Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier: nLvg1FZu9BVgh5IL4KWjCV2hldp1zNAfYHmVKbaqJ/s=
Subject key identifier: 42:BE:E1:E9:A2:05:7B:2B:D2:3A:F3:0D:77:D2:85:0D:EC:87:4D:2A
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 042C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number: 042B
Signing time: Sat 09 Aug 2025 03:24:37 +0000
Manifest this update: Sat 09 Aug 2025 03:24:36 +0000
Manifest next update: Mon 11 Aug 2025 03:24:36 +0000
Files and hashes: 1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: w4J9ubTeDUrZDtFCzrvh2G9c+ISyrWBkqGzUSsPtkC8=)
2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1068 (0x42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Aug 9 03:24:36 2025 GMT
Not After : Aug 11 03:24:36 2025 GMT
Subject: CN=6896bf75-50fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:60:bd:59:88:dd:bd:2f:df:e8:e5:91:c6:48:
69:0e:3b:45:60:5f:63:34:6a:8c:ad:ea:08:d8:e4:
e9:23:5c:d9:0a:b6:34:5a:75:f3:30:f7:97:d9:43:
0a:ce:47:fe:25:89:dc:87:d2:c1:c2:27:4d:57:ca:
25:10:87:00:35:5b:08:46:dc:7a:3d:88:c8:45:46:
7d:ff:ca:39:20:13:e7:59:7e:ae:00:ac:5a:56:24:
f0:e7:89:c3:34:6a:e5:da:34:59:92:af:93:68:cf:
2d:c2:9e:07:17:56:5f:31:30:c9:f6:3b:48:ec:84:
0a:c6:91:4c:75:49:7a:1b:bb:08:c8:da:99:a5:cf:
6c:f5:8c:07:dc:40:26:05:cd:5c:d4:1e:b2:f0:aa:
3d:03:7a:50:79:17:d0:0d:58:89:4c:ef:a0:3c:b6:
d0:1f:7b:7c:8b:28:c2:2a:b7:00:a8:62:61:0e:17:
41:6d:86:c4:ce:40:87:ff:4f:d2:03:af:f9:79:1f:
98:62:34:22:ba:10:2e:15:3a:54:07:a6:41:ab:b8:
b4:8a:e3:62:b6:78:b5:88:20:fd:4f:88:a1:7d:66:
1a:63:31:9b:e5:1c:58:9c:81:56:3b:1c:db:ab:cf:
5d:bf:bc:a7:5c:90:60:43:e4:12:0f:a8:5d:d5:a3:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:E1:E9:A2:05:7B:2B:D2:3A:F3:0D:77:D2:85:0D:EC:87:4D:2A
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d5:ce:6f:26:28:69:50:43:c5:b6:11:36:e4:db:8b:c1:fa:
3d:a9:5f:fe:96:00:44:a3:54:ab:4a:86:8d:d4:81:a0:34:0d:
6e:98:5e:10:53:7f:c1:ef:4e:21:ea:9a:e0:f6:88:6f:11:46:
2f:a4:1f:df:c0:96:c5:34:78:db:ef:b7:e4:37:53:54:15:7b:
63:40:d7:c0:46:7d:c6:5a:3a:4c:be:ba:fc:4a:3f:dd:fa:be:
8e:80:34:6a:9b:76:43:4d:13:4b:65:2d:3f:8a:66:d0:1e:04:
65:8e:cc:33:ff:57:f0:d7:a7:86:0b:94:b6:0a:2a:e1:c5:1e:
71:5e:23:6e:55:b9:bd:05:e8:a6:52:72:c6:18:5f:d8:09:8c:
35:b1:54:96:a3:34:5c:c4:5a:af:bf:89:3f:68:29:46:eb:38:
2b:54:ab:61:76:ab:97:fe:6c:29:c8:4e:5b:26:7e:71:0a:07:
31:4f:bf:8a:42:5b:45:5d:0c:fc:0e:cf:11:1d:f2:8a:67:2f:
a9:ac:93:57:e5:bd:82:4d:73:aa:49:f7:87:8e:2b:a2:43:d8:
a0:0b:fa:95:3f:14:f2:9c:da:a3:76:65:64:e6:0e:b3:fc:82:
31:ab:cf:98:4f:d9:75:74:cc:ce:60:0a:e1:0c:33:0f:0a:de:
f5:74:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:17 2025 by rpki-client