Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File: F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier: Hk0h4zaYWnmFJoa2BETz1Mg4P1VsoSDEBew3jysLiSg=
Subject key identifier: 67:BA:54:CF:A4:01:F2:B6:7E:3C:F9:A7:A0:5B:5E:5E:3D:7D:51:78
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer: /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial: 0492
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number: 048B
Signing time: Tue 12 Aug 2025 03:04:03 +0000
Manifest this update: Tue 12 Aug 2025 03:04:02 +0000
Manifest next update: Thu 14 Aug 2025 03:04:02 +0000
Files and hashes: 1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: PrknW4gubZAQGnWZidzek6uAGrUlNimLno/WxpR/7mw=)
2: B6AEA76A386E11EFB22C58AC762E951A.roa (hash: 5SrWot373DcY7xlbNxOXtSFJ3m3pxtYBX1fR6afzMgw=)
3: 92CDFA08386E11EFADDF70A8762E951A.roa (hash: GCRLgKm5X2GHGAFRzdRTrZrvQldSY5LhNqpgJgS8KK8=)
4: E775739C386E11EF9B6A87AC762E951A.roa (hash: 9EDzyq3NU8VbeJb4xTqQLA3QihMtcHzWeBDxSXelft0=)
5: 23856708386E11EF995BECA7762E951A.roa (hash: FIO2lhhCB7uaoW8hHqlVZE9HJQhcLZ9RTHnddvwwt7Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 03:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361153AAF, serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Validity
Not Before: Aug 12 03:04:02 2025 GMT
Not After : Aug 14 03:04:02 2025 GMT
Subject: CN=689aaf23-8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:b7:44:9b:bb:66:36:9d:49:24:51:3b:e9:
76:b3:39:0a:91:14:a2:5b:c3:42:54:e3:e8:2c:14:
5c:70:75:fd:4a:cb:76:f3:b6:ea:14:3f:e1:2d:09:
22:4d:33:37:b9:35:37:4a:e7:44:0f:27:1a:eb:c6:
93:17:d1:fe:c4:67:93:ca:bb:02:96:07:c9:cb:dd:
82:12:11:e5:b0:9f:ca:85:e5:b8:7f:b5:ba:a2:6c:
e1:1e:00:71:f0:a9:7d:bd:eb:cc:12:6e:b4:55:5b:
14:46:e6:dd:10:89:ac:9a:3e:5b:3e:9c:1a:6a:12:
23:87:85:1f:e0:6c:9a:fb:f1:ad:ee:44:5a:05:48:
2a:e7:7b:5e:7f:25:79:84:cf:42:a8:c7:7b:ad:b9:
43:cd:14:97:a2:00:7e:54:9c:ae:8a:e0:e8:1b:de:
f2:71:2d:92:ab:ce:3a:ed:2f:d2:5a:0a:94:78:49:
1e:0b:f1:d5:4e:b7:60:27:b3:32:6a:ac:a7:73:fa:
55:fa:ec:b6:ad:12:c9:35:df:c9:d9:50:f5:9d:90:
f7:86:5d:b8:a9:ef:63:bd:44:b4:77:7f:d1:77:aa:
62:87:d6:8b:0d:91:31:84:6d:d0:6d:70:87:e5:49:
b5:e1:69:89:66:10:da:fd:ef:73:f0:61:9f:f7:68:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BA:54:CF:A4:01:F2:B6:7E:3C:F9:A7:A0:5B:5E:5E:3D:7D:51:78
X509v3 Authority Key Identifier:
keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:2e:d9:df:3e:12:f1:8e:32:84:0a:10:1d:a8:aa:36:74:69:
13:21:10:78:65:35:57:8b:cf:07:b7:8f:54:80:1a:88:2f:e5:
08:75:71:9e:9e:e2:67:78:16:d5:42:b3:b6:77:c8:00:c4:cb:
33:c2:96:6e:98:8a:07:9c:39:63:5b:7c:6c:9a:6d:a7:a6:11:
9d:fd:4d:43:ad:80:e6:c7:de:77:2e:83:16:bf:d5:43:f6:1d:
eb:c1:56:4d:b7:38:ec:72:5e:17:ef:0b:86:1e:cc:be:0a:4c:
48:42:be:53:46:1b:fb:40:80:73:1c:64:a6:c5:dd:5c:62:17:
95:f6:88:94:82:bb:20:51:7e:c0:71:01:bc:3b:fb:4a:37:ba:
9d:55:c6:f3:54:08:1a:60:93:76:0c:fc:32:6c:d6:17:9b:47:
94:3c:ff:ab:72:a5:2f:a4:a2:a8:9c:a9:f9:ac:a4:d8:00:f2:
7a:cc:ed:cd:f0:7d:61:ee:e3:fa:3a:6e:1b:83:b4:57:ab:6b:
05:91:99:85:d8:ff:75:f0:d0:28:64:fd:91:97:7b:60:3e:82:
f2:44:bd:6e:1e:38:7e:9e:96:ad:2b:15:81:41:56:55:90:6a:
22:fd:ca:c3:9e:a7:ba:d0:9b:7e:eb:b3:e5:ea:8e:bb:0f:ff:
b9:19:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:45:39 2025 by rpki-client