Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File: zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier: Iux/uGxfdYv/dW1mAIJhLFtc0mhQoux/UfM4KPQONoI=
Subject key identifier: 72:0C:DE:1A:6E:D0:92:DB:7E:52:5D:F4:73:EC:D5:11:33:00:35:46
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer: /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial: 025B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number: 025A
Signing time: Thu 31 Jul 2025 04:21:09 +0000
Manifest this update: Thu 31 Jul 2025 04:21:08 +0000
Manifest next update: Sat 02 Aug 2025 04:21:08 +0000
Files and hashes: 1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: IJabXR7tRxLV6NwBTtHUGAoD1khCxHCbYn8P+/DJ8BM=)
2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Validity
Not Before: Jul 31 04:21:08 2025 GMT
Not After : Aug 2 04:21:08 2025 GMT
Subject: CN=688aef35-6f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:69:f9:cc:26:c1:d8:67:1f:0b:a3:01:6b:
91:75:df:81:a3:d9:29:44:69:b4:52:52:ad:9b:f7:
c5:7d:4d:2a:cf:07:99:43:2d:40:b4:43:25:8a:eb:
71:a9:54:98:0f:5d:67:32:b3:43:11:8b:aa:5c:45:
18:6f:e5:56:2c:39:eb:18:a3:98:a2:fd:a4:fe:21:
6a:f1:ed:55:0d:3f:c0:35:a0:a5:ed:4a:6b:53:db:
17:64:bc:48:c2:6e:ea:a6:be:87:11:a4:35:93:81:
2c:ed:48:ec:26:f9:9e:05:92:cb:00:ee:74:3b:21:
36:01:5c:5d:80:57:ca:0d:cc:68:0a:d6:93:f8:e3:
7f:75:8f:8e:b0:f8:ee:14:bb:cf:1f:94:a8:1f:c3:
fd:cb:0d:7d:57:0b:dd:0e:26:08:f7:90:8f:23:88:
5f:a0:ff:ee:5a:d6:32:d1:04:03:57:2a:05:b0:6d:
62:33:2c:99:5a:6d:21:7c:99:fc:c9:6b:20:ff:a1:
c3:89:df:53:e8:09:44:0e:bf:14:f1:94:0e:2f:e3:
0f:d7:70:ef:af:65:9b:61:cb:86:df:57:90:b0:4b:
1f:9a:0e:8b:45:fa:4a:ec:11:bf:93:92:3e:a1:30:
94:0f:82:6b:e9:3b:24:ec:f5:a1:0f:97:57:2d:8b:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:DE:1A:6E:D0:92:DB:7E:52:5D:F4:73:EC:D5:11:33:00:35:46
X509v3 Authority Key Identifier:
keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:e8:49:43:57:2e:20:8f:fc:dd:66:d9:e6:55:57:8c:bc:04:
d7:00:6c:ca:e7:e3:e0:c1:78:d0:20:af:65:38:06:af:0c:61:
34:3c:d6:23:33:9e:77:71:d3:81:3d:79:a9:0c:e7:d0:dc:24:
be:5b:25:fb:70:38:40:41:80:88:85:f0:20:a0:37:75:03:7a:
7a:8d:c2:f3:8e:fa:54:46:d5:f4:a1:62:08:9b:2d:48:36:ca:
06:c1:e2:33:95:8c:58:a0:1a:3d:48:da:7e:5e:6b:49:af:48:
5e:94:73:ab:b1:7d:d8:24:79:37:d0:94:12:fd:b8:b1:e7:f0:
2f:ff:7c:9d:6e:45:d3:da:42:05:dc:83:d1:42:f1:92:ed:db:
04:a9:99:6e:21:c5:bd:20:c5:c2:07:39:4a:0b:ef:7d:0d:52:
e3:da:91:b6:bf:c4:b6:e1:c9:08:e0:ef:42:ea:2b:56:c7:c6:
60:8e:23:d7:ce:6c:6e:56:97:78:cb:7b:ff:3a:b4:55:54:ba:
cc:b7:86:e0:b8:81:32:d4:89:f1:f1:41:09:1a:f2:ef:4b:32:
eb:42:21:9d:8c:78:a9:54:41:d5:23:39:9b:99:ef:c3:7f:22:
fd:b8:ec:b8:e9:16:43:74:ec:27:44:92:0f:99:be:55:64:9f:
6e:17:e2:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRBM0JBRjExMC8GA1UEBRMoQ0VCRTk5RUVCMEJFM0NFOERCMTlCQTQ0NzY2Q0Ez
RTNDODA3QTk4OTAeFw0yNTA3MzEwNDIxMDhaFw0yNTA4MDIwNDIxMDhaMBgxFjAU
BgNVBAMTDTY4OGFlZjM1LTZmMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXwmn5zCbB2GcfC6MBa5F134Gj2SlEabRSUq2b98V9TSrPB5lDLUC0QyWK
63GpVJgPXWcys0MRi6pcRRhv5VYsOesYo5ii/aT+IWrx7VUNP8A1oKXtSmtT2xdk
vEjCbuqmvocRpDWTgSztSOwm+Z4FkssA7nQ7ITYBXF2AV8oNzGgK1pP44391j46w
+O4Uu88flKgfw/3LDX1XC90OJgj3kI8jiF+g/+5a1jLRBANXKgWwbWIzLJlabSF8
mfzJayD/ocOJ31PoCUQOvxTxlA4v4w/XcO+vZZthy4bfV5CwSx+aDotF+krsEb+T
kj6hMJQPgmvpOyTs9aEPl1ctiyJxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcgze
Gm7Qktt+Ul30c+zVETMANUYwHwYDVR0jBBgwFoAUzr6Z7rC+POjbGbpEdmyj48gH
qYkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0QTNCLzRGQUZGREFFQTQ4RDExRUU4OENCODc2M0QyNUJFNDY1L3pyNlo3
ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pyNlo3ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzRBM0IvNEZBRkZEQUVBNDhEMTFFRTg4Q0I4NzYzRDI1
QkU0NjUvenI2WjdyQy1QT2piR2JwRWRteWo0OGdIcVlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl6ElDVy4gj/zdZtnmVVeMvATXAGzK
5+PgwXjQIK9lOAavDGE0PNYjM553cdOBPXmpDOfQ3CS+WyX7cDhAQYCIhfAgoDd1
A3p6jcLzjvpURtX0oWIImy1INsoGweIzlYxYoBo9SNp+XmtJr0helHOrsX3YJHk3
0JQS/bix5/Av/3ydbkXT2kIF3IPRQvGS7dsEqZluIcW9IMXCBzlKC+99DVLj2pG2
v8S24ckI4O9C6itWx8ZgjiPXzmxuVpd4y3v/OrRVVLrMt4bguIEy1Inx8UEJGvLv
SzLrQiGdjHipVEHVIzmbme/DfyL9uOy46RZDdOwnRJIPmb5VZJ9uF+Ir
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:53 2025 by rpki-client