Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: oZa0IX+t9H4LWx2FL0pff5LW8O26Ffrhdk5DnmZyd94=
Subject key identifier: B8:B2:FA:F4:12:DE:28:D1:E3:1E:BA:01:EE:18:30:6D:9C:1D:DD:25
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 0624
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 0624
Signing time: Wed 17 Sep 2025 02:16:04 +0000
Manifest this update: Wed 17 Sep 2025 02:16:03 +0000
Manifest next update: Fri 19 Sep 2025 02:16:03 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: ihQCjykzzfyvoOz/Nwqx/xHefCBN2fbRYSqYUM5njLM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 02:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1572 (0x624)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Sep 17 02:16:03 2025 GMT
Not After : Sep 19 02:16:03 2025 GMT
Subject: CN=68ca19e4-9e10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:80:a0:70:38:7c:a0:16:ec:85:d5:25:f9:
a2:3c:5b:40:49:14:ec:2c:6f:71:f9:24:cb:2f:0e:
54:4c:f5:e4:d5:84:76:80:62:29:9a:78:39:ec:cb:
41:0b:10:89:8b:df:b3:36:1e:06:8c:53:42:bd:08:
97:75:95:87:22:00:f2:b2:5c:57:05:c0:bd:37:86:
54:e9:f3:d9:d1:0f:13:ca:21:d3:f1:cb:a9:c3:6b:
91:85:ec:fe:ef:52:e2:f8:3b:54:86:1d:56:4d:d3:
9b:d4:6c:9c:dc:e4:7b:23:39:25:ae:e7:15:89:af:
6b:d1:d9:50:34:d6:86:b5:eb:9b:11:8b:dc:90:21:
33:8b:fe:50:76:6e:96:8e:35:1d:54:f3:9f:0c:79:
ca:ef:ec:70:3b:22:9a:c7:f8:cd:44:78:60:b4:c2:
68:cc:3e:00:ff:ef:97:d6:b2:20:92:2e:e0:a8:c4:
63:ce:e2:bd:40:6f:43:ad:5a:59:d4:91:73:3b:92:
c1:40:8f:f8:ad:2b:90:26:61:27:4d:db:b1:39:c1:
12:70:ab:e8:22:4f:60:c1:3a:78:e3:ce:d9:79:57:
19:a6:b8:c7:89:e5:0d:5c:66:a3:98:6f:de:14:74:
7a:61:57:04:b8:66:c5:ac:6c:43:8f:ae:6d:ac:87:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B2:FA:F4:12:DE:28:D1:E3:1E:BA:01:EE:18:30:6D:9C:1D:DD:25
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1e:d7:6b:50:58:39:d5:dc:ab:a3:54:cd:d3:cf:be:61:23:
86:26:9b:e7:10:86:42:88:fa:9c:ce:2c:a1:ff:fd:06:a6:f3:
bb:05:1f:dd:9b:cd:6c:0a:2d:aa:aa:09:ad:60:27:b3:a3:5d:
ca:23:3c:e6:ff:d7:bd:d4:c4:52:29:e3:f2:6d:71:a9:b3:db:
84:7a:e2:6a:f2:9f:2b:48:95:d2:53:a3:ee:5b:f7:e8:b5:7f:
d7:43:5d:13:8e:11:b5:ad:39:6d:65:af:f1:2a:e8:c8:76:af:
5a:92:4f:fe:3c:7d:cb:53:f6:62:67:f0:a1:a0:99:1c:12:cb:
e4:9d:cb:18:24:79:8b:49:c0:68:60:9f:ba:0b:92:f0:c0:c4:
e9:cb:45:de:6d:07:3d:3c:58:ce:75:2b:90:5f:83:3f:de:53:
22:70:14:03:ff:c9:36:c0:a1:ba:c4:45:bc:41:ba:76:8b:87:
fb:d6:4c:ee:5b:40:5c:08:02:e8:3a:9a:7b:b4:a2:65:f4:7b:
eb:77:41:13:d9:16:e1:b4:7d:ba:64:ad:6a:32:10:87:1a:a9:
93:c3:0c:26:87:de:04:d2:ce:69:3a:74:a6:6b:c7:b2:30:91:
eb:75:84:e2:c3:af:5a:54:0f:f0:67:73:ea:10:09:9c:89:b8:
46:1b:ed:74
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRGNTRBRjExMC8GA1UEBRMoMkM5N0Q4MjVBQTE1N0NCQzgzNTY3OTJBMzlCQUI3
M0I2QjNDN0E5MTAeFw0yNTA5MTcwMjE2MDNaFw0yNTA5MTkwMjE2MDNaMBgxFjAU
BgNVBAMTDTY4Y2ExOWU0LTllMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJsoCgcDh8oBbshdUl+aI8W0BJFOwsb3H5JMsvDlRM9eTVhHaAYimaeDns
y0ELEImL37M2HgaMU0K9CJd1lYciAPKyXFcFwL03hlTp89nRDxPKIdPxy6nDa5GF
7P7vUuL4O1SGHVZN05vUbJzc5HsjOSWu5xWJr2vR2VA01oa165sRi9yQITOL/lB2
bpaONR1U858Mecrv7HA7IprH+M1EeGC0wmjMPgD/75fWsiCSLuCoxGPO4r1Ab0Ot
WlnUkXM7ksFAj/itK5AmYSdN27E5wRJwq+giT2DBOnjjztl5VxmmuMeJ5Q1cZqOY
b94UdHphVwS4ZsWsbEOPrm2sh6S/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuLL6
9BLeKNHjHroB7hgwbZwd3SUwHwYDVR0jBBgwFoAULJfYJaoVfLyDVnkqObq3O2s8
epEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RjU0L0VDNUIyRjhDRTE1RjExRUI4Njg2QjA1MUY4QUVBMjI4L0xKZllK
YW9WZkx5RFZua3FPYnEzTzJzOGVwRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xKZllKYW9WZkx5RFZua3FPYnEzTzJzOGVwRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTRGNTQvRUM1QjJGOENFMTVGMTFFQjg2ODZCMDUxRjhB
RUEyMjgvTEpmWUphb1ZmTHlEVm5rcU9icTNPMnM4ZXBFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgHtdrUFg51dyro1TN08++YSOGJpvn
EIZCiPqcziyh//0GpvO7BR/dm81sCi2qqgmtYCezo13KIzzm/9e91MRSKePybXGp
s9uEeuJq8p8rSJXSU6PuW/fotX/XQ10TjhG1rTltZa/xKujIdq9akk/+PH3LU/Zi
Z/ChoJkcEsvkncsYJHmLScBoYJ+6C5LwwMTpy0XebQc9PFjOdSuQX4M/3lMicBQD
/8k2wKG6xEW8Qbp2i4f71kzuW0BcCALoOpp7tKJl9Hvrd0ET2RbhtH26ZK1qMhCH
GqmTwwwmh94E0s5pOnSma8eyMJHrdYTiw69aVA/wZ3PqEAmcibhGG+10
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:29:21 2025 by rpki-client