
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File: yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier: LQmV9ZMwXd18dfwVF7e0wokzVokBRhp7ajSIOULglqA=
Subject key identifier: C7:FD:CA:9D:F4:CC:AF:4F:95:88:49:20:FF:09:A4:DB:41:2A:28:8E
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer: /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial: 44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number: 43
Signing time: Thu 31 Jul 2025 05:29:42 +0000
Manifest this update: Thu 31 Jul 2025 05:29:41 +0000
Manifest next update: Sat 02 Aug 2025 05:29:41 +0000
Files and hashes: 1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: tOdDwnxfcyiv4t4vN8I35j84kluKEDAaUh117WcleUE=)
2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Validity
Not Before: Jul 31 05:29:41 2025 GMT
Not After : Aug 2 05:29:41 2025 GMT
Subject: CN=688aff46-b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:a3:3c:24:00:64:17:61:d6:e9:c3:06:a1:
d2:9b:85:85:a2:64:cb:b8:3e:47:44:1e:4f:ba:06:
fe:50:0b:cc:73:23:35:62:ac:05:bd:85:01:20:81:
2a:e7:e8:05:2f:03:5a:c5:2d:06:3f:8c:21:cb:d0:
8a:77:e2:d6:03:32:91:d5:d6:4d:27:4d:2a:64:63:
1c:b9:f8:38:43:73:d6:60:61:0c:88:0c:73:ad:11:
0f:67:04:69:55:81:ff:31:5a:ed:3e:11:70:84:a7:
24:dc:e5:0b:9b:da:d2:7f:a6:57:ce:2c:d6:1d:4a:
7b:f5:9a:3b:bb:91:1d:7c:70:e0:4e:96:bd:14:a9:
81:32:d8:94:39:86:27:e7:5e:51:7c:8a:fd:c5:ee:
7d:60:55:6d:41:63:20:df:87:2e:81:64:e7:54:dd:
bc:7c:6a:bd:af:28:c3:28:85:10:6e:22:50:a5:8b:
c0:31:20:2a:38:3b:28:10:9c:c4:08:09:58:f8:f1:
bf:b4:19:57:7b:06:79:35:44:4e:1a:b4:f4:f7:a1:
91:be:64:a5:3d:a1:90:83:fa:77:3f:f2:28:d5:fb:
a0:13:b9:69:c7:60:57:34:95:d2:c8:d6:0c:12:e5:
f7:0e:90:24:bc:f3:18:e7:7c:6b:dc:ba:28:e2:1a:
4c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FD:CA:9D:F4:CC:AF:4F:95:88:49:20:FF:09:A4:DB:41:2A:28:8E
X509v3 Authority Key Identifier:
keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:8e:7b:c7:ae:31:23:b2:67:6d:3d:9f:f3:02:04:7c:67:
81:2e:e5:02:cf:5e:35:4f:1e:e7:58:3f:08:1c:fd:d4:11:4e:
6d:32:b5:39:cd:54:94:cc:0c:7a:50:2a:1f:f7:a2:0e:69:19:
e4:6d:23:7b:1e:a0:17:1e:84:67:dd:28:cd:3a:ac:26:a6:14:
95:0b:b9:9c:2a:76:4b:04:9b:e9:be:0e:6d:db:0e:d2:f4:72:
e0:bb:75:19:fb:79:c3:cc:a6:7b:dc:23:45:52:18:f4:ff:12:
16:1b:81:51:dc:a1:cc:a9:f4:69:ba:19:94:e2:27:be:18:db:
dd:6c:bf:21:87:dd:71:87:9d:e9:d6:45:37:db:9d:e9:2c:a4:
cc:01:d8:13:05:2a:c1:65:72:a9:76:48:58:89:b0:22:f6:1e:
0b:d1:39:4a:50:c5:41:0a:30:1f:8d:7a:c9:3e:a9:f8:16:a2:
a3:49:3b:e7:12:36:54:4c:a4:93:69:08:b9:bf:db:8c:6d:0b:
16:f6:7e:87:ce:50:d4:3d:a0:1e:29:5c:fa:a3:36:ac:d7:c6:
3b:24:ef:d0:bb:38:f9:cb:f4:2d:c4:98:88:e3:53:08:fa:c4:
07:33:2d:b8:b0:97:df:aa:3f:19:88:f7:79:00:78:80:68:79:
7e:1d:ff:d2
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBRDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
NUM0OEFGMTEwLwYDVQQFEyhDODNGRDBFMTVEMTQzQzM3Rjk5NDc0OTdDRjg2NkY4
RkFFNzQ3MEI5MB4XDTI1MDczMTA1Mjk0MVoXDTI1MDgwMjA1Mjk0MVowGDEWMBQG
A1UEAxMNNjg4YWZmNDYtYjg4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdJozwkAGQXYdbpwwah0puFhaJky7g+R0QeT7oG/lALzHMjNWKsBb2FASCB
KufoBS8DWsUtBj+MIcvQinfi1gMykdXWTSdNKmRjHLn4OENz1mBhDIgMc60RD2cE
aVWB/zFa7T4RcISnJNzlC5va0n+mV84s1h1Ke/WaO7uRHXxw4E6WvRSpgTLYlDmG
J+deUXyK/cXufWBVbUFjIN+HLoFk51TdvHxqva8owyiFEG4iUKWLwDEgKjg7KBCc
xAgJWPjxv7QZV3sGeTVEThq09Pehkb5kpT2hkIP6dz/yKNX7oBO5acdgVzSV0sjW
DBLl9w6QJLzzGOd8a9y6KOIaTMECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTH/cqd
9MyvT5WISSD/CaTbQSoojjAfBgNVHSMEGDAWgBTIP9DhXRQ8N/mUdJfPhm+PrnRw
uTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzVDNDgvOTAyQzhCODQzQzY0MTFGMEFEQkU4NzhEREFFNEVDOUMveURfUTRW
MFVQRGY1bEhTWHo0WnZqNjUwY0xrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveURfUTRWMFVQRGY1bEhTWHo0WnZqNjUwY0xrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDNUM0OC85MDJDOEI4NDNDNjQxMUYwQURCRTg3OEREQUU0
RUM5Qy95RF9RNFYwVVBEZjVsSFNYejRadmo2NTBjTGsubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAB0tjnvHrjEjsmdtPZ/zAgR8Z4Eu5QLP
XjVPHudYPwgc/dQRTm0ytTnNVJTMDHpQKh/3og5pGeRtI3seoBcehGfdKM06rCam
FJULuZwqdksEm+m+Dm3bDtL0cuC7dRn7ecPMpnvcI0VSGPT/EhYbgVHcocyp9Gm6
GZTiJ74Y291svyGH3XGHnenWRTfbnekspMwB2BMFKsFlcql2SFiJsCL2HgvROUpQ
xUEKMB+Nesk+qfgWoqNJO+cSNlRMpJNpCLm/24xtCxb2fofOUNQ9oB4pXPqjNqzX
xjsk79C7OPnL9C3EmIjjUwj6xAczLbiwl9+qPxmI93kAeIBoeX4d/9I=
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:24 2025 by rpki-client