Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: klSTMkRAIG1+A1/RqyBYvZTaVXlQS0s/c/cqM7S7/LI=
Subject key identifier: 51:E5:67:CD:49:08:F0:30:07:E5:7E:9B:B8:96:07:AE:45:C4:8D:E3
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 021F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 0219
Signing time: Wed 17 Sep 2025 04:12:43 +0000
Manifest this update: Wed 17 Sep 2025 04:12:42 +0000
Manifest next update: Fri 19 Sep 2025 04:12:42 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: tzCqZtTpM50K83iKHNFsqLCCOIbliMWG1I+FP/OeyEM=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 543 (0x21f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Sep 17 04:12:42 2025 GMT
Not After : Sep 19 04:12:42 2025 GMT
Subject: CN=68ca353b-e45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:95:58:9e:2f:9d:63:6a:f3:4a:f0:62:62:
99:ee:b7:b3:b4:8a:84:84:c3:8b:e6:7e:44:df:02:
28:08:a7:de:0d:dc:ac:cd:a7:8b:bd:a8:36:7d:4a:
88:80:b1:3a:5b:a7:2a:3c:c7:ab:94:6f:f9:dd:db:
1d:6a:56:98:7d:dd:61:32:c9:84:da:5c:01:77:29:
75:a0:7e:c7:f3:96:49:cc:69:f8:12:86:1c:65:0a:
a2:90:0e:5e:1e:2f:0e:98:57:4c:36:2c:8a:f6:45:
28:7e:76:bf:f4:7f:4c:22:36:bc:9e:46:cc:8a:3c:
45:59:52:1d:34:f7:42:e2:ce:ab:73:4b:6b:65:89:
29:e3:28:79:f2:00:9b:d6:4a:0f:53:ee:5f:72:03:
c0:2c:65:f5:5e:36:35:6f:90:15:9d:b1:6f:3c:33:
28:a6:a0:1a:a8:2f:35:4a:3a:32:08:2d:17:8d:ae:
b1:c6:98:51:da:9d:18:81:69:2e:71:6d:65:ef:2f:
0c:c6:4e:8b:30:cc:27:63:bc:8f:8b:3b:8e:50:f8:
ac:a7:f6:d5:b2:6b:17:c7:73:10:d8:92:ba:0b:f0:
25:1d:91:b9:68:08:5d:76:bc:d4:c7:e2:cd:a2:e0:
d6:33:bf:67:c1:9f:5a:8a:4a:97:01:30:c5:b7:67:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E5:67:CD:49:08:F0:30:07:E5:7E:9B:B8:96:07:AE:45:C4:8D:E3
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:d2:18:3f:f4:8a:83:f6:bb:06:7d:c6:7d:cd:e4:c3:0a:53:
4c:42:2f:06:4a:24:86:6d:67:e5:1a:91:c1:34:99:c8:93:fe:
3d:fe:ea:00:03:24:be:3f:76:6f:2d:0f:cc:f2:19:27:dd:b2:
22:c9:5a:6f:a5:7b:6f:f3:c1:0e:4d:01:58:16:c0:c1:f5:05:
5d:0a:00:d0:41:dd:a2:a3:c1:1f:f4:3d:d8:97:02:25:2c:65:
e5:e1:e5:96:f9:6c:24:d4:ba:62:16:8f:c1:7b:4e:46:dc:ba:
32:04:75:86:06:c3:12:3c:be:aa:c7:e9:ba:fb:0d:e2:c8:ab:
b3:2d:63:a3:e3:24:62:7d:ae:d8:df:38:0f:dd:63:78:db:58:
cf:fc:c3:ef:c0:77:c1:7e:5e:cf:de:9f:54:68:ba:c5:ff:34:
2b:d4:47:b9:ea:58:b4:d3:c7:c7:10:98:be:28:8c:ba:81:0e:
28:29:ea:c8:df:9f:ac:fd:11:35:1e:5c:ad:f2:71:cf:9f:ed:
f9:da:74:87:c7:b0:58:a6:02:f0:da:c0:68:ff:67:70:93:c5:
01:d6:4a:cd:d7:74:af:58:37:7c:cb:29:9b:1f:b4:3e:09:76:
22:84:16:a4:d1:ab:b7:60:c9:68:1f:68:fa:a5:62:4f:18:fb:
72:67:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:03:36 2025 by rpki-client