Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: HMdsX7JI5yrxoXGQRKQDb0oiBSxqFqui66xhQYA2wDY=
Subject key identifier: 1C:48:62:3E:D8:5B:05:3E:62:DB:9A:1A:0C:34:39:06:8C:DE:CF:11
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 03A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 03A9
Signing time: Thu 18 Sep 2025 03:22:05 +0000
Manifest this update: Thu 18 Sep 2025 03:22:04 +0000
Manifest next update: Sat 20 Sep 2025 03:22:04 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: gbMrP7SAKdjfXHlZdHbYGH++UeiiODJyaGaDkvmOzjY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 937 (0x3a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Sep 18 03:22:04 2025 GMT
Not After : Sep 20 03:22:04 2025 GMT
Subject: CN=68cb7add-caba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:86:64:dc:dc:74:55:e3:75:5b:44:cb:74:6b:
4f:8c:c5:52:ab:43:33:6e:b4:0f:11:85:51:cf:d7:
33:ec:c2:58:04:8c:f1:59:ca:85:e6:c2:15:d2:70:
16:97:4e:df:1b:8f:bb:14:94:b0:cf:5b:15:12:52:
01:ac:01:55:41:0f:a4:68:04:19:dd:ae:32:3e:b8:
95:a8:ae:32:38:c9:b1:48:d1:2c:5d:4a:de:13:f1:
98:81:a0:77:81:54:a7:6b:02:38:dc:0f:a1:8c:b8:
b7:68:72:7c:74:7d:54:f2:77:16:7b:a2:ba:aa:bf:
23:de:22:1a:0f:84:29:b0:38:18:05:cd:b5:2e:0c:
28:16:0c:46:b8:e3:7a:12:73:72:57:51:9f:f6:04:
bb:9d:75:15:a1:d1:2d:39:60:ac:c7:64:19:76:be:
80:8e:94:eb:11:2c:0a:a2:65:2b:7f:97:b0:7a:5d:
ba:a3:3d:3a:fe:e9:aa:de:a2:6c:cb:73:4d:9c:ac:
99:ea:a9:53:c0:cb:f6:0c:c0:1e:b1:98:21:01:90:
96:d9:59:d8:6a:90:22:a3:d4:d8:71:63:af:f5:16:
6a:d4:d2:95:8f:d4:07:1c:48:a7:6d:5a:0b:43:0b:
4b:59:fc:15:5c:e0:18:8a:f9:c6:3e:da:59:fd:f4:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:48:62:3E:D8:5B:05:3E:62:DB:9A:1A:0C:34:39:06:8C:DE:CF:11
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:13:68:9b:35:41:7a:86:37:35:93:aa:6f:80:d9:69:ce:90:
4a:a8:f3:23:95:74:6d:ac:74:13:fa:97:87:0c:32:a6:b2:ae:
1f:a3:9c:0a:a8:54:29:e5:8c:7f:9d:8c:88:2b:6b:7f:80:13:
84:36:0c:3f:11:29:74:93:fd:1a:71:71:84:72:a1:d1:57:b3:
8b:b3:65:4e:69:58:09:c6:c5:2b:e4:98:a7:17:29:93:f1:18:
51:f5:02:5f:b6:71:96:02:cb:73:c6:47:77:cc:13:7b:18:a4:
c4:d0:5a:12:b3:96:78:99:0e:b2:1e:34:da:9c:ce:e8:0b:07:
14:d6:43:e0:6c:5c:f4:05:dd:ff:55:8b:33:e7:89:76:4f:48:
8b:cb:69:84:1b:29:75:44:5d:e7:ba:fe:ef:5e:87:34:79:ca:
c4:3c:6a:49:51:aa:e1:f7:4e:de:3a:f2:52:9c:e0:68:55:02:
ed:35:47:91:7b:b1:c5:db:86:ed:07:9d:6d:a4:ad:b9:88:14:
20:2d:6f:b0:4c:fc:18:c2:aa:c2:74:a4:c7:19:1e:7a:48:14:
a5:41:23:c3:6c:ff:3b:b5:fd:cf:be:87:4b:44:aa:df:1a:ce:
4a:e6:03:37:60:08:6e:54:cb:b2:4d:ef:20:29:d5:a2:be:57:
af:17:bc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 00:45:43 2025 by rpki-client