Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File: a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier: ALz+fVmT+HG7xeCn/JOeW8595t9S5tyYKJ6T1tOc7BI=
Subject key identifier: 8A:7D:17:75:CD:4E:17:B2:08:80:20:67:39:53:38:30:DC:71:37:19
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer: /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial: 0ABC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number: 0AB5
Signing time: Wed 17 Sep 2025 01:11:23 +0000
Manifest this update: Wed 17 Sep 2025 01:11:22 +0000
Manifest next update: Fri 19 Sep 2025 01:11:22 +0000
Files and hashes: 1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: VWO5rE+xHkbcxB3d5PB9q0D80mFXocqT4W4sb4ZPKG8=)
2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2748 (0xabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Validity
Not Before: Sep 17 01:11:22 2025 GMT
Not After : Sep 19 01:11:22 2025 GMT
Subject: CN=68ca0aba-0663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:ae:02:05:51:c5:2d:39:4b:ce:de:26:31:
22:73:fa:1c:a8:2f:f3:0f:f7:6b:fe:08:75:51:78:
ca:09:21:b0:48:4a:97:fc:f7:59:8d:c1:52:b3:6b:
b1:50:3d:63:ef:d6:64:21:ec:fe:98:a4:36:7d:73:
89:85:a4:22:3a:48:1e:d7:36:7f:82:a8:89:89:ef:
3b:13:aa:2c:a4:2c:53:cc:b0:e8:05:46:fc:c9:c8:
a0:38:5e:fc:2d:82:df:1c:de:03:0f:ba:ab:d8:d9:
a8:37:b7:62:64:07:bf:78:67:24:ea:14:c1:bf:d6:
5f:03:b8:63:20:e5:c1:97:9a:fd:c9:01:e6:b9:ad:
59:17:d7:a5:e3:c9:d2:48:5f:aa:25:76:3f:2d:ef:
f6:9c:c0:d2:0f:e5:05:5a:83:51:89:10:39:3e:99:
ba:6e:14:80:82:5f:e5:68:8a:4a:15:1a:d8:90:80:
41:d1:16:04:af:6d:8d:de:98:96:b5:cc:aa:6d:58:
a4:ea:ad:ec:4d:61:8a:b6:50:2c:11:67:c7:78:ed:
56:13:64:68:02:5b:0f:7e:9e:ae:72:b0:35:fb:a7:
b4:0c:78:f1:9a:5b:d4:18:9a:11:f7:d2:b4:74:b5:
76:c9:bc:b8:d9:e9:32:e2:ef:24:64:e3:48:4a:91:
25:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:17:75:CD:4E:17:B2:08:80:20:67:39:53:38:30:DC:71:37:19
X509v3 Authority Key Identifier:
keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:d0:99:4d:b5:a7:eb:ba:69:a4:56:f4:09:c3:6f:53:45:
45:5a:19:3c:73:9d:6e:e1:84:9b:62:f5:71:59:7d:6d:97:f0:
d5:89:5b:aa:4c:6d:f9:5b:93:32:2d:3f:ab:5c:95:03:22:20:
dc:97:13:cf:e5:41:08:ee:94:61:29:33:f9:dc:4f:55:0b:70:
12:de:d2:b3:11:d6:2c:c3:e3:b2:65:9a:b6:18:00:0a:74:1d:
e4:f8:9a:9e:1c:d6:93:e6:a2:cf:60:2d:e1:2b:3e:c3:45:66:
22:94:19:39:61:5b:13:8a:bf:71:43:fe:dd:a9:83:c7:87:4c:
9b:23:51:14:68:a2:1f:e5:e1:1e:01:8f:98:ce:55:0c:93:b1:
9d:7d:d4:f3:4d:16:e7:76:44:a6:06:f3:af:a1:a5:a2:70:93:
c8:35:fc:c4:12:d2:56:a3:7d:0a:9d:56:3d:2c:59:46:be:4d:
36:28:46:12:05:fb:72:84:9d:fd:72:5c:11:90:87:0c:e8:d5:
98:ac:72:29:dd:b1:0e:10:6c:c9:45:6d:05:6e:65:a7:c1:82:
d4:8b:4e:62:d5:33:4e:8a:08:bb:01:55:3d:38:09:49:08:a5:
fd:64:3c:e7:49:3c:4c:66:e0:41:d9:1f:c6:d7:14:ce:8e:e0:
86:5d:71:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCrwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZBRDNBRjExMC8GA1UEBRMoNkI5MEZFMzRBODY2OUE4ODM4RkQyMzhDQzY1QTEx
NTJDNDQxNjUwNTAeFw0yNTA5MTcwMTExMjJaFw0yNTA5MTkwMTExMjJaMBgxFjAU
BgNVBAMTDTY4Y2EwYWJhLTA2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGnK4CBVHFLTlLzt4mMSJz+hyoL/MP92v+CHVReMoJIbBISpf891mNwVKz
a7FQPWPv1mQh7P6YpDZ9c4mFpCI6SB7XNn+CqImJ7zsTqiykLFPMsOgFRvzJyKA4
Xvwtgt8c3gMPuqvY2ag3t2JkB794ZyTqFMG/1l8DuGMg5cGXmv3JAea5rVkX16Xj
ydJIX6oldj8t7/acwNIP5QVag1GJEDk+mbpuFICCX+VoikoVGtiQgEHRFgSvbY3e
mJa1zKptWKTqrexNYYq2UCwRZ8d47VYTZGgCWw9+nq5ysDX7p7QMePGaW9QYmhH3
0rR0tXbJvLjZ6TLi7yRk40hKkSUhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUin0X
dc1OF7IIgCBnOVM4MNxxNxkwHwYDVR0jBBgwFoAUa5D+NKhmmog4/SOMxloRUsRB
ZQUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGQUQzLzY2NkY5NjI0NjRERjExRThBRkU0NzYyN0Y4QUVBMjI4L2E1RC1O
S2htbW9nNF9TT014bG9SVXNSQlpRVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E1RC1OS2htbW9nNF9TT014bG9SVXNSQlpRVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZBRDMvNjY2Rjk2MjQ2NERGMTFFOEFGRTQ3NjI3RjhB
RUEyMjgvYTVELU5LaG1tb2c0X1NPTXhsb1JVc1JCWlFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCB9CZTbWn67pppFb0CcNvU0VFWhk8
c51u4YSbYvVxWX1tl/DViVuqTG35W5MyLT+rXJUDIiDclxPP5UEI7pRhKTP53E9V
C3AS3tKzEdYsw+OyZZq2GAAKdB3k+JqeHNaT5qLPYC3hKz7DRWYilBk5YVsTir9x
Q/7dqYPHh0ybI1EUaKIf5eEeAY+YzlUMk7GdfdTzTRbndkSmBvOvoaWicJPINfzE
EtJWo30KnVY9LFlGvk02KEYSBftyhJ39clwRkIcM6NWYrHIp3bEOEGzJRW0FbmWn
wYLUi05i1TNOigi7AVU9OAlJCKX9ZDznSTxMZuBB2R/G1xTOjuCGXXGk
-----END CERTIFICATE-----
Generated at Thu Sep 18 02:19:17 2025 by rpki-client