Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: ItHOwM8TOTsDa6qNZifbYAEavWAGnnD2USUHKA/67lQ=
Subject key identifier: 0F:5B:1B:91:2D:03:C1:AD:AB:0F:B7:B7:FC:DF:27:D1:95:62:01:6B
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 02AD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 02A7
Signing time: Wed 06 Aug 2025 04:06:42 +0000
Manifest this update: Wed 06 Aug 2025 04:06:41 +0000
Manifest next update: Fri 08 Aug 2025 04:06:41 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: Ly/+V3nRCCGQQq6bGNA52JY1LettNdjuzH75NUFOyo0=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:06:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Aug 6 04:06:41 2025 GMT
Not After : Aug 8 04:06:41 2025 GMT
Subject: CN=6892d4d2-8576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:ec:e0:97:15:bf:e6:8c:a2:8a:0d:d0:cc:
11:dc:1f:0a:1d:ec:f6:15:00:fb:04:e5:1b:86:ae:
31:32:d2:45:f8:ed:d1:81:07:d3:8b:a8:29:09:33:
7b:0f:39:fe:bc:b3:69:40:20:17:67:ce:13:0f:d4:
de:db:c0:fc:42:53:cc:0e:b9:34:e8:f3:75:7c:73:
c9:54:71:ee:ea:da:02:64:27:da:8a:a2:d4:4a:0f:
da:42:9c:93:4e:a1:6d:e4:ae:e7:f7:d6:b6:7b:fd:
24:2a:77:31:67:9c:e3:07:49:81:c3:18:26:15:ae:
bf:98:fd:d9:01:9d:1b:c0:43:d8:13:fc:d1:5f:f4:
80:9b:a0:b1:3a:d8:59:56:64:5f:84:36:8d:a0:fc:
d1:1d:86:5d:35:02:dd:db:be:88:00:6d:f5:24:3c:
a4:5b:f0:b8:af:74:82:bd:b4:67:4d:16:4e:a3:d1:
7e:4f:2a:79:19:6f:f3:e6:6e:d0:96:2b:21:90:5e:
15:ba:95:4e:67:45:19:b7:5d:d6:61:ea:38:dd:01:
5e:26:87:54:16:e1:e7:a5:f7:29:c5:0d:49:88:97:
69:33:63:18:ac:f0:9c:ac:21:3a:0a:92:17:46:b2:
c9:69:32:82:46:b8:ba:3b:71:f6:b1:8e:19:fc:19:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:1B:91:2D:03:C1:AD:AB:0F:B7:B7:FC:DF:27:D1:95:62:01:6B
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8c:4c:fc:4e:06:91:aa:ea:a8:73:4b:79:90:eb:e8:5b:11:
b6:f8:81:90:97:fa:43:a0:2c:1d:47:14:bc:11:c6:f7:0f:c7:
a3:2f:10:cb:51:bd:25:0d:9c:c1:7f:0f:c2:52:46:06:99:08:
b9:5b:06:61:06:be:b3:bf:fd:5a:0a:9b:57:8e:7d:a5:ae:97:
ba:b6:42:8a:a3:dd:4e:fa:d3:14:e5:42:e0:41:0a:7d:69:06:
d1:e1:eb:c0:6d:35:f8:5c:b6:64:b4:6c:cb:45:ca:4d:56:49:
b5:f9:92:82:42:64:d5:55:48:50:c5:43:17:da:09:0f:14:45:
b9:4f:c3:ec:93:fd:5c:ab:8d:b4:fa:aa:59:d7:5e:b3:f8:3d:
29:8e:fe:36:16:45:c2:25:cb:ce:b6:a5:d3:95:37:67:1d:f0:
d6:53:ad:51:fe:18:d4:96:d0:a2:18:c5:b4:81:86:79:2c:66:
1b:1d:33:e7:48:c9:b0:5a:0f:76:d4:36:3c:b5:f0:a3:88:16:
cd:d6:36:46:23:c4:f9:89:43:bc:b0:c3:c9:08:79:0e:07:39:
d0:9d:01:ec:d2:0c:82:4e:1f:f6:c7:81:12:d2:7b:48:9d:19:
ce:d0:c0:e2:97:8d:c1:73:24:79:a7:46:bb:36:2c:6d:ed:0e:
bb:14:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:16:15 2025 by rpki-client