Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
File: nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft (raw, json)
Hash identifier: 3Z+2ms2dt15QCX5x0QOWVCKmVN59nwonGjMQeL4ux9I=
Subject key identifier: 22:68:94:C7:1B:1C:B1:72:68:C3:91:DA:85:D9:10:C0:D9:48:DB:04
Authority key identifier: 9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
Certificate issuer: /CN=F3623AE4AF/serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Certificate serial: FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
Manifest number: FB
Signing time: Mon 04 Aug 2025 05:08:44 +0000
Manifest this update: Mon 04 Aug 2025 05:08:44 +0000
Manifest next update: Wed 06 Aug 2025 05:08:44 +0000
Files and hashes: 1: nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl (hash: ptylgt1WLViojoqn8jJTOEY3cD9dsuSs/uc1CkWk3Gk=)
2: 0CBAC432B27111EF99B95144762E951A.roa (hash: gmMvunoj5KNwjAHQwXEB9NQDDcCeTBCj9SxbM2LLQYk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 252 (0xfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3623AE4AF, serialNumber=9EAC083DFCCD295D56160555B3EABE6D15770B20
Validity
Not Before: Aug 4 05:08:44 2025 GMT
Not After : Aug 6 05:08:44 2025 GMT
Subject: CN=6890405c-706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:7c:12:f0:81:59:bf:3f:ab:65:46:bd:49:
b4:f4:2d:33:f1:73:e5:91:43:4a:9a:ce:06:6d:33:
33:5d:1f:bb:95:b2:e4:6f:97:a9:3c:9c:19:60:93:
25:11:7f:d6:31:ea:fa:a0:c4:f1:a5:fc:0e:c6:fc:
56:8b:4c:de:78:fc:f6:e3:2e:00:ef:a6:9e:c9:23:
0c:50:67:7f:6d:52:dd:5c:7c:dd:6a:03:79:9b:78:
6f:06:f7:f6:07:df:1c:31:89:f4:7a:26:f3:ea:81:
b1:a7:9a:3e:f2:7d:e6:4c:75:e9:29:2d:2b:ca:d3:
8a:83:78:c1:a9:f8:ae:b0:b7:35:ef:e2:72:df:00:
64:a0:9b:f8:2e:b5:09:7c:8f:78:c9:b4:5e:ad:77:
6e:27:9d:d4:09:ca:15:65:09:3e:70:80:f6:a4:b3:
1d:39:53:3e:40:3b:ae:23:94:be:fc:4c:73:8f:c8:
ea:9b:f0:27:db:28:a4:52:0b:03:14:36:f3:46:17:
4e:38:10:53:11:b6:96:1c:17:ef:64:85:11:ed:19:
d0:e0:fc:67:90:72:93:e6:25:3f:f1:10:25:2f:77:
c4:2f:7a:29:4f:64:b1:f0:7f:09:f2:85:05:1c:7d:
d9:26:a5:11:1e:a6:0f:7d:3f:78:cb:cc:fd:69:b6:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:68:94:C7:1B:1C:B1:72:68:C3:91:DA:85:D9:10:C0:D9:48:DB:04
X509v3 Authority Key Identifier:
keyid:9E:AC:08:3D:FC:CD:29:5D:56:16:05:55:B3:EA:BE:6D:15:77:0B:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nqwIPfzNKV1WFgVVs-q-bRV3CyA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/C4005E32B27011EF82361D42762E951A/nqwIPfzNKV1WFgVVs-q-bRV3CyA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:48:bb:06:e5:fc:3d:f2:d8:ac:fa:d4:61:0d:30:4b:ed:38:
7c:35:07:74:c7:de:e0:44:b0:71:4d:3b:93:bb:89:72:ed:0f:
18:af:2c:50:91:82:e7:d1:83:bf:6e:34:bf:5f:d4:85:f7:90:
42:32:65:e7:c7:3f:63:94:55:0e:2a:4f:9c:06:3a:93:de:17:
24:55:89:e7:43:73:8e:fe:02:aa:9d:1f:04:e4:87:73:50:c8:
3b:7e:a2:f8:17:81:e7:d9:29:18:39:1b:6c:75:ef:fe:eb:64:
e6:d4:74:fa:60:07:5e:53:80:a8:21:77:61:52:c4:6a:39:7c:
9c:36:53:68:b7:66:74:21:19:6c:bd:17:96:46:b2:a1:6e:81:
57:26:c0:51:0e:8b:42:4a:34:c1:09:6f:6c:74:1d:4c:87:80:
35:bf:17:b1:63:90:48:80:04:40:58:da:97:18:c4:73:e6:79:
9a:8f:49:95:07:dd:96:60:fa:5e:4b:6b:e4:36:10:10:24:56:
ad:e5:8c:b3:89:96:bd:bb:f9:e2:e2:d3:48:55:58:e3:74:bf:
bb:a1:fd:b7:d6:5c:bc:50:cf:75:34:e4:cc:5c:aa:1e:dd:74:
29:f7:d2:98:04:1c:a1:8d:a9:ab:83:78:8a:d3:2d:72:4e:52:
5a:f5:06:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:47 2025 by rpki-client