Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
File: Cc973KOmkZDCJAUZkQFoaVT0_ek.mft (raw, json)
Hash identifier: tic05IQ/S1jdNzAViML/9SjjwK/KNkf3pmiV50ac9GI=
Subject key identifier: 13:A5:A0:12:E8:C6:8B:6F:06:2C:46:FB:4E:11:8B:7C:BC:50:B6:6E
Authority key identifier: 09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
Certificate issuer: /CN=F369E91FAF/serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
Certificate serial: 1B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
Manifest number: 1A
Signing time: Thu 23 Oct 2025 05:16:56 +0000
Manifest this update: Thu 23 Oct 2025 05:16:55 +0000
Manifest next update: Sat 25 Oct 2025 05:16:55 +0000
Files and hashes: 1: Cc973KOmkZDCJAUZkQFoaVT0_ek.crl (hash: b28MLg0AeOZFe9yOyrfCc5tiDQqVbsE/rJ0RlDoJb/Y=)
2: 41D8DA8C9D2111F088539995DAE4EC9C.roa (hash: usUOF3SfkpfcLIUOsrztuIFlBZuUcdWMiuavxqFlQ4U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.crl
rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Oct 2025 00:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369E91FAF, serialNumber=09CF7BDCA3A69190C22405199101686954F4FDE9
Validity
Not Before: Oct 23 05:16:55 2025 GMT
Not After : Oct 25 05:16:55 2025 GMT
Subject: CN=68f9ba48-e43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:3e:56:0e:ca:98:44:98:3d:ae:f1:0e:09:
36:6f:f1:c9:c5:5b:4e:31:da:6f:4d:e2:ea:68:e6:
18:ef:45:9f:3b:1d:42:82:06:34:56:aa:3c:ce:6b:
f6:47:17:97:47:f9:32:d8:0e:8e:07:42:6e:41:bc:
4e:f4:f8:dd:71:1b:f3:ca:c7:48:04:06:0a:b6:06:
46:4d:2c:fd:35:3e:8f:6c:f7:e9:ad:90:55:7d:41:
13:b1:ba:dd:49:9f:10:7a:b0:59:2e:f2:e5:bd:cc:
d8:b8:03:a4:b6:5a:83:8b:8d:90:17:18:56:55:cc:
9f:95:92:04:b9:fe:49:6f:ae:21:6d:58:4b:a9:cf:
f0:47:02:78:e2:b0:a2:68:9e:51:a0:54:fe:a0:6b:
0e:19:ce:3c:88:c8:49:3b:2f:51:fa:d8:62:ec:2d:
96:05:ef:34:0c:28:9f:a1:0c:04:bb:81:19:3b:b6:
51:12:06:18:ef:3a:ca:e5:3a:3f:8f:ec:f9:d1:33:
5f:15:62:cf:76:ee:08:fb:63:79:a1:9e:e1:58:6d:
1c:2e:fb:47:bd:fd:9e:75:42:8a:8c:06:bc:61:f0:
93:ef:b6:e3:c7:d2:d6:24:b2:14:06:a3:8f:01:d5:
55:b9:82:b8:cf:5d:9c:a5:85:ac:e9:bc:74:22:b8:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A5:A0:12:E8:C6:8B:6F:06:2C:46:FB:4E:11:8B:7C:BC:50:B6:6E
X509v3 Authority Key Identifier:
keyid:09:CF:7B:DC:A3:A6:91:90:C2:24:05:19:91:01:68:69:54:F4:FD:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Cc973KOmkZDCJAUZkQFoaVT0_ek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E91F/43334A8A9D2011F09807D590DAE4EC9C/Cc973KOmkZDCJAUZkQFoaVT0_ek.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:67:18:19:5c:b1:d6:a5:b1:57:b8:44:08:82:bd:45:58:fe:
31:cb:fa:d1:60:68:62:9b:ce:48:3f:3d:dc:cc:74:91:fc:4e:
63:08:fe:33:1e:5d:53:d8:15:d8:1e:06:d2:c4:ed:72:1e:90:
0c:df:e5:5b:4f:42:f1:24:2a:57:1b:43:7a:4e:46:81:48:f7:
eb:65:af:f4:02:60:5d:5d:c3:10:93:2d:f3:ce:fb:8a:24:e3:
eb:0f:b4:60:6c:f7:4b:a3:db:1c:4d:72:15:87:1c:12:f7:05:
46:ea:b0:e5:f7:53:8c:d5:12:b6:8d:84:53:96:8b:b4:5a:8c:
5f:04:84:67:f7:dc:60:cd:c3:61:04:06:c6:e3:f0:90:e6:b2:
b3:25:ec:dd:cb:a1:6f:68:23:73:a7:5f:b8:b8:b7:1c:ce:40:
40:1a:97:d9:ba:f5:c0:b0:49:ea:fe:e4:89:02:33:7c:10:e1:
e6:f0:d2:cf:fe:66:2e:55:ef:9c:26:e6:ee:e9:40:e5:34:e5:
ef:7c:1d:a5:c5:11:16:17:ea:3a:de:76:e7:e1:ac:dc:6b:6b:
8b:1e:cf:f5:2d:90:ec:65:f2:85:a8:c0:a5:ad:94:d7:f7:d8:
f1:b0:df:23:e4:f7:aa:af:2f:bb:0c:2a:af:20:e4:26:60:55:
7e:db:50:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 19:47:40 2025 by rpki-client