Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File: HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier: Dutr8jsTjzcnvRj9b7DHp36bEjBpunp39JQPSgv3+FU=
Subject key identifier: F9:A6:1D:5D:DB:89:17:60:7D:A0:12:33:28:07:0E:44:F4:51:02:8D
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: 0421
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number: 0420
Signing time: Wed 13 Aug 2025 03:20:23 +0000
Manifest this update: Wed 13 Aug 2025 03:20:23 +0000
Manifest next update: Fri 15 Aug 2025 03:20:22 +0000
Files and hashes: 1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: SWoZzgRfbDx9fBMZGM1wEaE0NcTSYcqmDez9HA852v4=)
2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 Aug 2025 00:06:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1057 (0x421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Aug 13 03:20:23 2025 GMT
Not After : Aug 15 03:20:22 2025 GMT
Subject: CN=689c0477-e131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:f0:51:d1:1a:bc:03:d7:cc:ab:f9:ac:49:
ef:3b:8e:14:8c:5a:df:5b:f2:9e:d9:e7:fc:a7:94:
3e:82:d0:d8:2c:99:c1:d5:f2:30:0a:0c:a9:04:ee:
7a:cd:2c:41:af:a7:6b:1e:4d:1b:68:23:ea:fd:1e:
8b:60:06:6e:5f:3d:ab:19:ac:a7:63:38:17:ad:30:
eb:a5:77:5b:b3:63:69:fb:62:fe:0e:45:c3:86:83:
f8:b9:76:35:22:50:53:da:84:22:31:bd:a5:b0:62:
50:2d:aa:9e:7e:9e:6c:eb:88:00:ce:3a:c9:f6:76:
c2:9a:c1:3f:e4:22:88:b2:92:c7:5a:94:4e:fe:0d:
5f:ed:d6:cb:d2:b2:2a:fa:12:49:0f:f1:19:9a:c3:
37:e6:47:c7:81:8b:b3:e7:26:ac:2f:33:7c:36:37:
03:20:e1:7c:45:46:25:41:c6:a6:cb:87:65:35:0f:
91:47:54:ac:8a:24:cb:ca:f5:f6:66:1e:1d:e2:33:
28:09:98:62:bc:90:a9:33:40:b2:60:df:d8:6a:d4:
9e:c6:a4:99:89:22:a3:0f:9e:e8:71:2e:4e:1a:27:
ff:be:6c:28:66:22:b2:38:f6:aa:4c:13:90:c4:61:
ab:b0:84:66:ba:1b:c2:9a:a6:fa:30:1d:71:99:ac:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A6:1D:5D:DB:89:17:60:7D:A0:12:33:28:07:0E:44:F4:51:02:8D
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b8:03:3f:0f:00:8c:e2:4e:58:18:96:98:12:b7:53:9f:43:
58:4f:58:a9:ba:0e:bc:3c:5e:04:47:dc:e9:9f:43:e2:1c:38:
a1:38:23:8d:52:c8:c3:5d:a1:e0:c3:0e:0b:45:e3:c2:06:f5:
d3:5b:2c:87:38:8a:96:5a:25:c4:c1:e6:10:e0:6a:91:4b:89:
97:8a:f1:ca:6d:ab:f1:bf:c3:2b:17:fe:02:59:e5:ad:ac:60:
cc:b0:53:f1:3e:0e:ea:8b:57:07:ea:6c:1b:66:b8:70:93:4a:
79:73:62:81:61:71:75:5c:a4:77:dc:4d:7e:1a:60:5d:11:d9:
d2:9c:05:8f:c7:ed:33:7e:24:1e:54:98:46:dd:29:4e:76:5c:
30:85:df:3c:6d:4e:7c:ef:1c:e8:77:b0:d0:72:5a:de:a5:65:
22:f2:ad:21:66:80:7b:f2:ae:33:e9:f5:56:02:23:ba:88:ea:
1e:c6:35:32:33:c3:95:db:6e:89:fc:49:83:e3:1f:52:1c:49:
85:0e:8d:9c:9d:82:03:1c:09:c9:57:68:99:03:5e:d8:5a:6f:
73:f9:c1:09:04:bb:94:10:c4:32:fe:25:26:50:47:2b:78:64:
24:83:0f:c0:ca:ad:a1:3a:61:6e:aa:fb:43:f9:f1:c8:70:0a:
68:33:1c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:47 2025 by rpki-client