Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: ZIu8cq3oaWfDAfoKNXyZRurkoQLj7WdVLOCg3EjWCaI=
Subject key identifier: 70:DA:98:B6:21:6A:B7:AB:E1:77:27:E3:B4:41:D9:88:D6:7F:23:AB
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0EC6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0EC5
Signing time: Thu 18 Sep 2025 00:52:57 +0000
Manifest this update: Thu 18 Sep 2025 00:52:56 +0000
Manifest next update: Sat 20 Sep 2025 00:52:56 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: pYiizBTcUN0MDJHMxy9ANKsB9AK6xoM4RXmHf9DE8bI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3782 (0xec6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Sep 18 00:52:56 2025 GMT
Not After : Sep 20 00:52:56 2025 GMT
Subject: CN=68cb57e8-ce90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:4e:43:6b:04:de:d2:e3:85:a6:1a:4f:0b:
2c:f4:4f:e7:06:0b:eb:01:ac:65:18:93:fc:d7:bb:
95:fc:11:3c:6d:6b:08:54:4c:1f:f3:66:2f:dc:b2:
f6:cf:cc:5d:2b:14:4c:40:8d:01:0a:1e:70:21:06:
f6:ae:25:d4:9b:76:df:5b:1d:a6:70:e9:73:47:43:
b2:45:4f:84:bc:09:62:c6:18:e7:25:85:79:9c:c3:
74:cd:6e:d9:e7:f1:1a:81:49:e7:0a:7a:f2:e4:22:
f2:b3:da:ae:9f:8f:0d:25:93:2e:ef:3c:2e:90:6a:
4f:8e:d6:b4:28:cb:92:e4:7f:f5:96:e1:e6:82:48:
d4:f8:de:49:19:c0:1d:35:e4:92:59:7b:d7:0b:df:
98:84:96:ad:83:81:f2:35:b8:64:2f:b0:2e:c1:df:
c0:6e:39:2e:71:e7:38:44:fa:ee:6f:5a:03:12:0d:
74:4f:e0:e9:60:d6:8d:08:4c:1b:91:f7:ee:ee:5b:
48:72:21:e1:e3:0b:6d:58:b6:cf:38:6c:61:87:0a:
12:99:07:fe:4a:84:67:4b:11:0e:a3:1a:5e:fe:ec:
0a:e0:ea:53:07:91:c2:4a:97:28:a4:d5:cd:7e:3d:
e8:c3:cf:b8:d4:bd:91:d0:83:7f:5e:31:14:85:a3:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DA:98:B6:21:6A:B7:AB:E1:77:27:E3:B4:41:D9:88:D6:7F:23:AB
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:85:b0:6c:e0:f5:5d:28:40:47:7d:e1:71:77:26:f5:1e:7b:
e3:54:2b:9f:89:70:39:9c:bc:8b:17:57:0e:45:de:b6:9c:f6:
c1:8b:b9:b7:79:25:6a:be:3e:29:d8:8b:2b:ab:0f:6c:08:cf:
24:e3:e3:b9:53:b0:bf:e5:6b:08:9c:ec:a2:f9:55:38:9a:a1:
65:5e:ea:e9:dd:a3:aa:19:31:54:38:dc:63:32:32:eb:69:41:
79:98:0d:f1:0e:7f:45:0a:70:25:fa:be:49:85:05:00:c3:20:
84:08:f1:04:4c:3f:39:51:ee:3b:18:38:2e:ec:ec:52:db:59:
8b:f8:d5:cf:5d:78:73:57:b0:ea:09:aa:9d:8d:f2:eb:6e:0f:
d5:24:c7:6d:4d:cb:b1:ff:c0:fd:68:30:94:d2:d6:74:fc:c7:
81:35:58:b0:a3:7c:f1:4a:53:d8:c1:18:67:35:9f:0c:d2:bc:
74:fc:94:e3:de:42:e8:39:a7:dd:bf:64:2b:73:45:22:0e:9d:
d0:5d:37:14:29:7f:16:a2:ac:0b:ed:54:f6:3d:d2:11:f2:0d:
95:be:3e:83:a1:ad:64:95:15:c7:a8:4d:4e:50:09:f2:ed:9e:
94:db:dd:a7:d2:3e:11:7e:7b:d9:ed:74:32:4b:b0:9f:cd:f1:
0f:d1:5a:50
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDsYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkZEMUVBRjExMC8GA1UEBRMoNDEyRDE5RjlBNEUxN0EwNEQwOUJBREM5MDJBQjBC
MDkwODI0RUFENzAeFw0yNTA5MTgwMDUyNTZaFw0yNTA5MjAwMDUyNTZaMBgxFjAU
BgNVBAMTDTY4Y2I1N2U4LWNlOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+/E5DawTe0uOFphpPCyz0T+cGC+sBrGUYk/zXu5X8ETxtawhUTB/zZi/c
svbPzF0rFExAjQEKHnAhBvauJdSbdt9bHaZw6XNHQ7JFT4S8CWLGGOclhXmcw3TN
btnn8RqBSecKevLkIvKz2q6fjw0lky7vPC6Qak+O1rQoy5Lkf/WW4eaCSNT43kkZ
wB015JJZe9cL35iElq2DgfI1uGQvsC7B38BuOS5x5zhE+u5vWgMSDXRP4Olg1o0I
TBuR9+7uW0hyIeHjC21Yts84bGGHChKZB/5KhGdLEQ6jGl7+7Arg6lMHkcJKlyik
1c1+PejDz7jUvZHQg39eMRSFo/aPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcNqY
tiFqt6vhdyfjtEHZiNZ/I6swHwYDVR0jBBgwFoAUQS0Z+aThegTQm63JAqsLCQgk
6tcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZGRDFFLzFBQUUyNjBDMzE2NTExRTVBRTY2NjA2N0Y4QUVBMjI4L1FTMFot
YVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FTMFotYVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkZEMUUvMUFBRTI2MEMzMTY1MTFFNUFFNjY2MDY3RjhB
RUEyMjgvUVMwWi1hVGhlZ1RRbTYzSkFxc0xDUWdrNnRjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkhbBs4PVdKEBHfeFxdyb1HnvjVCuf
iXA5nLyLF1cORd62nPbBi7m3eSVqvj4p2Isrqw9sCM8k4+O5U7C/5WsInOyi+VU4
mqFlXurp3aOqGTFUONxjMjLraUF5mA3xDn9FCnAl+r5JhQUAwyCECPEETD85Ue47
GDgu7OxS21mL+NXPXXhzV7DqCaqdjfLrbg/VJMdtTcux/8D9aDCU0tZ0/MeBNViw
o3zxSlPYwRhnNZ8M0rx0/JTj3kLoOafdv2Qrc0UiDp3QXTcUKX8WoqwL7VT2PdIR
8g2Vvj6Doa1klRXHqE1OUAny7Z6U292n0j4RfnvZ7XQyS7CfzfEP0VpQ
-----END CERTIFICATE-----
Generated at Thu Sep 18 10:48:35 2025 by rpki-client