Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier: 4nXUeR8CIHt55MpBAJV2fhsHZXN1urbnHFHxcxIBXM8=
Subject key identifier: C7:6C:82:BC:AE:B6:57:7A:B7:03:68:44:68:E7:73:9A:72:43:B4:C7
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer: /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial: 22
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number: 21
Signing time: Mon 04 Aug 2025 05:28:42 +0000
Manifest this update: Mon 04 Aug 2025 05:28:41 +0000
Manifest next update: Wed 06 Aug 2025 05:28:41 +0000
Files and hashes: 1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: lrn6ndzLb6dEpFO7pvftTrVAQ8g79whJxJJgcjlAnNs=)
2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Validity
Not Before: Aug 4 05:28:41 2025 GMT
Not After : Aug 6 05:28:41 2025 GMT
Subject: CN=6890450a-669a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:b5:e8:a4:6d:a3:3c:cf:46:46:6a:5c:17:
43:08:12:96:65:60:fb:14:c5:d8:57:8e:6d:ce:9b:
a3:6d:26:e0:d7:2e:5b:2a:58:1d:8f:e7:aa:27:f9:
d2:93:36:8b:97:1c:b5:92:51:13:52:73:ae:34:80:
81:6e:03:4c:7c:4f:de:e1:16:e7:3a:31:db:ac:0b:
9e:d0:cb:77:d2:ee:c1:c4:75:3d:17:7e:6d:02:b8:
fb:26:4b:6a:98:f4:a0:f7:81:56:36:c1:5f:75:11:
f6:ad:3f:2b:25:e9:ca:52:db:8e:dc:d6:53:81:86:
3e:e0:fb:e9:da:c7:3f:07:f0:34:86:85:89:74:df:
7e:6c:11:85:33:f6:7d:97:72:2e:b4:0d:96:d7:85:
63:e3:46:95:41:45:87:34:f6:a5:64:24:d9:fd:c6:
fe:6b:29:a3:32:24:43:fe:e1:38:0c:53:78:6b:29:
87:f5:81:b1:76:95:d6:8a:59:81:7a:9b:db:10:a6:
b5:65:99:73:10:1e:ee:01:7c:fd:6d:59:1a:33:f1:
86:df:b7:ac:52:17:5b:75:51:55:fb:84:5a:e0:22:
78:ef:05:c7:7e:8d:0c:1e:c8:45:bd:2e:3f:70:e8:
7f:5e:68:e1:40:44:50:3b:90:71:09:9e:e3:67:c9:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6C:82:BC:AE:B6:57:7A:B7:03:68:44:68:E7:73:9A:72:43:B4:C7
X509v3 Authority Key Identifier:
keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:ea:f5:13:77:72:8a:d6:71:96:dc:07:a5:1f:9f:66:c7:65:
1f:d7:1c:c6:16:98:57:cb:6c:50:6d:5d:6c:94:b9:0f:8b:df:
a1:a7:b8:d6:99:70:3d:20:a6:e5:c4:29:01:ca:4d:96:9f:d7:
0d:ff:62:18:1c:13:37:f8:2c:27:83:4f:33:17:48:23:3b:eb:
f5:e9:10:ad:70:dd:7a:8f:cb:b5:cb:ab:25:9d:1b:93:37:f3:
39:93:4b:44:9b:45:a4:26:b4:b5:50:d9:7b:08:1e:4f:1e:91:
e7:f2:72:30:1f:b4:aa:24:40:b6:7d:7a:12:b1:c9:c4:6b:c4:
e2:73:4f:07:82:7c:d3:1c:6f:83:0a:a6:a5:c4:33:0a:13:fd:
26:8f:aa:90:f9:b4:ce:4d:60:eb:73:53:e5:75:9d:1d:1b:a0:
97:23:44:99:67:11:05:8b:b7:2a:0d:f9:cd:29:f4:83:0e:16:
db:44:48:9e:41:39:8b:da:45:e4:58:3f:fe:d2:30:40:69:09:
81:cc:e8:4f:47:e2:2c:32:82:5b:0a:c8:2c:cd:a9:68:ab:54:
a0:e4:db:46:f7:a5:85:e4:06:73:3f:50:c4:dc:99:ad:62:18:
64:20:d1:48:86:3c:dd:f2:53:6b:f3:4c:dc:a4:d9:7a:59:d4:
6c:bf:2c:5e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MUREQ0FGMTEwLwYDVQQFEyg2OUExQjI3NTREMkM2RjZCNDcyNjY3N0E3MjA0NTAy
MzZCRDJFQ0QxMB4XDTI1MDgwNDA1Mjg0MVoXDTI1MDgwNjA1Mjg0MVowGDEWMBQG
A1UEAxMNNjg5MDQ1MGEtNjY5YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK5XteikbaM8z0ZGalwXQwgSlmVg+xTF2FeObc6bo20m4NcuWypYHY/nqif5
0pM2i5cctZJRE1JzrjSAgW4DTHxP3uEW5zox26wLntDLd9LuwcR1PRd+bQK4+yZL
apj0oPeBVjbBX3UR9q0/KyXpylLbjtzWU4GGPuD76drHPwfwNIaFiXTffmwRhTP2
fZdyLrQNlteFY+NGlUFFhzT2pWQk2f3G/mspozIkQ/7hOAxTeGsph/WBsXaV1opZ
gXqb2xCmtWWZcxAe7gF8/W1ZGjPxht+3rFIXW3VRVfuEWuAieO8Fx36NDB7IRb0u
P3Dof15o4UBEUDuQcQme42fJM5kCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTHbIK8
rrZXercDaERo53OackO0xzAfBgNVHSMEGDAWgBRpobJ1TSxva0cmZ3pyBFAja9Ls
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFFNEVDOUMvYWFHeWRV
MHNiMnRISm1kNmNnUlFJMnZTN05FLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWFHeWRVMHNiMnRISm1kNmNnUlFJMnZTN05FLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY0MUREQy85MUJFOTkyNjU4Q0QxMUYwODZCRjdDRUFEQUU0
RUM5Qy9hYUd5ZFUwc2IydEhKbWQ2Y2dSUUkydlM3TkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJLq9RN3corWcZbcB6Ufn2bHZR/XHMYW
mFfLbFBtXWyUuQ+L36GnuNaZcD0gpuXEKQHKTZaf1w3/YhgcEzf4LCeDTzMXSCM7
6/XpEK1w3XqPy7XLqyWdG5M38zmTS0SbRaQmtLVQ2XsIHk8ekefycjAftKokQLZ9
ehKxycRrxOJzTweCfNMcb4MKpqXEMwoT/SaPqpD5tM5NYOtzU+V1nR0boJcjRJln
EQWLtyoN+c0p9IMOFttESJ5BOYvaReRYP/7SMEBpCYHM6E9H4iwyglsKyCzNqWir
VKDk20b3pYXkBnM/UMTcma1iGGQg0UiGPN3yU2vzTNyk2XpZ1Gy/LF4=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:01 2025 by rpki-client