Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: a97DWzqSw63IBAs/lYmBskSeSN7z3WqF6otf5QONtbg=
Subject key identifier: F7:0A:BB:41:74:EB:AA:60:53:57:7C:D7:F6:68:4B:09:B0:3A:91:6A
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 57
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C4
Signing time: Thu 07 Aug 2025 10:50:10 +0000
Manifest this update: Thu 07 Aug 2025 10:50:09 +0000
Manifest next update: Sun 14 Sep 2025 10:50:09 +0000
Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: 1kZuSnz+Xgt3mJqg/z/EzsoSMpVraatNbEXHCwMeNJI=)
5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Sep 2025 10:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87 (0x57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Aug 7 10:50:09 2025 GMT
Not After : Sep 14 10:50:09 2025 GMT
Subject: CN=689484e2-a631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ec:cb:32:90:16:03:fa:06:23:50:39:31:a6:
1d:a4:17:bd:2a:19:13:77:bb:94:6c:19:62:fd:bd:
b8:f8:ae:6a:5d:54:c4:d4:f2:9f:94:13:21:aa:2b:
31:3e:55:be:03:19:47:dd:d6:63:d6:5a:2a:d6:01:
41:20:5b:18:ef:68:6d:e2:80:f9:4b:bd:d7:65:2f:
bc:e2:81:c3:85:27:bc:1a:c8:e6:65:5b:86:f7:f7:
ce:ba:ad:13:54:a2:b2:0e:7f:c6:2f:b6:c5:cf:fa:
9a:29:ce:44:6d:2b:ca:26:ef:f4:4e:cd:da:24:14:
5e:86:ca:d1:09:27:e8:b0:cc:bf:4c:dd:1e:da:b5:
ac:d0:02:c3:05:bf:f1:10:e6:7f:24:78:96:01:63:
c8:ba:1c:eb:66:1c:89:f4:b4:cd:1c:cd:57:8d:6f:
7e:8a:96:59:77:2a:ac:54:7a:83:74:15:8f:34:46:
eb:e3:4c:55:48:ab:79:22:0e:e1:9f:52:d6:87:38:
98:cd:a3:ff:fa:23:b0:39:32:bc:d6:a9:99:b2:05:
e5:5f:68:44:c3:d9:31:a2:39:38:1d:f7:a2:31:64:
70:cc:11:19:14:72:4a:af:80:71:d0:d5:c5:62:3c:
5c:38:62:31:dd:21:f2:e5:11:4b:d9:03:d1:27:0a:
04:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:BB:41:74:EB:AA:60:53:57:7C:D7:F6:68:4B:09:B0:3A:91:6A
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:b8:09:44:62:04:17:74:81:e7:6d:6f:9a:bc:d8:46:0f:
3a:22:91:4f:8c:e4:86:31:d1:31:87:8a:54:9d:a4:d8:22:50:
5e:d2:ee:c8:bb:58:0a:53:11:b6:d4:66:a1:6c:11:77:a3:51:
ea:48:fc:58:76:0d:2e:b0:0d:7e:58:f2:33:da:17:82:52:2d:
02:17:9d:19:23:42:04:9c:1d:00:bf:ad:ae:93:e3:13:14:e1:
a8:72:21:79:6c:33:f7:0a:19:e5:2a:02:49:91:9f:cc:9e:fe:
da:8c:9e:99:8c:3c:cf:e7:b1:71:71:d7:5a:6a:2f:49:ed:29:
48:ed:b1:d4:60:ac:a1:2a:16:0e:e1:a2:bd:ad:c4:ee:b0:c0:
e9:5d:3b:f0:83:1e:fa:52:1b:17:02:59:45:21:7b:a9:e2:b9:
12:ee:72:05:b0:b2:2d:b9:8c:ef:21:62:4c:fa:bb:be:32:d3:
d7:9e:c1:0e:fc:eb:3d:1c:dc:35:41:cc:ea:7a:d1:d2:86:f8:
84:9f:d6:88:da:50:31:73:0d:c4:6e:71:9f:ba:34:89:cb:45:
d0:88:60:28:82:34:f1:33:2d:d5:27:3f:02:97:54:f8:1b:57:
73:f9:20:bc:ff:39:0b:74:6e:7e:a9:f5:62:c1:1d:b7:83:17:
35:36:b5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:04:18 2025 by rpki-client