Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File: 4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier: 4+3OTGzFG19Pb0zlF+3qbWe3rXLbfUduR693zRF5cq0=
Subject key identifier: D2:D3:30:08:C3:B3:0F:5D:C2:78:69:6E:6E:36:BC:B6:B4:E0:31:8F
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer: /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial: 2A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number: 29
Signing time: Sun 10 Aug 2025 05:35:12 +0000
Manifest this update: Sun 10 Aug 2025 05:35:11 +0000
Manifest next update: Tue 12 Aug 2025 05:35:11 +0000
Files and hashes: 1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: 6nTWmGQd4f9OK5CQwh7ar2zZJby2GGux9yQ7vU+LEQg=)
2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42 (0x2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Validity
Not Before: Aug 10 05:35:11 2025 GMT
Not After : Aug 12 05:35:11 2025 GMT
Subject: CN=68982f90-01a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:23:f5:24:a0:b3:96:16:ec:3f:35:2f:05:
a4:0e:19:9b:20:cd:86:4e:20:06:5b:56:04:86:0d:
a9:32:84:c0:d5:7d:b3:58:be:b2:12:81:8a:f6:b0:
ac:54:4c:22:ae:56:4f:24:56:bf:e1:c1:85:54:94:
68:c0:d8:4e:dd:a0:14:db:ae:ac:26:38:29:79:cd:
00:f9:4d:1a:15:a2:e1:3a:de:f0:66:f7:26:09:e2:
14:67:84:0c:e7:22:0d:38:de:e0:5f:ad:02:51:d0:
02:0c:ec:d5:44:c7:58:af:8d:d7:f9:34:52:84:f9:
29:00:14:b5:fd:ab:b1:2d:24:4b:5d:d8:bd:d9:7f:
95:16:53:87:7e:05:0f:ea:9f:6a:52:44:ea:72:96:
34:1e:59:21:9e:f5:c6:b7:01:a9:5f:ea:a7:97:c5:
15:ba:f7:4d:07:fc:69:8c:90:c5:56:be:d0:d0:62:
18:5f:41:21:51:bd:46:d8:79:fe:05:16:f4:ec:d8:
fb:ac:99:c7:f1:27:04:b7:84:bb:cf:b5:c3:c1:32:
80:36:c5:79:92:9b:f2:25:27:8d:a6:5b:ce:c7:2e:
d0:ec:b2:b7:d2:e6:f7:59:ee:08:97:56:f6:58:c0:
f4:b8:65:05:16:cf:40:72:df:a8:92:c9:6d:48:cf:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:30:08:C3:B3:0F:5D:C2:78:69:6E:6E:36:BC:B6:B4:E0:31:8F
X509v3 Authority Key Identifier:
keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2e:82:5c:b0:a0:46:cd:9a:db:80:a3:e6:d0:d2:41:46:76:74:
4e:d0:6b:8e:7f:b6:c7:4f:f7:6a:95:6b:95:13:97:ab:a4:14:
2f:a5:d6:a9:1e:49:83:01:f5:de:d4:52:88:7c:18:27:17:02:
1d:d3:e3:77:42:13:27:27:5e:29:9b:57:b8:56:4a:39:fb:1e:
64:a4:85:da:16:67:ef:64:b0:62:91:4a:38:6e:a5:d5:94:2d:
dd:b2:c3:3d:38:60:ef:72:38:7e:12:fc:7e:ce:bf:65:1f:34:
00:76:50:5b:fa:4b:f6:d6:a7:96:e6:2e:5e:40:ce:04:24:1b:
ee:cf:78:cf:b1:de:50:0c:e5:15:cd:71:b0:a6:fa:88:59:a6:
26:56:80:a6:0b:76:59:37:33:24:55:04:a1:d1:e6:4a:45:aa:
a1:de:5f:71:ce:2b:50:0a:4f:d8:97:a6:4e:49:5b:b4:d5:62:
f1:3b:66:5a:7f:ce:e9:32:80:b7:93:d7:e5:f8:a1:b4:88:cf:
56:74:8d:d0:96:46:f3:dc:08:c6:08:3d:a5:03:3a:42:7a:6c:
f0:b6:24:c7:30:00:06:72:1b:a4:79:82:27:51:24:7a:7c:94:
74:55:a8:53:5e:46:e3:08:1d:3c:3a:00:7d:a2:7d:2c:3d:28:
32:59:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:57:55 2025 by rpki-client