Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File: a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier: f0X9nLaZtXtVboFjdjTtS5fk+hKptMW+wzGQRzOXG5A=
Subject key identifier: 35:40:BE:14:A1:43:55:18:A1:25:C4:BD:09:30:5C:D2:16:95:EE:D6
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer: /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial: 0AEF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number: 0AE8
Signing time: Thu 06 Nov 2025 01:11:10 +0000
Manifest this update: Thu 06 Nov 2025 01:11:09 +0000
Manifest next update: Sat 08 Nov 2025 01:11:09 +0000
Files and hashes: 1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: fX+OM6r7TNgmjsDkuiA6BM4K1LLjhecDrkj6F5yJJoU=)
2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Nov 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2799 (0xaef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Validity
Not Before: Nov 6 01:11:09 2025 GMT
Not After : Nov 8 01:11:09 2025 GMT
Subject: CN=690bf5ae-a2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:37:3c:73:e1:c0:c5:8b:4c:5b:57:e6:8d:
ab:42:45:06:37:c3:ff:de:9f:b4:8b:e3:f3:98:45:
23:be:5e:27:3b:6c:9e:f6:5c:1b:e7:5d:c2:31:39:
47:30:f9:8b:32:68:08:4b:d7:f4:2c:c7:24:53:c2:
21:57:63:13:2b:8f:8e:7d:e3:83:e9:40:d7:4f:7f:
75:c0:99:24:4d:a5:df:d5:ad:07:49:23:00:c4:48:
05:9d:f9:2f:a6:ce:93:94:4f:cf:fb:e4:b7:ba:4b:
f1:64:d2:83:13:67:d3:4d:6c:35:cd:be:ec:48:ee:
74:1f:17:a3:20:b9:19:3b:42:79:bb:09:54:1b:c2:
26:8f:c3:a6:95:73:b6:a5:a2:80:2a:cc:a0:98:9c:
66:e0:71:46:95:5b:3d:d3:64:92:6e:7b:f6:bf:73:
e2:5c:a7:69:79:31:d3:09:16:f8:64:69:50:0e:b5:
5a:d5:eb:ed:76:70:27:33:b9:85:57:a8:87:3c:ab:
89:97:a5:bf:c8:fc:61:23:61:6e:ea:2d:84:7f:fb:
97:90:2e:3a:40:23:0f:71:88:cd:8e:51:3c:53:5e:
50:16:61:fa:a8:d2:8c:a0:d7:e5:50:4d:69:c7:87:
bf:a1:4e:de:f2:a3:80:1d:97:eb:3e:38:5e:ba:a8:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:40:BE:14:A1:43:55:18:A1:25:C4:BD:09:30:5C:D2:16:95:EE:D6
X509v3 Authority Key Identifier:
keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7d:9d:33:0c:db:c4:7a:c6:3b:28:68:22:7f:19:f9:fb:88:
04:64:43:9e:09:55:5e:05:1a:f4:1b:40:2c:00:3d:12:58:fa:
6c:66:34:62:88:90:5e:e4:27:76:94:4f:bf:78:88:e7:a1:28:
0a:fe:7b:52:13:27:49:f0:e2:14:d5:7b:71:b9:ef:ef:c3:1f:
08:54:90:b9:63:d9:81:69:24:b7:9c:a6:e3:8f:a6:36:4e:a4:
3c:7c:dc:78:32:70:7f:da:dc:9c:22:c4:c3:37:80:d1:1e:a3:
4e:c2:ff:5b:2e:f7:bd:8e:9e:36:c4:dd:3d:3c:0e:26:ca:84:
b3:a5:e4:60:9b:58:e6:b3:a1:bc:8e:c8:0e:01:e9:44:b2:de:
bf:37:ff:3e:a1:aa:89:28:8c:83:32:18:a1:ef:cf:65:43:5d:
6a:e8:84:b2:74:d9:8e:f8:47:6d:d8:c3:f8:2b:f6:19:48:9b:
66:6a:31:b4:6d:63:96:99:a0:e4:14:3b:ed:86:62:f5:a8:63:
70:d8:bf:b2:78:d0:4e:19:32:44:bf:03:2f:02:f7:40:e5:53:
da:34:01:51:61:90:5c:84:28:2b:84:a0:44:24:8a:95:6f:8e:
78:9d:aa:45:42:c1:ef:ae:d9:87:6f:8d:46:81:c2:c5:fb:25:
a7:26:fb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 18:27:21 2025 by rpki-client