9:05:38:84:d5:b0:27:f9:e1:
a2:1f:1b:d1:be:1b:76:6e:51:bf:26:d9:0c:8f:04:87:9f:ce:
b5:c5:4c:84:5b:33:d5:6f:c0:13:ac:79:ce:a6:43:4f:7e:41:
a3:a1:85:5a:29:90:c6:cc:86:d3:0e:a9:88:1d:6e:9c:88:64:
9d:97:c7:0a:2e:c3:ad:09:aa:90:04:bc:7b:34:3c:55:70:86:
81:39:1f:67:c9:ed:25:9a:db:b9:58:1c:c9:1f:bf:a2:4b:f6:
0b:0e:46:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 13:41:47 2025 by rpki-client