Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier: wYPUiVAu0/khKKziOUPuOi0Bt2osZmKGMVBV7Y9Eaqg=
Subject key identifier: B9:15:16:02:FA:2D:41:BE:EA:FF:E9:75:97:64:5C:29:F1:66:C6:65
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer: /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial: F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number: F2
Signing time: Mon 11 Aug 2025 05:17:30 +0000
Manifest this update: Mon 11 Aug 2025 05:17:29 +0000
Manifest next update: Wed 13 Aug 2025 05:17:29 +0000
Files and hashes: 1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: SL7uLXMDUO5Eb3Qj2nCAXYSv+5xyRrgXTNOGsf6F6Ls=)
2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 243 (0xf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Validity
Not Before: Aug 11 05:17:29 2025 GMT
Not After : Aug 13 05:17:29 2025 GMT
Subject: CN=68997cea-8470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:8f:2c:f9:64:dc:1c:9f:a5:7f:39:6c:eb:
55:8c:5f:ea:0a:4e:66:eb:a7:28:a0:0a:39:cc:78:
b8:1f:b7:16:cc:fd:0f:dc:4c:d8:3d:63:b1:42:a4:
63:ca:0e:96:ab:51:4b:23:c9:3c:10:3a:58:b9:57:
a6:46:f0:9d:e9:38:cc:3d:7e:cb:44:7b:5f:f3:b8:
01:1f:4a:1f:ef:c4:81:04:4d:ae:49:51:cf:23:ba:
c2:5b:a3:2c:95:04:38:fb:95:cd:06:49:75:5e:30:
f3:03:75:1e:10:6a:54:92:0c:78:5f:0d:0d:07:0c:
da:f9:a6:d6:2a:6d:a0:bc:b1:35:c1:a6:72:a0:5f:
79:26:6b:b2:ac:79:33:a0:bb:8f:4f:fd:07:f4:da:
47:61:5d:c5:f2:91:f2:da:c9:2f:16:14:17:2c:c5:
fc:b4:47:a9:8e:58:2a:76:6c:0c:2f:50:63:ac:0b:
ef:a4:88:f8:7c:6e:1e:c7:93:03:35:79:00:1b:53:
af:78:f1:6a:40:8d:24:79:eb:de:6f:17:84:05:d8:
d0:79:ae:67:31:fb:e7:fc:aa:e3:c9:f2:09:c6:11:
09:af:5d:17:79:b0:a2:10:b8:ed:99:0c:8f:cb:72:
a1:9f:20:86:73:11:3f:4a:c2:34:9c:a5:f5:f9:17:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:15:16:02:FA:2D:41:BE:EA:FF:E9:75:97:64:5C:29:F1:66:C6:65
X509v3 Authority Key Identifier:
keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:3d:64:66:01:ac:6d:d1:0e:25:46:5e:96:72:88:a9:ac:27:
29:9e:5a:e6:86:63:c1:2e:6d:de:e8:02:0c:66:f5:73:55:e9:
fa:92:22:2f:d4:6f:02:50:7a:3e:fd:96:b6:67:b1:36:e5:3e:
df:5e:cc:67:60:55:57:93:df:9e:0c:38:0b:91:9b:c5:03:6e:
65:cf:13:8f:6e:59:51:65:da:c0:4b:2a:73:49:4a:e4:0b:f4:
8c:f2:cb:57:70:3b:68:87:53:7d:20:33:80:1a:d4:7f:56:51:
61:76:46:cd:94:03:ee:dc:69:37:05:9f:83:67:a3:8d:76:c5:
e7:df:ac:bc:9e:3c:84:db:48:af:d4:61:ff:c3:ae:19:ed:f7:
01:be:10:c3:12:92:f4:ab:44:93:1a:a8:3b:a2:40:84:be:d9:
e8:89:10:21:26:4c:46:e0:f9:e0:2c:0f:82:69:ab:4b:26:4a:
d4:1f:1d:40:9e:45:c8:d6:e0:9d:aa:64:5b:62:d5:fe:15:cf:
e8:5b:36:56:2d:87:bb:5a:6c:3e:6c:c2:aa:da:28:e5:62:b5:
da:53:71:79:e3:6c:01:d6:5c:d1:9c:1a:f5:9b:d4:ce:5d:04:
c8:46:ab:f7:77:01:ed:eb:ff:87:29:75:b8:ca:51:fa:63:a4:
bf:c8:3e:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgyODhBRjExMC8GA1UEBRMoOTQ5NjcxMjdGRjY0RUM3QzcyQTNBQkVBMTZDRTY5
QUVEQTdGNjgzNDAeFw0yNTA4MTEwNTE3MjlaFw0yNTA4MTMwNTE3MjlaMBgxFjAU
BgNVBAMTDTY4OTk3Y2VhLTg0NzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL+Y8s+WTcHJ+lfzls61WMX+oKTmbrpyigCjnMeLgftxbM/Q/cTNg9Y7FC
pGPKDparUUsjyTwQOli5V6ZG8J3pOMw9fstEe1/zuAEfSh/vxIEETa5JUc8jusJb
oyyVBDj7lc0GSXVeMPMDdR4QalSSDHhfDQ0HDNr5ptYqbaC8sTXBpnKgX3kma7Ks
eTOgu49P/Qf02kdhXcXykfLayS8WFBcsxfy0R6mOWCp2bAwvUGOsC++kiPh8bh7H
kwM1eQAbU6948WpAjSR5695vF4QF2NB5rmcx++f8quPJ8gnGEQmvXRd5sKIQuO2Z
DI/LcqGfIIZzET9KwjScpfX5Fw7dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuRUW
AvotQb7q/+l1l2RcKfFmxmUwHwYDVR0jBBgwFoAUlJZxJ/9k7Hxyo6vqFs5prtp/
aDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4Mjg4LzQ2OTM3NjFFQkVENzExRUY4MkE3QTM0NTc2MkU5NTFBL2xKWnhK
XzlrN0h4eW82dnFGczVwcnRwX2FEUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xKWnhKXzlrN0h4eW82dnFGczVwcnRwX2FEUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjgyODgvNDY5Mzc2MUVCRUQ3MTFFRjgyQTdBMzQ1NzYy
RTk1MUEvbEpaeEpfOWs3SHh5bzZ2cUZzNXBydHBfYURRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADPWRmAaxt0Q4lRl6WcoiprCcpnlrm
hmPBLm3e6AIMZvVzVen6kiIv1G8CUHo+/Za2Z7E25T7fXsxnYFVXk9+eDDgLkZvF
A25lzxOPbllRZdrASypzSUrkC/SM8stXcDtoh1N9IDOAGtR/VlFhdkbNlAPu3Gk3
BZ+DZ6ONdsXn36y8njyE20iv1GH/w64Z7fcBvhDDEpL0q0STGqg7okCEvtnoiRAh
JkxG4PngLA+CaatLJkrUHx1AnkXI1uCdqmRbYtX+Fc/oWzZWLYe7Wmw+bMKq2ijl
YrXaU3F542wB1lzRnBr1m9TOXQTIRqv3dwHt6/+HKXW4ylH6Y6S/yD4o
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:46:57 2025 by rpki-client