
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File: AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier: F3tadGXrkd4uerEokjCo8maOp5BJITjdUGw4cV3Zens=
Subject key identifier: 21:09:8E:01:37:88:F5:D6:88:D3:05:72:7A:90:42:57:60:ED:D6:A0
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer: /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial: 24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number: 24
Signing time: Wed 17 Sep 2025 05:11:48 +0000
Manifest this update: Wed 17 Sep 2025 05:11:47 +0000
Manifest next update: Fri 19 Sep 2025 05:11:47 +0000
Files and hashes: 1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: g6St51t6K5oyxFnY82LzjFo4LbWofu4/OSPQgRXNYKY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
Validity
Not Before: Sep 17 05:11:47 2025 GMT
Not After : Sep 19 05:11:47 2025 GMT
Subject: CN=68ca4314-226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:02:0b:74:8b:84:ac:d7:57:2d:1f:a4:c7:
89:d7:b7:b7:f8:f0:4f:51:8e:e2:a8:cd:00:49:99:
fe:72:7b:62:3b:31:46:4d:cb:16:d1:d3:6e:6a:e5:
a3:2f:95:ba:71:6c:2b:69:71:dd:2c:9a:39:34:29:
b8:4a:b6:7b:ef:5f:37:b6:75:7e:18:ae:aa:da:5d:
05:91:6c:f6:fc:ab:72:b6:34:e4:5d:09:8c:5f:ab:
d7:c0:95:d1:95:6e:45:b6:a3:28:80:a7:86:01:b0:
a7:d1:f6:53:0a:6d:10:32:f0:77:cc:29:43:65:16:
3c:6e:a3:50:fe:b9:a7:82:e1:ee:74:57:4e:d1:e1:
05:dd:76:cb:80:4b:b1:c1:dc:d2:ec:5b:84:bf:1c:
a1:3b:f2:04:c0:0d:6e:ca:cd:2e:ea:e0:eb:b4:d2:
9f:0e:e2:ca:7c:9a:30:55:2c:e5:e2:18:ca:37:a4:
fa:27:08:f9:8f:32:ca:8d:5b:dd:bc:92:b6:2b:6f:
97:9e:43:c3:1f:22:c9:ab:0d:ff:ed:9a:15:15:4b:
c4:7e:be:38:27:b7:ce:85:39:07:88:51:09:2a:4c:
cd:3d:e1:ec:42:a9:e3:7f:1b:00:ba:e8:61:e3:b6:
cc:93:05:14:25:b5:7e:d5:d2:75:95:cb:8a:a6:f3:
8b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:09:8E:01:37:88:F5:D6:88:D3:05:72:7A:90:42:57:60:ED:D6:A0
X509v3 Authority Key Identifier:
keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d9:e1:16:44:a2:63:83:da:3c:7e:86:b5:7f:ec:b7:d1:bd:fd:
e7:e6:a4:3b:7f:56:6d:3d:d7:5e:d5:c6:b1:de:5d:2e:72:2a:
d5:6d:a2:ca:c1:d5:4b:cc:23:3b:df:1e:af:45:ed:3b:12:54:
4f:60:2a:b7:d7:cf:e4:2b:93:75:05:b6:a8:03:a7:95:0c:09:
68:23:56:87:8d:bb:03:fe:d3:5c:6b:e8:79:6d:af:63:ec:31:
5f:7c:68:cd:b9:ab:77:c3:b2:f3:19:80:1c:98:fb:dd:58:65:
dc:89:fc:2a:6f:71:a5:41:60:d6:c9:bf:c8:e3:ca:b4:84:ef:
04:59:3c:92:aa:5f:ba:7a:c8:f7:23:7f:77:6c:a8:c4:e7:c6:
db:ef:16:21:c1:3b:94:a5:4d:a0:7f:c3:76:ff:ff:3d:1c:50:
f2:11:c4:13:7e:81:3d:59:ac:97:47:55:e0:be:b3:4b:00:a2:
80:35:76:cd:6a:c5:27:40:fa:84:05:b7:cd:1b:cc:48:96:7e:
61:8f:98:24:92:bb:91:82:2b:99:cf:a1:2f:0c:c0:bc:74:8b:
6d:09:8b:73:fc:6a:cf:e3:7b:da:1e:fd:1f:03:51:44:40:72:
f7:2e:d1:00:c1:fd:f8:c3:40:a4:0f:3c:46:52:46:2a:3b:2e:
9d:d9:06:85
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NTk0N0FGMTEwLwYDVQQFEygwMDZFMEJFMjEwOTA3OTJEMTgzNTYxOTc1MTBBRDM0
MEVDMDQyMzUzMB4XDTI1MDkxNzA1MTE0N1oXDTI1MDkxOTA1MTE0N1owGDEWMBQG
A1UEAxMNNjhjYTQzMTQtMjI2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALn/Agt0i4Ss11ctH6THide3t/jwT1GO4qjNAEmZ/nJ7YjsxRk3LFtHTbmrl
oy+VunFsK2lx3SyaOTQpuEq2e+9fN7Z1fhiuqtpdBZFs9vyrcrY05F0JjF+r18CV
0ZVuRbajKICnhgGwp9H2UwptEDLwd8wpQ2UWPG6jUP65p4Lh7nRXTtHhBd12y4BL
scHc0uxbhL8coTvyBMANbsrNLurg67TSnw7iynyaMFUs5eIYyjek+icI+Y8yyo1b
3byStitvl55Dwx8iyasN/+2aFRVLxH6+OCe3zoU5B4hRCSpMzT3h7EKp438bALro
YeO2zJMFFCW1ftXSdZXLiqbzi5UCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQhCY4B
N4j11ojTBXJ6kEJXYO3WoDAfBgNVHSMEGDAWgBQAbgviEJB5LRg1YZdRCtNA7AQj
UzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTU5NDcvMDU3RTVDMDg3ODRFMTFGMEIzQkYzMjdEREFFNEVDOUMvQUc0TDRo
Q1FlUzBZTldHWFVRclRRT3dFSTFNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQUc0TDRoQ1FlUzBZTldHWFVRclRRT3dFSTFNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5NTk0Ny8wNTdFNUMwODc4NEUxMUYwQjNCRjMyN0REQUU0
RUM5Qy9BRzRMNGhDUWVTMFlOV0dYVVFyVFFPd0VJMU0ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBANnhFkSiY4PaPH6GtX/st9G9/efmpDt/
Vm09117VxrHeXS5yKtVtosrB1UvMIzvfHq9F7TsSVE9gKrfXz+Qrk3UFtqgDp5UM
CWgjVoeNuwP+01xr6Hltr2PsMV98aM25q3fDsvMZgByY+91YZdyJ/CpvcaVBYNbJ
v8jjyrSE7wRZPJKqX7p6yPcjf3dsqMTnxtvvFiHBO5SlTaB/w3b//z0cUPIRxBN+
gT1ZrJdHVeC+s0sAooA1ds1qxSdA+oQFt80bzEiWfmGPmCSSu5GCK5nPoS8MwLx0
i20Ji3P8as/je9oe/R8DUURAcvcu0QDB/fjDQKQPPEZSRio7Lp3ZBoU=
-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:12 2025 by rpki-client