
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File: FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier: IKngmWXEe7HxHW1fmzJDMJNymqx/GcOpXUkOD2UCY7w=
Subject key identifier: 64:D7:53:C8:22:4A:0E:68:AC:AF:6B:6F:6F:5B:72:63:41:3A:F4:81
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer: /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial: 0414
Authority info access: rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number: 0411
Signing time: Mon 27 Oct 2025 13:29:47 +0000
Manifest this update: Mon 27 Oct 2025 13:29:46 +0000
Manifest next update: Wed 29 Oct 2025 13:29:46 +0000
Files and hashes: 1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: 43wnaCYIYi3lU4LaopsL/uGHqcVoR0e+nfsqNj2vavI=)
2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 29 Oct 2025 13:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1044 (0x414)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Validity
Not Before: Oct 27 13:29:46 2025 GMT
Not After : Oct 29 13:29:46 2025 GMT
Subject: CN=68ff73ca-c7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:06:72:5a:e1:70:d3:63:50:23:3f:77:36:
cc:62:11:ba:95:55:26:95:e1:d3:b5:94:6e:9f:bf:
ea:52:0f:32:14:1d:ee:58:0d:be:ed:6a:5a:c5:1d:
29:83:0d:6b:d6:cb:52:21:a3:e2:b8:91:1a:c1:49:
11:57:83:ce:ab:55:97:5b:41:7d:5c:e5:fe:d4:15:
56:3f:f3:b0:cf:d8:99:ab:4a:62:f2:a7:24:b3:87:
3a:18:f9:98:ce:32:4d:67:d8:02:cf:16:50:c1:b1:
89:05:05:f8:e9:3e:5a:8d:fe:fe:9f:8f:87:9f:bc:
b2:86:7c:ce:0a:08:87:25:94:0a:84:b1:7b:d1:c1:
6b:ef:58:23:26:91:d4:df:06:68:e1:eb:8b:57:18:
33:50:41:c7:ae:d7:00:a9:94:a3:0a:41:e1:ba:f6:
3c:20:e7:c7:23:8d:6d:e1:b6:00:1b:88:69:ae:9c:
8f:80:7d:fd:48:51:71:fd:9f:4d:f1:c1:57:d1:2e:
92:48:ad:9c:86:e7:4e:72:78:da:a2:f3:d4:2c:9b:
b8:07:86:49:87:36:e4:2e:69:9c:2f:06:bf:73:5c:
ee:31:57:ac:1d:7d:36:a0:c7:51:54:e3:e3:47:75:
9b:77:b3:d0:ec:00:9e:9f:8b:69:3a:d4:2b:33:8b:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:53:C8:22:4A:0E:68:AC:AF:6B:6F:6F:5B:72:63:41:3A:F4:81
X509v3 Authority Key Identifier:
keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:84:ec:97:ca:8e:1d:60:da:47:81:35:f8:3e:ad:d1:d9:ef:
ce:b0:09:47:f3:28:d2:7e:a4:cc:2f:52:02:81:d4:49:e8:5c:
27:64:f3:79:35:76:14:05:72:52:dc:8e:58:c0:68:e3:11:ab:
86:6d:b0:be:63:5e:72:0f:8b:ab:8d:e2:44:bf:fc:2c:74:be:
57:eb:fe:8c:24:83:f6:0b:f4:70:0b:bf:46:bf:02:28:80:76:
8a:7d:c9:47:53:e4:c8:d7:a8:c0:3c:ef:5a:63:9f:6e:e7:81:
e9:d7:53:81:55:99:01:d2:b2:72:b1:71:4f:18:1a:36:e6:a8:
8c:5a:cc:6d:98:65:9a:fa:a0:86:2f:10:c8:4b:43:b3:da:d9:
28:f3:ff:41:87:99:0c:38:f3:2b:ab:00:db:51:9b:60:42:93:
63:a6:c0:b1:b2:83:8d:27:9d:d6:3d:a5:91:9d:af:99:d1:f4:
6e:17:8c:6d:d8:00:46:51:67:55:bf:07:fe:5c:dc:f2:d3:0e:
28:29:0e:3b:d4:01:a0:ee:b0:b2:c5:1f:f1:21:8f:9e:ab:cc:
5e:02:43:b1:93:5a:69:d3:ee:65:02:a5:7c:36:80:15:86:6d:
51:3c:e3:09:bf:56:bd:67:d8:7e:4f:9c:bc:76:89:1c:af:94:
2e:6c:70:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 04:44:32 2025 by rpki-client