Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: 8jimAnkbHt8JfCuB3eCyT0njXCKRCnLCK2r5JW9JB3U=
Subject key identifier: F5:28:BC:26:3A:D4:C5:93:5F:FB:EB:DF:8C:F9:0C:29:81:0E:E5:96
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: 45
Signing time: Sat 09 Aug 2025 05:34:10 +0000
Manifest this update: Sat 09 Aug 2025 05:34:09 +0000
Manifest next update: Mon 11 Aug 2025 05:34:09 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: n2rC8PHHanAlOND7nfJ2pGxW/O4uX5Udava3ULOfTQ4=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Aug 9 05:34:09 2025 GMT
Not After : Aug 11 05:34:09 2025 GMT
Subject: CN=6896ddd2-b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:bf:77:59:60:d0:25:6f:90:ec:35:62:42:
69:3f:9e:11:27:ff:e7:fb:ce:19:8a:dd:2d:89:0c:
4a:34:d5:80:4e:3d:f6:0c:70:ef:d5:c1:c4:0e:68:
bd:c0:03:df:fc:83:68:b0:d2:4f:b0:11:23:ba:ab:
31:98:fd:6d:1b:33:57:50:6f:73:29:d7:4d:e4:cd:
91:ff:5c:9e:12:44:86:98:d6:44:ae:d9:34:57:9e:
76:42:ca:89:00:12:60:26:b9:24:bc:52:0e:30:6b:
96:b1:07:07:07:00:81:17:3f:9a:02:fa:b4:e9:52:
81:0b:ba:82:20:f6:fe:02:2a:0a:11:dd:d9:a9:47:
7c:4e:c3:88:1c:c0:88:b4:ad:e7:93:0c:a3:3e:a7:
99:9c:f2:88:08:ac:55:a6:eb:5f:db:d7:09:4a:12:
64:79:b9:e0:87:a6:60:e3:ac:81:6c:c4:b3:ec:42:
e2:56:c2:5d:01:1a:33:43:5a:8d:4b:b6:19:2f:ce:
d9:9b:d2:29:64:28:f1:3f:a4:9b:af:3b:ab:ce:44:
f9:9d:0b:1a:cd:69:ac:05:86:8f:da:32:d0:cd:46:
1e:82:d1:af:2f:dd:be:a6:bc:99:7f:f7:23:90:b3:
ab:8f:f0:d7:1a:9f:7e:b3:be:46:c5:23:90:d3:9b:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:28:BC:26:3A:D4:C5:93:5F:FB:EB:DF:8C:F9:0C:29:81:0E:E5:96
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:d4:ce:96:75:ae:04:8a:04:db:02:6c:cb:e9:5c:6e:25:34:
3f:02:38:4d:47:71:e9:8e:a8:82:1f:ba:78:f3:4a:3a:5f:d8:
09:c3:71:b4:87:46:44:28:db:5e:00:47:4f:af:67:be:f8:90:
f9:24:9c:85:d5:ef:55:d4:83:7d:ff:2a:d7:c1:e6:d4:7d:9c:
f2:b4:ec:bb:59:bf:2c:4b:e6:e0:8a:0d:39:a1:c9:c2:47:3d:
3e:49:34:8d:c6:4c:9b:f5:e4:95:a2:18:ce:b9:12:99:ff:f5:
1d:ed:7d:1a:50:e6:72:d1:c7:f3:36:01:8b:9d:3b:f0:4d:6f:
4b:81:43:e1:fd:77:84:a4:b2:cf:02:02:ed:fd:5e:72:8a:15:
4a:4d:5e:3a:e2:7c:1b:5e:69:e1:82:74:a1:92:27:f4:7e:12:
9c:75:76:21:a7:84:60:7d:87:02:56:7d:15:33:fb:86:fa:da:
ac:fd:fd:ec:74:e5:3b:6c:ff:78:3d:ba:41:ac:ba:d5:01:02:
46:18:a3:55:42:02:9d:46:00:f8:41:6e:37:2f:f9:72:81:96:
90:be:e3:17:b2:cd:fe:44:14:cb:49:5d:4a:35:43:2c:37:f4:
85:f5:bb:dd:6b:8f:1b:2d:92:13:af:6c:4a:77:69:d6:fb:a7:
1e:27:38:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:20 2025 by rpki-client