Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: 88p7qRocp0KmRrygo/nyRs8rHQOJ0uob4w9fZSIXlM8=
Subject key identifier: 9A:99:6F:6C:4C:91:F7:79:30:E7:F6:45:EF:75:4B:58:97:AC:7D:BD
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: D1
Signing time: Tue 05 Aug 2025 05:12:39 +0000
Manifest this update: Tue 05 Aug 2025 05:12:38 +0000
Manifest next update: Thu 07 Aug 2025 05:12:38 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: Z9PCsynD6GWX8szUbHwCUtmA3LyaR7+Q4EjWhrECUcM=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 05:12:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Aug 5 05:12:38 2025 GMT
Not After : Aug 7 05:12:38 2025 GMT
Subject: CN=689192c7-0adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:c0:ba:8f:9c:2c:f2:65:cc:1e:cc:99:c0:
b1:92:f9:d4:e6:b9:8a:81:83:ae:41:09:e9:ab:83:
ef:71:21:5f:a6:d6:5b:12:97:53:92:e7:e1:9c:cb:
d4:5d:69:d7:ae:eb:45:f9:6e:4b:24:ae:4a:b2:ac:
56:2e:11:4d:69:82:cf:45:3e:2a:83:86:af:40:e3:
8b:df:15:d9:93:62:e2:41:3d:bb:ad:f8:b9:98:fe:
89:f0:09:e8:ad:1a:10:f3:3d:75:0a:4f:ec:6d:47:
e1:2a:db:08:c3:56:b7:94:fe:67:f7:7a:5f:a8:17:
2d:96:bf:80:f5:a4:fe:02:e1:ac:15:4b:47:56:e8:
47:2e:f7:7c:69:90:b0:f0:ab:57:b2:62:28:57:46:
5e:fa:1c:68:60:3b:8e:8d:11:0f:43:d7:96:3b:c7:
0c:5b:47:c1:94:49:14:12:3e:22:71:37:9b:ca:e5:
69:f6:35:c2:25:0b:56:fe:50:71:77:e9:da:ec:e0:
83:59:06:5c:14:c7:6c:77:b0:1f:1e:35:14:6a:93:
27:2c:42:78:a7:8a:b1:07:52:0a:8f:b9:50:12:13:
f9:ba:c2:b1:ed:f6:f7:32:cc:23:dd:7e:83:ec:09:
af:46:67:e0:ad:0d:ea:03:99:58:5b:13:24:24:fe:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:99:6F:6C:4C:91:F7:79:30:E7:F6:45:EF:75:4B:58:97:AC:7D:BD
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:d0:93:ec:a2:93:d4:3c:0f:e8:45:ce:eb:e5:b8:e3:5a:78:
75:04:4b:b0:b9:56:d8:b2:3f:cb:d3:c6:17:fe:35:97:d7:cf:
8d:12:be:9b:51:0d:0b:3c:81:5c:cf:2a:b0:9c:ea:ed:8c:44:
b4:ce:16:0e:e5:c4:be:c8:e1:da:2c:b9:33:56:91:b9:32:8c:
c0:bc:15:82:d3:94:df:ff:35:50:ca:1b:cf:b2:6e:66:02:13:
2d:04:7e:ef:e3:78:c1:c5:68:1d:60:40:59:11:cc:a1:57:cc:
e2:82:af:96:ab:87:b3:ea:19:86:45:e1:ba:8a:80:06:24:24:
5c:ff:62:32:f2:f2:55:02:1e:97:6b:55:19:3e:02:7c:ad:54:
fc:f8:c3:c3:0e:5e:35:41:5a:1a:10:5f:e1:ed:fc:e7:78:c3:
76:34:38:11:48:1b:5d:09:d3:41:8c:91:4f:c2:40:76:34:d4:
dc:04:04:05:ef:e7:14:b9:d9:01:31:a0:34:a0:be:f9:90:1c:
93:89:a1:d1:d1:29:e7:c3:e7:88:7b:ea:ff:c6:1b:0f:de:42:
6f:8c:0d:59:29:3e:6e:93:92:64:20:ce:16:6e:83:ec:a1:58:
2f:aa:23:53:48:e7:6b:97:67:aa:61:37:62:05:22:1c:7a:93:
65:bf:2b:07
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMzJBRjExMC8GA1UEBRMoOTJDQTJCNDFFRUMzRTAxQTE5Mzg5RTIyMjA4OEFD
M0ZDM0ExNDhFRDAeFw0yNTA4MDUwNTEyMzhaFw0yNTA4MDcwNTEyMzhaMBgxFjAU
BgNVBAMTDTY4OTE5MmM3LTBhZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCh4cC6j5ws8mXMHsyZwLGS+dTmuYqBg65BCemrg+9xIV+m1lsSl1OS5+Gc
y9Rdadeu60X5bkskrkqyrFYuEU1pgs9FPiqDhq9A44vfFdmTYuJBPbut+LmY/onw
CeitGhDzPXUKT+xtR+Eq2wjDVreU/mf3el+oFy2Wv4D1pP4C4awVS0dW6Ecu93xp
kLDwq1eyYihXRl76HGhgO46NEQ9D15Y7xwxbR8GUSRQSPiJxN5vK5Wn2NcIlC1b+
UHF36drs4INZBlwUx2x3sB8eNRRqkycsQninirEHUgqPuVASE/m6wrHt9vcyzCPd
foPsCa9GZ+CtDeoDmVhbEyQk/mnNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmplv
bEyR93kw5/ZF73VLWJesfb0wHwYDVR0jBBgwFoAUksorQe7D4BoZOJ4iIIisP8Oh
SO0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTMyLzhCRkJEOTUyRDFBQzExRUZBNUQxMTY1NTc2MkU5NTFBL2tzb3JR
ZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzb3JRZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG0JPsopPUPA/oRc7r5bjjWnh1BEuw
uVbYsj/L08YX/jWX18+NEr6bUQ0LPIFczyqwnOrtjES0zhYO5cS+yOHaLLkzVpG5
MozAvBWC05Tf/zVQyhvPsm5mAhMtBH7v43jBxWgdYEBZEcyhV8zigq+Wq4ez6hmG
ReG6ioAGJCRc/2Iy8vJVAh6Xa1UZPgJ8rVT8+MPDDl41QVoaEF/h7fzneMN2NDgR
SBtdCdNBjJFPwkB2NNTcBAQF7+cUudkBMaA0oL75kByTiaHR0Snnw+eIe+r/xhsP
3kJvjA1ZKT5uk5JkIM4WboPsoVgvqiNTSOdrl2eqYTdiBSIcepNlvysH
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:23:21 2025 by rpki-client