
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: A0UqAgmk19r8TEEU0I6Kpkwxt5O4uFg9774OANPuCnw=
Subject key identifier: 56:8D:31:78:07:A4:E2:79:67:F9:8E:13:48:26:B6:7A:B3:19:88:C5
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 04B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 04B0
Signing time: Sun 10 Aug 2025 03:03:04 +0000
Manifest this update: Sun 10 Aug 2025 03:03:03 +0000
Manifest next update: Tue 12 Aug 2025 03:03:03 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: iE4N+vSjj28mBL2HlwmntR8GvHJosb6nYUgMarD71kk=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1201 (0x4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Aug 10 03:03:03 2025 GMT
Not After : Aug 12 03:03:03 2025 GMT
Subject: CN=68980be8-e683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:16:80:5f:7d:2c:05:f9:80:08:a0:ad:15:
48:5d:68:c3:c3:49:e9:21:48:b9:96:e0:ef:38:d1:
d4:fe:cf:38:e2:f0:62:50:e5:9a:ad:81:a2:cd:87:
f3:48:eb:e9:f6:98:a0:e6:79:f8:82:94:0d:a7:8e:
2e:b5:10:72:8b:9d:09:b2:33:32:50:6f:80:8e:a3:
08:14:d7:71:e3:2e:88:b0:4a:bb:41:3e:98:62:13:
03:a4:ea:97:8b:76:73:8b:6a:10:57:75:cf:bf:1a:
e6:1e:f6:88:7d:3a:5c:33:01:0d:de:49:24:88:3c:
ef:ff:f5:3e:70:1b:57:2f:f1:b8:f5:aa:9b:75:4c:
b6:6f:61:81:39:e9:5f:ea:bd:65:d7:51:82:6a:77:
77:5c:a2:ad:dc:28:db:c9:20:66:c9:c8:fc:9d:fb:
fa:48:99:42:93:8d:be:43:7b:4e:88:cb:0d:3a:23:
aa:30:bd:4c:b4:7c:b3:7b:78:c3:87:03:7a:b9:9d:
08:27:32:76:e3:5c:98:2b:26:6e:dd:0a:f2:fc:b3:
5d:8d:f0:da:02:f3:18:7c:54:a4:d8:03:4c:f0:d7:
6d:f5:c1:5e:f6:23:e2:a4:38:25:04:2b:c2:59:38:
28:11:fa:0a:e5:04:cc:7e:35:f3:99:4c:c5:17:76:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:31:78:07:A4:E2:79:67:F9:8E:13:48:26:B6:7A:B3:19:88:C5
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d7:42:86:37:70:a6:9e:80:3a:72:d2:e1:87:7e:c1:62:3c:
cc:99:ca:82:09:47:1d:22:3e:3f:07:28:fc:bd:e9:28:1b:ba:
f5:9a:42:b0:9d:8c:90:f5:06:29:8d:17:67:c8:dc:ed:88:e5:
69:d0:53:a5:a5:92:9f:30:4c:d7:2b:1c:27:3a:50:0a:70:75:
77:0a:bf:a9:37:d3:19:ff:07:ef:0d:51:40:00:c4:92:2e:b1:
bf:66:30:d4:63:b1:0e:10:a9:a7:34:67:74:e5:bd:1c:1f:5d:
22:c7:7e:93:e1:fa:03:52:43:d1:61:2e:2a:5b:5f:77:09:c0:
16:58:e7:ee:1e:2f:52:e3:7e:86:78:93:65:34:58:89:70:a0:
62:7c:70:ae:3e:6c:18:b9:bd:32:6f:64:33:24:12:8f:eb:b4:
25:e9:0b:74:2d:cd:73:40:54:d3:d6:1c:2f:4b:b6:db:22:1f:
c2:ad:f3:62:84:ec:16:cb:b7:e3:6a:ef:35:08:db:bd:05:cf:
a5:53:21:f4:cb:df:dd:42:44:d9:e0:df:ee:b7:c1:ec:9b:cd:
ea:64:c8:da:6b:c5:1c:4c:48:d8:95:0b:79:c7:2d:59:c5:38:
c3:58:9a:b2:c5:74:fa:dd:6e:3a:18:1e:e4:50:43:1e:cc:d6:
48:80:d5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:00 2025 by rpki-client