
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File: JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier: nBqc/lPNq4QbPV902kXDTyMW8Hn06PNuI6z2C4VHQGE=
Subject key identifier: 56:20:A6:24:E3:FD:3C:43:5F:A0:A5:8A:D2:C0:45:85:11:57:C0:61
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer: /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial: 0D4D
Authority info access: rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number: 0D4A
Signing time: Tue 16 Sep 2025 01:03:04 +0000
Manifest this update: Tue 16 Sep 2025 01:03:03 +0000
Manifest next update: Thu 18 Sep 2025 01:03:03 +0000
Files and hashes: 1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: F6SrOQavkBV0tVqNW11DcIHomgVm0GrksGEX3xAaPu4=)
2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3405 (0xd4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Validity
Not Before: Sep 16 01:03:03 2025 GMT
Not After : Sep 18 01:03:03 2025 GMT
Subject: CN=68c8b748-6c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f6:c9:8a:29:cd:c7:e7:e7:ba:18:f2:b1:cf:
7c:01:14:d7:6a:ac:6e:a0:ad:49:9d:17:85:4c:0d:
5e:4e:aa:b0:19:fb:66:f5:78:40:fb:0c:13:82:a7:
d2:4b:ce:28:66:4b:7f:d4:d8:bb:87:f5:26:7c:a8:
cf:a3:6d:1d:6c:4c:7b:28:10:18:27:4f:30:4c:46:
5a:e3:67:aa:a5:dc:97:05:0b:4f:c6:da:56:ff:39:
ab:85:05:04:a5:4c:ca:a3:b3:63:38:82:8a:6f:66:
1c:fa:d1:1d:6d:07:9d:b7:73:6a:7f:77:e1:bd:c2:
e6:76:91:73:75:d2:b3:b0:74:f3:2d:5a:bd:d9:02:
e3:a2:4a:04:e5:5f:5a:88:df:eb:13:11:18:6b:a4:
8b:26:07:e6:e6:6b:8a:eb:89:9e:02:4e:ea:0f:03:
b3:81:29:8a:7d:85:9d:77:fb:69:88:43:e6:3a:0a:
31:a1:5b:f5:d5:a9:58:2c:62:d9:19:7f:1b:b5:de:
0c:4d:61:e6:a1:14:32:fd:e1:d3:91:49:63:74:f5:
9c:eb:c1:23:db:1f:38:69:62:09:82:72:97:c2:fe:
bd:db:10:b1:d5:09:46:59:7f:e9:35:4a:7b:66:08:
8f:66:fa:dd:35:77:b8:54:30:e3:00:a2:27:2a:0b:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:20:A6:24:E3:FD:3C:43:5F:A0:A5:8A:D2:C0:45:85:11:57:C0:61
X509v3 Authority Key Identifier:
keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:0b:3d:40:d1:66:0b:64:68:c3:ad:77:d6:6e:a0:fa:86:c3:
d5:a2:4a:10:94:72:59:a9:97:f7:4c:5d:bf:e3:10:cf:85:31:
53:43:c0:01:b3:26:e7:4f:8c:5b:9e:d9:2c:2c:27:80:a4:8b:
85:c9:0c:9f:05:68:57:a4:8c:ff:4f:06:b1:60:e9:4c:9f:58:
3b:f7:1c:23:70:21:46:0c:bd:1f:4a:51:c1:76:48:3b:a2:b9:
bd:e8:96:f4:d5:56:8f:85:30:d6:ff:7e:b4:08:36:85:81:f7:
d9:b1:03:b9:b9:9a:92:a3:d0:7c:f5:47:c7:7b:1b:bf:07:f2:
b2:cf:66:3b:15:41:c3:88:2b:b8:28:92:1b:73:f1:a6:33:11:
e5:49:26:d7:4e:e1:a0:5e:3a:45:05:12:bd:fa:5a:ce:ea:e3:
83:b8:32:ba:d9:c1:63:6d:9b:06:e6:31:06:62:be:41:b9:d7:
1b:7a:1f:a4:7d:28:75:0e:91:e0:4e:7f:a9:fb:19:a4:6a:43:
0d:80:0e:e5:c4:71:82:f3:d1:90:4b:db:71:8d:a9:e5:d1:de:
a7:59:f5:5f:34:ad:aa:29:e7:c7:14:df:60:05:50:9b:a1:46:
3b:d3:30:49:82:d6:60:45:0c:c1:1c:72:d2:c8:4a:8c:c9:e9:
83:30:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:08:19 2025 by rpki-client