Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: 3mLfMjk2rADhqtPndj6bt+b320IsFeVwZL5nWNdN+R8=
Subject key identifier: B6:EF:38:F7:CB:3B:8B:60:88:BC:54:AB:00:10:AB:ED:BE:CE:5A:DD
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 73
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: 6E
Signing time: Fri 19 Sep 2025 05:05:33 +0000
Manifest this update: Fri 19 Sep 2025 05:05:32 +0000
Manifest next update: Sun 21 Sep 2025 05:05:32 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: ZiTYeK5Juus6PvV28DQHgwNT8AENNiKqUco/490I3iw=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Sep 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115 (0x73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Sep 19 05:05:32 2025 GMT
Not After : Sep 21 05:05:32 2025 GMT
Subject: CN=68cce49c-396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d2:7e:7b:15:8e:15:73:cd:ce:c2:02:51:1b:
75:3a:13:f5:7b:bf:c8:53:6b:0c:83:9b:22:65:4b:
18:cf:e6:0b:10:67:6d:2a:ed:cb:30:22:d8:c7:56:
25:f8:f0:8a:57:84:4d:c0:4a:59:39:da:05:1b:d9:
4d:00:67:07:ed:0a:40:6c:2c:5b:5e:c6:77:ad:83:
81:a6:de:3f:d2:e4:c4:d9:79:ff:4e:a5:9b:76:2e:
b9:f6:24:ca:1d:97:b5:75:1c:1f:ef:19:80:ab:58:
d5:88:e7:d2:68:dc:ce:b8:df:15:bd:fc:d0:61:b1:
c3:7e:95:91:27:82:86:36:e0:6b:82:23:6e:5b:c2:
50:58:e5:b3:4d:05:b8:ee:18:c1:96:85:f6:4b:3c:
b5:a7:b2:1f:37:2f:4b:24:c2:6e:d5:4a:36:73:bc:
44:5b:35:c5:6c:8b:e1:6f:10:e8:e9:5d:3c:a3:0b:
1d:02:91:32:3b:fa:ed:f8:0d:22:81:9e:75:2b:21:
77:40:bd:02:92:fd:3c:4f:cc:b3:49:ae:9e:b9:5e:
de:20:cb:1a:cf:32:25:eb:fc:59:7a:2c:0c:78:74:
c7:75:df:6a:e4:42:b2:1a:cf:fa:a5:ea:71:d0:a3:
db:ff:77:dd:8b:a6:5a:a5:29:f5:2a:b1:f0:1d:b3:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EF:38:F7:CB:3B:8B:60:88:BC:54:AB:00:10:AB:ED:BE:CE:5A:DD
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:56:26:4a:77:f3:17:43:cf:4c:bb:d6:a0:7b:a9:87:1c:a3:
98:8d:37:ee:14:e6:f7:2d:25:23:73:14:81:61:b0:9e:c3:a5:
25:57:76:25:c2:72:3f:1c:74:c2:b3:96:67:8d:2a:fc:33:c6:
81:e1:45:e9:47:0a:c4:18:19:fa:ef:65:10:4c:36:29:dc:c8:
fb:1f:63:05:23:8d:54:2c:77:8d:c0:b7:cf:92:7b:cc:26:9f:
bf:22:07:72:64:75:7e:51:b9:3b:33:47:79:b0:37:77:ef:78:
06:36:dd:8e:9e:2c:10:1d:25:d3:e3:de:93:e4:23:f4:ab:0b:
4d:ce:77:57:ee:08:6f:e6:be:95:ed:e1:88:d0:7e:8f:59:37:
2f:53:6a:c5:70:3a:31:4c:42:42:24:66:76:be:93:c3:5e:58:
de:dd:15:af:7c:cd:11:98:b8:f9:77:46:7b:76:6b:a6:24:0f:
58:d3:74:db:4b:93:5f:1c:63:39:57:45:f8:4f:cc:35:98:18:
70:11:35:4f:e6:da:1c:10:9a:3f:6d:e0:99:18:25:00:da:df:
23:6e:4b:be:a0:b2:6b:b3:d8:82:14:82:fd:68:7a:92:55:78:
e2:95:9b:ce:f6:e0:d7:89:2a:43:fb:50:10:0a:9f:0b:91:99:
71:ea:5d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:28:53 2025 by rpki-client