
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier: b1o/mYBxa1hONIJnPBtj0sTkGaGQRUVwG+Nqo8L1FXM=
Subject key identifier: 8C:E9:CE:82:85:05:E7:FA:BC:0C:A0:87:3C:A4:F3:06:70:2C:32:B3
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer: /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial: 0342
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number: 0340
Signing time: Thu 23 Oct 2025 03:42:54 +0000
Manifest this update: Thu 23 Oct 2025 03:42:53 +0000
Manifest next update: Sat 25 Oct 2025 03:42:53 +0000
Files and hashes: 1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: vU3wdXR+dTGWwoeDGnlodc1nMnDsXaglA7lfDYohg3w=)
2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Oct 2025 00:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Validity
Not Before: Oct 23 03:42:53 2025 GMT
Not After : Oct 25 03:42:53 2025 GMT
Subject: CN=68f9a43e-bfec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:8f:19:8e:93:e8:b7:96:11:86:91:fe:66:
9e:f1:c7:64:ff:fa:08:31:f5:fc:0f:1e:13:d7:3c:
5f:bf:74:34:f7:df:0d:c5:35:84:56:37:21:f9:65:
f6:21:bf:a1:c2:22:22:2f:ad:66:10:3b:5a:f9:3f:
60:fa:4c:b6:8a:d4:8a:2a:58:19:fa:35:8a:c0:5e:
04:d0:ae:69:11:8f:79:0b:b1:42:bf:c0:9d:4f:93:
f1:ca:81:64:54:83:fa:63:cb:a5:cc:e2:d5:4c:2b:
94:42:52:7a:0c:8c:f5:e4:df:a5:96:1d:f3:17:11:
89:69:bd:2c:b7:21:cd:31:17:32:47:ae:f8:bf:b1:
72:42:a4:d1:fc:34:d8:18:50:2d:b5:dd:01:46:b9:
be:2d:93:b6:9b:00:00:d8:cc:32:b7:a4:34:99:e8:
49:a9:d3:f6:c8:ad:28:a6:9d:a0:02:69:c7:dc:b6:
ca:50:f6:dd:22:b5:c2:52:85:c5:eb:e3:0f:44:27:
9d:4c:ac:44:28:9b:6b:41:ba:98:c3:16:59:a3:fb:
aa:3c:ed:11:05:f4:27:a3:e2:ba:de:ed:59:e7:4b:
7d:1e:2d:07:e0:af:ca:a5:b7:ce:9e:70:12:c9:42:
6b:6c:32:52:0f:db:65:83:38:16:45:a3:9e:f9:9f:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E9:CE:82:85:05:E7:FA:BC:0C:A0:87:3C:A4:F3:06:70:2C:32:B3
X509v3 Authority Key Identifier:
keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8f:f7:83:66:12:30:76:10:fa:d7:32:15:7c:82:d4:8f:3e:
b7:cf:92:1f:69:72:ac:a6:26:36:be:58:3c:f1:11:f6:f2:9d:
64:37:20:2f:2d:a5:4b:cc:01:33:0c:f5:6a:ea:be:97:c0:e9:
0c:4d:82:c9:df:86:61:3c:33:5e:57:4e:74:2f:b1:5e:a2:c7:
83:db:c3:96:71:2a:31:3d:66:cd:dc:e0:5d:81:50:59:71:95:
20:fc:c3:7f:12:65:d0:f2:ba:e7:92:a7:f1:08:04:c9:30:6c:
70:b0:da:d1:28:4f:f9:7d:b1:63:8e:b4:85:d7:2c:2b:1a:ad:
76:a2:93:9c:c6:3d:77:41:0c:67:56:03:5c:f8:3e:c0:c9:18:
ea:4d:bf:17:b4:9b:ff:fc:e6:f9:6b:36:95:1a:11:b7:63:bb:
80:5f:f2:7a:1d:80:cd:a6:97:10:94:5f:64:2a:aa:53:65:e0:
02:34:32:66:86:8b:8b:6a:70:90:3b:a7:65:c8:94:2b:12:53:
c8:db:60:f1:34:f2:58:f9:ee:68:95:e9:f6:be:26:3c:27:0b:
c1:0d:b9:6a:aa:c5:49:91:54:3b:94:7d:ec:87:a3:34:4b:8a:
63:65:30:38:0b:a9:51:b7:77:c5:80:c4:43:1d:34:c8:74:56:
cf:2a:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 20:02:24 2025 by rpki-client