
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File: vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier: 8zMXxRF7YmkfSeFF7xme68QMFgquJqyK8FcezAz72+I=
Subject key identifier: CF:41:B5:93:DB:6D:74:CC:56:9D:52:8C:FD:C6:6B:D2:07:14:32:F7
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer: /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial: 02D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number: 02D1
Signing time: Tue 16 Sep 2025 03:49:24 +0000
Manifest this update: Tue 16 Sep 2025 03:49:24 +0000
Manifest next update: Thu 18 Sep 2025 03:49:24 +0000
Files and hashes: 1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: baLf7D3a1dn0LDuyaYSJW0PhMmzfkSeRT+pmaIgk2IA=)
2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Validity
Not Before: Sep 16 03:49:24 2025 GMT
Not After : Sep 18 03:49:24 2025 GMT
Subject: CN=68c8de44-688a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4a:c8:20:b2:8b:d0:a9:54:d5:33:09:a8:8f:
f0:d6:58:4c:04:08:db:34:d5:f9:d4:fa:85:b1:7e:
0c:26:93:02:22:9e:a5:9c:0e:77:f7:52:72:41:f5:
bf:1e:41:1a:d9:08:6c:e9:51:b4:37:74:ed:cb:b9:
d0:df:77:fa:5a:ed:3f:21:ae:64:34:6e:2a:e7:3f:
cd:39:c6:5d:3f:4e:42:99:30:43:c0:61:53:58:b1:
b9:fd:05:4b:1e:77:a7:31:64:e3:1f:dd:1b:47:03:
ac:3c:a7:eb:d3:88:65:4d:7b:71:8f:ea:0c:34:3d:
7d:01:7e:4b:d5:ee:4c:97:0a:c1:c1:53:db:8d:88:
dc:9d:da:d3:d4:c4:c3:fc:c6:4f:3b:23:33:c3:2d:
89:a4:b1:20:ba:1e:9d:0b:98:2f:5e:1a:9d:85:a7:
b7:88:ce:2c:8f:3e:86:c1:d1:e7:f8:82:06:90:63:
0c:9e:e4:af:1e:70:88:10:13:6a:e3:ff:b5:76:e0:
d6:79:fb:93:60:01:7f:b4:4b:39:62:bb:63:1d:a2:
79:9a:ee:cc:50:78:29:fb:9c:a1:e7:ba:35:28:8a:
e2:fe:ce:86:9b:63:af:9d:8f:dc:b0:e0:b1:ce:61:
4e:78:a5:88:de:2d:6c:4b:a8:f6:cf:01:5f:4f:08:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:41:B5:93:DB:6D:74:CC:56:9D:52:8C:FD:C6:6B:D2:07:14:32:F7
X509v3 Authority Key Identifier:
keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:6e:98:75:04:13:88:65:60:75:2c:7f:cb:5e:f6:50:8f:d6:
12:d7:e7:25:14:2a:7b:42:0e:e9:7e:12:a1:3d:05:ff:54:6e:
78:ba:f3:c8:cc:e0:7d:2f:a6:87:d3:f5:c5:35:e8:2c:07:7a:
fe:39:fe:8d:8a:c5:5c:22:f0:5a:d6:86:f6:e0:e8:6b:94:6e:
fa:4e:a0:bd:51:64:8f:34:7f:62:70:64:84:4a:26:b9:d5:52:
2f:26:40:75:ae:3e:ac:8e:67:98:22:8b:2d:a5:15:28:95:c8:
24:64:9d:1b:11:b2:c3:47:d1:95:81:e0:70:c3:ee:b7:1d:8f:
6c:8c:a6:85:eb:6a:86:f7:85:a9:13:f2:9a:20:ac:b7:7e:56:
3d:eb:77:c2:dc:41:5f:e9:6a:45:69:56:d8:3b:e5:90:db:7a:
da:91:45:3e:36:31:77:76:a1:f3:fc:c9:9a:a5:b0:8a:89:2a:
24:e6:84:4c:b2:04:bb:14:b8:6d:0b:61:88:0a:b9:71:44:ce:
47:d8:97:ba:87:1f:a5:68:c3:da:6b:48:17:f1:3f:8f:4b:ce:
d7:22:69:0a:33:6e:03:a5:5b:98:c9:91:01:f0:61:cd:2c:66:
dc:78:7b:45:bd:19:a2:65:cf:93:c1:4d:2d:9c:17:01:92:70:
42:18:c1:ec
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkNBMDdBRjExMC8GA1UEBRMoQkMzREUxRTk4NDAwODBCODNDNjUyNzhDREVBODVF
QTI5ODgyOTQ4MTAeFw0yNTA5MTYwMzQ5MjRaFw0yNTA5MTgwMzQ5MjRaMBgxFjAU
BgNVBAMTDTY4YzhkZTQ0LTY4OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoSsggsovQqVTVMwmoj/DWWEwECNs01fnU+oWxfgwmkwIinqWcDnf3UnJB
9b8eQRrZCGzpUbQ3dO3LudDfd/pa7T8hrmQ0birnP805xl0/TkKZMEPAYVNYsbn9
BUsed6cxZOMf3RtHA6w8p+vTiGVNe3GP6gw0PX0BfkvV7kyXCsHBU9uNiNyd2tPU
xMP8xk87IzPDLYmksSC6Hp0LmC9eGp2Fp7eIziyPPobB0ef4ggaQYwye5K8ecIgQ
E2rj/7V24NZ5+5NgAX+0Szliu2Mdonma7sxQeCn7nKHnujUoiuL+zoabY6+dj9yw
4LHOYU54pYjeLWxLqPbPAV9PCK2nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUz0G1
k9ttdMxWnVKM/cZr0gcUMvcwHwYDVR0jBBgwFoAUvD3h6YQAgLg8ZSeM3qheopiC
lIEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDQTA3LzhBNEI3NzFDNzJCMTExRUVBMEUwMDk2RTRBRDlFNkZDL3ZEM2g2
WVFBZ0xnOFpTZU0zcWhlb3BpQ2xJRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZEM2g2WVFBZ0xnOFpTZU0zcWhlb3BpQ2xJRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkNBMDcvOEE0Qjc3MUM3MkIxMTFFRUEwRTAwOTZFNEFE
OUU2RkMvdkQzaDZZUUFnTGc4WlNlTTNxaGVvcGlDbElFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgbph1BBOIZWB1LH/LXvZQj9YS1+cl
FCp7Qg7pfhKhPQX/VG54uvPIzOB9L6aH0/XFNegsB3r+Of6NisVcIvBa1ob24Ohr
lG76TqC9UWSPNH9icGSESia51VIvJkB1rj6sjmeYIostpRUolcgkZJ0bEbLDR9GV
geBww+63HY9sjKaF62qG94WpE/KaIKy3flY963fC3EFf6WpFaVbYO+WQ23rakUU+
NjF3dqHz/MmapbCKiSok5oRMsgS7FLhtC2GICrlxRM5H2Je6hx+laMPaa0gX8T+P
S87XImkKM24DpVuYyZEB8GHNLGbceHtFvRmiZc+TwU0tnBcBknBCGMHs
-----END CERTIFICATE-----
Generated at Wed Sep 17 00:53:10 2025 by rpki-client