Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: fmVG1kD16rS4Fvos94bUDtBJkzNaoHEhOHAHV97IdfE=
Subject key identifier: CD:C1:A8:1C:5C:10:40:14:B5:33:10:9D:CB:87:22:70:7A:6A:42:D2
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 0463
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 0459
Signing time: Sat 09 Aug 2025 03:21:18 +0000
Manifest this update: Sat 09 Aug 2025 03:21:16 +0000
Manifest next update: Mon 11 Aug 2025 03:21:16 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: 9ssl4qCpeY2hgUyxfmiySl/uK7tkc8+GihnkbEcByLw=)
2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
5: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1123 (0x463)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Aug 9 03:21:16 2025 GMT
Not After : Aug 11 03:21:16 2025 GMT
Subject: CN=6896bead-4a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:67:2b:ba:5a:d6:db:7f:4e:86:c3:3f:b1:
cb:9a:85:c6:f0:3c:42:d2:d4:97:3b:0e:08:aa:bf:
15:70:a9:8c:64:0a:f9:52:5f:3f:da:92:02:a2:31:
62:24:08:c4:81:98:dd:7a:bc:ab:c8:7f:14:eb:f2:
b2:81:92:7d:f4:79:5d:db:87:40:18:78:36:45:02:
c6:28:a1:9f:30:82:f2:62:79:d4:39:58:1b:b2:d9:
f0:7c:0a:04:73:1c:31:81:86:69:ba:69:aa:d0:0c:
06:d0:39:29:7a:6d:f9:cf:15:26:57:4c:a6:4d:97:
48:f3:53:f7:45:f6:64:c0:bc:64:df:3a:54:cc:8d:
f2:cb:37:1e:af:34:46:0d:1f:7e:14:51:ec:f5:dc:
16:ce:ed:db:ed:58:29:4d:c8:1d:db:a2:0a:dd:94:
34:3b:99:13:b0:1a:83:53:07:3b:eb:92:c6:48:bc:
b1:fa:00:01:f6:d9:83:81:7c:b7:6f:5b:49:5f:58:
a2:ea:91:52:0e:9a:e0:55:b7:96:c5:49:e9:20:9e:
38:da:85:6f:72:d5:42:47:b2:f3:61:65:b4:0f:73:
bc:07:3b:81:4d:d2:4d:bc:3e:c7:10:25:1c:0b:9e:
8c:d5:17:f1:2b:45:df:73:e9:65:c5:ec:b6:32:66:
f4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:A8:1C:5C:10:40:14:B5:33:10:9D:CB:87:22:70:7A:6A:42:D2
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:94:a2:4f:66:5d:42:8c:4a:74:d5:14:96:83:5a:f3:89:67:
8c:d5:8d:04:a3:dc:b9:b1:ba:8f:4d:15:80:34:37:a6:79:88:
40:f1:cf:be:66:1a:db:19:c4:05:6f:33:ab:e6:ab:41:3b:42:
bd:01:bb:4d:7e:36:40:ff:9a:b8:80:96:7b:a4:07:07:dc:f4:
b1:ba:73:de:fa:32:c3:2b:11:e5:6b:d5:87:f9:07:92:7b:63:
15:90:8e:72:cd:5f:f0:71:01:ef:32:28:16:73:2e:0f:f9:9b:
c4:74:8e:50:81:23:8f:b4:69:e6:8b:c8:38:94:ab:47:46:e7:
f6:82:93:58:b2:1a:c6:7c:18:c3:8e:d4:52:8c:07:30:7f:75:
32:a9:d2:91:a5:5a:7c:56:b2:0a:e3:4a:76:1d:5c:f2:c3:92:
2c:77:1e:32:78:61:5a:ac:6e:a3:c2:db:75:44:6e:ea:eb:68:
33:a6:12:13:95:a1:51:56:6a:a1:d3:2d:af:fc:be:00:ee:92:
32:a7:bd:7b:5c:d7:d6:bb:39:30:4a:eb:70:a0:31:f5:c1:e2:
b0:96:d5:d9:06:f8:a1:3f:28:77:7a:33:f8:7c:df:ff:21:8b:
dd:c1:ac:02:5a:ff:0d:f3:c5:ce:62:9d:fd:d6:99:e1:84:ba:
ef:c2:9f:56
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU3MjFBRjExMC8GA1UEBRMoODdGM0FEQzNBNTBBNzc3NjM4MzZBRThFMzdGNUQ5
Mzg2OTU3MTFDQTAeFw0yNTA4MDkwMzIxMTZaFw0yNTA4MTEwMzIxMTZaMBgxFjAU
BgNVBAMTDTY4OTZiZWFkLTRhMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCofGcrulrW239OhsM/scuahcbwPELS1Jc7DgiqvxVwqYxkCvlSXz/akgKi
MWIkCMSBmN16vKvIfxTr8rKBkn30eV3bh0AYeDZFAsYooZ8wgvJiedQ5WBuy2fB8
CgRzHDGBhmm6aarQDAbQOSl6bfnPFSZXTKZNl0jzU/dF9mTAvGTfOlTMjfLLNx6v
NEYNH34UUez13BbO7dvtWClNyB3bogrdlDQ7mROwGoNTBzvrksZIvLH6AAH22YOB
fLdvW0lfWKLqkVIOmuBVt5bFSekgnjjahW9y1UJHsvNhZbQPc7wHO4FN0k28PscQ
JRwLnozVF/ErRd9z6WXF7LYyZvSTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzcGo
HFwQQBS1MxCdy4cicHpqQtIwHwYDVR0jBBgwFoAUh/Otw6UKd3Y4Nq6ON/XZOGlX
EcowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NzIxLzREODU3OEUwMzdGRDExRURCOEEyQURGOUYxMjIyNDY4L2hfT3R3
NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hfT3R3NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEy
MjI0NjgvaF9PdHc2VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnlKJPZl1CjEp01RSWg1rziWeM1Y0E
o9y5sbqPTRWANDemeYhA8c++ZhrbGcQFbzOr5qtBO0K9AbtNfjZA/5q4gJZ7pAcH
3PSxunPe+jLDKxHla9WH+QeSe2MVkI5yzV/wcQHvMigWcy4P+ZvEdI5QgSOPtGnm
i8g4lKtHRuf2gpNYshrGfBjDjtRSjAcwf3UyqdKRpVp8VrIK40p2HVzyw5Isdx4y
eGFarG6jwtt1RG7q62gzphITlaFRVmqh0y2v/L4A7pIyp717XNfWuzkwSutwoDH1
weKwltXZBvihPyh3ejP4fN//IYvdwawCWv8N88XOYp391pnhhLrvwp9W
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:34:29 2025 by rpki-client