Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File: iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier: 7R8syV1dJxfAmWFbOj7uL3if3Ev3YW87m97yXX4omwE=
Subject key identifier: D5:E2:D6:C7:DA:E1:49:1D:B1:DB:8B:0E:42:21:E7:63:61:78:C4:18
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer: /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial: 0E89
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number: 0E7D
Signing time: Mon 04 Aug 2025 00:58:01 +0000
Manifest this update: Mon 04 Aug 2025 00:58:00 +0000
Manifest next update: Wed 06 Aug 2025 00:58:00 +0000
Files and hashes: 1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: ZOAzgosttcJeXtWdmuuVHeJN+5QqPJAsnPh0oa4BD28=)
2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3721 (0xe89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620ACFAF, serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Validity
Not Before: Aug 4 00:58:00 2025 GMT
Not After : Aug 6 00:58:00 2025 GMT
Subject: CN=68900598-9cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:16:c9:29:71:5e:de:bd:e4:c6:eb:40:e9:
a6:f9:2f:83:24:01:60:8e:3b:90:48:54:12:bc:2a:
3d:39:f1:06:a7:fc:6f:b6:b4:aa:be:dc:f1:cc:c9:
a4:1c:c2:22:87:cb:83:7b:fe:42:06:7a:6a:ec:db:
30:7e:c8:af:bb:c3:87:29:ed:37:c0:1f:73:6a:d8:
01:4b:5f:cb:59:cd:22:09:74:cc:b9:93:ba:2c:85:
7d:5b:31:6e:87:05:3b:08:24:b3:67:25:86:42:7e:
f1:cf:a4:b0:60:cd:6f:55:ee:3f:86:06:ec:32:e3:
34:aa:e1:c3:79:c8:6d:88:77:39:7a:8a:8f:66:08:
ae:0c:eb:78:17:a7:e1:0b:77:c3:19:73:ae:72:64:
7c:3b:13:5e:cc:f7:0a:a5:ca:79:3f:2f:1b:00:fe:
94:d4:4b:cd:da:02:4a:06:98:da:00:49:af:26:d7:
73:2d:98:f5:09:db:eb:03:73:7f:4b:1e:c1:1b:f6:
db:83:6e:b8:e4:1f:1b:84:07:26:76:93:e9:13:7a:
ef:ef:c7:3c:f8:6e:a5:6a:d1:25:05:02:e9:d3:d7:
3f:fb:6f:47:2b:47:10:a7:a0:82:14:e3:01:cd:a3:
15:d7:6b:80:65:e7:97:7a:7d:5f:57:42:d9:9b:cc:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:D6:C7:DA:E1:49:1D:B1:DB:8B:0E:42:21:E7:63:61:78:C4:18
X509v3 Authority Key Identifier:
keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:fd:9a:31:6f:6e:3a:22:58:06:9b:cb:de:ed:52:04:76:31:
89:b1:a9:22:66:10:8d:cd:cb:95:f1:68:6c:38:b9:01:6f:ce:
54:62:3a:eb:16:d5:6f:e1:49:46:82:81:c6:13:c5:82:7f:c1:
f8:7f:db:4a:0c:8b:10:cf:1e:17:1b:9f:ea:1f:84:0a:6d:17:
ad:f0:3f:64:4d:18:d9:03:cc:a8:63:46:12:5e:72:44:5d:7e:
91:8a:ff:c8:18:fb:24:df:20:f8:87:83:08:b2:28:d9:e6:17:
07:f2:b6:bb:c6:6a:5d:b7:f6:21:41:78:f1:15:11:0a:a7:2b:
b2:54:6f:d1:f5:92:55:50:c5:17:40:4e:47:eb:29:33:b4:62:
52:8d:29:47:5a:c5:2b:70:c7:30:fa:f2:97:b6:eb:cd:0e:fa:
05:50:67:aa:17:70:64:c9:23:8a:52:1a:6a:4d:08:75:bc:57:
2a:a5:5e:a1:f5:b7:9f:73:db:b1:22:38:cd:4a:ce:77:fa:c3:
3f:5b:52:74:06:b1:c1:26:ed:fa:d4:32:58:dc:2f:de:2d:85:
b2:d0:c4:e0:b2:37:a3:9f:55:37:cc:ec:85:7f:98:77:31:73:
dc:89:89:71:b8:f9:b7:04:b4:25:9d:69:62:45:d3:a5:06:f3:
13:08:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:26 2025 by rpki-client