Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier: nE0NtvNO7ecoJKCgzkbqvDEQf5rNu/9LV7V3MpXPotM=
Subject key identifier: 27:A6:7F:E3:1F:A0:25:BC:EF:63:DD:34:AA:C7:68:33:BC:61:91:24
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 023D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number: 0235
Signing time: Tue 12 Aug 2025 04:23:17 +0000
Manifest this update: Tue 12 Aug 2025 04:23:16 +0000
Manifest next update: Thu 14 Aug 2025 04:23:16 +0000
Files and hashes: 1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: MlF1kXOGIbmqYWgXdghF/VOE8peFOIwvUvJ5tN0p6Gg=)
2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
6: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 04:23:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 573 (0x23d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Aug 12 04:23:16 2025 GMT
Not After : Aug 14 04:23:16 2025 GMT
Subject: CN=689ac1b5-2584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:30:9e:e8:0a:b1:d6:9d:35:55:d7:0e:fa:
1a:7e:05:df:f4:c7:50:5a:8e:ea:e6:59:ee:bf:0c:
18:18:4f:9b:19:70:97:ce:ab:49:a7:5c:e5:35:52:
8a:96:78:f0:ae:1c:17:cd:d1:96:ee:82:a0:fe:1a:
fa:43:37:b7:40:2c:ed:90:0d:64:86:10:09:a9:e8:
24:23:e4:2a:f0:11:d4:cb:65:4d:af:cf:b2:7c:a2:
1d:5f:ba:c9:06:ac:97:9d:50:c9:16:5a:25:c7:b3:
7f:a6:61:b5:b2:e8:4a:2c:60:52:06:b5:b3:12:cb:
ae:d0:4e:9e:6f:c6:bd:9e:74:d6:23:b5:b0:0a:41:
7e:2a:a0:05:55:97:7c:54:e7:10:4c:61:d2:f7:27:
ec:bc:e1:95:98:8b:a5:bc:3e:3c:04:82:50:3a:bd:
94:24:a5:6c:91:28:c9:70:93:dc:13:cb:ca:a4:de:
a8:f9:18:e1:2a:72:39:9d:03:d3:e1:7f:b3:f5:6c:
0b:c5:4a:15:b8:fa:a7:4e:40:a4:f3:0a:04:21:e8:
b3:c4:03:8d:94:e2:64:a0:09:0b:f8:c5:b8:e5:de:
83:92:9e:11:ff:9e:0f:45:3a:77:39:24:1e:2c:0f:
ce:b5:f8:f5:ce:41:cd:71:f6:a3:6f:8d:5c:87:94:
95:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A6:7F:E3:1F:A0:25:BC:EF:63:DD:34:AA:C7:68:33:BC:61:91:24
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:44:84:af:bd:9b:bd:4e:58:95:15:ec:dc:a7:43:be:72:3f:
e2:54:f2:76:aa:8d:15:3a:32:12:bc:91:8c:57:1b:3b:a5:89:
28:ee:cf:c6:4e:82:0b:b8:60:0b:de:2e:6f:b0:91:1a:f8:d1:
4c:55:8c:da:84:c2:1a:27:07:55:96:02:cb:49:4f:13:25:b9:
79:30:ac:f7:57:ec:f9:43:09:fc:f8:bf:26:f1:5c:ee:a8:f5:
51:b0:48:bf:b1:d4:56:82:8f:d3:b3:27:e2:97:d6:d6:54:04:
28:b3:8f:6e:6e:fe:df:be:b1:2d:7b:60:40:f4:7f:ec:61:57:
7b:89:34:47:73:20:44:b7:7e:6f:26:97:bb:1f:30:a7:50:b7:
9a:83:03:72:37:28:e9:ed:36:31:ae:52:cd:ce:10:ae:3b:25:
35:ec:fa:37:75:29:5a:10:c3:8a:30:71:97:47:6e:c8:17:0b:
4e:aa:34:e6:61:d5:60:0c:db:94:7b:ef:8f:f5:9f:fb:f6:b4:
10:04:32:c3:41:d6:74:90:3f:4e:66:2d:d3:98:33:98:71:0a:
d5:16:de:26:76:0e:fa:3a:ff:af:c0:b1:1a:9c:38:a0:07:9d:
b8:45:b5:3e:bb:70:8b:3f:c5:96:47:96:bf:49:70:ca:2e:a3:
48:7e:a0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:37:06 2025 by rpki-client