Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File: vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier: T7DUnM9p6QQgxI6Vb7XG6KzZwMRIVglLcVM/SWjX6Nk=
Subject key identifier: 9A:FC:7E:90:E8:31:E7:20:AE:D5:BB:AA:E2:50:C0:43:F9:5B:97:D2
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer: /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial: 02FA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number: 02FA
Signing time: Sun 10 Aug 2025 04:02:24 +0000
Manifest this update: Sun 10 Aug 2025 04:02:23 +0000
Manifest next update: Tue 12 Aug 2025 04:02:23 +0000
Files and hashes: 1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: 1KDtmr3epf7udws5ub+yP82nfWqN3mfRPIiP7Me07q4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 762 (0x2fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Validity
Not Before: Aug 10 04:02:23 2025 GMT
Not After : Aug 12 04:02:23 2025 GMT
Subject: CN=689819d0-3ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:2b:c1:f7:39:c7:30:25:60:0a:72:1e:ea:
66:f6:da:89:65:3f:e4:a1:1f:80:aa:5e:35:54:39:
9f:de:d8:61:f2:ce:bc:99:da:9a:c7:0e:e2:a2:15:
2d:f1:e1:ae:f6:48:10:fe:b7:83:cd:31:cb:ce:5e:
13:b1:07:ac:d1:d8:41:db:81:4a:59:d7:7d:1a:7c:
22:c1:53:7a:5e:5a:3b:e9:3b:bb:04:ae:20:12:29:
fb:e4:72:71:e3:d3:d5:12:9a:68:c2:4d:72:99:f0:
cf:b8:59:dc:68:9f:32:d8:4f:20:34:65:ac:ca:6b:
14:f2:2b:43:25:93:66:e4:1e:3c:ea:da:6b:23:9f:
a8:1f:08:04:31:ea:63:1e:8d:11:64:3a:a2:43:d4:
f8:7b:df:53:24:fd:5e:7b:23:68:be:fb:c3:89:24:
7c:9b:94:06:a1:18:51:2e:e2:09:37:26:33:97:f2:
76:78:49:a6:7c:8f:7f:e8:7d:98:53:ad:a3:45:c3:
83:69:8d:a8:06:66:b4:e2:53:6d:bc:60:25:52:d6:
10:0d:ee:ed:07:dd:e6:37:01:33:f9:ac:87:3c:31:
a9:5e:d4:f6:1a:23:82:4d:c3:9a:4a:d1:90:da:ad:
67:52:9f:6a:b3:9e:5c:3e:c5:bf:c4:51:31:21:71:
7f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:7E:90:E8:31:E7:20:AE:D5:BB:AA:E2:50:C0:43:F9:5B:97:D2
X509v3 Authority Key Identifier:
keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:e9:ad:e7:e7:dd:85:76:f2:cc:45:2c:16:cc:1a:f7:e2:72:
c9:18:4f:69:25:76:6c:7c:85:e7:b1:0b:ab:0c:b6:34:1d:30:
d5:ad:e9:4e:02:59:ed:97:af:25:35:86:61:62:a4:22:1d:88:
e7:7f:38:3e:40:34:d7:c8:c7:7e:e5:33:7d:71:96:56:a2:f3:
8c:35:07:f1:95:e4:bd:af:43:06:a8:28:bc:7d:3c:be:3a:cd:
dd:45:2e:a4:ed:d2:7e:87:cd:4c:f3:ea:f0:b9:89:1a:a0:7e:
19:7a:a3:66:5a:fd:b2:17:57:0f:74:db:d4:b4:c5:5a:24:eb:
9d:ad:34:f7:54:38:b7:ce:51:97:10:7d:35:0b:31:07:bb:50:
ce:5a:c0:62:d8:a7:a7:68:9e:9c:bb:4d:ec:ae:72:10:12:b4:
4b:db:0f:11:ee:ed:93:22:ad:5b:1a:6d:4a:3a:1a:78:6a:c4:
51:b4:60:a6:ed:c9:77:7c:f6:7a:54:c8:87:03:08:8d:c7:5c:
c0:98:94:86:2f:0a:07:65:4c:7a:c0:6c:b4:6e:cb:0b:9e:ef:
95:b1:9b:d3:d0:17:7e:13:b1:f2:21:17:52:15:33:03:7c:83:
f2:b9:41:ab:98:99:b2:2a:cf:46:25:50:cd:2a:41:d0:68:3e:
d9:2d:4d:8d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUIzN0RBRjExMC8GA1UEBRMoQkVERTM3QkJERjZCQkRDN0EyMzIyQTVGMDkwRjgw
RUI3MTFGMDY3OTAeFw0yNTA4MTAwNDAyMjNaFw0yNTA4MTIwNDAyMjNaMBgxFjAU
BgNVBAMTDTY4OTgxOWQwLTNlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCagSvB9znHMCVgCnIe6mb22ollP+ShH4CqXjVUOZ/e2GHyzryZ2prHDuKi
FS3x4a72SBD+t4PNMcvOXhOxB6zR2EHbgUpZ130afCLBU3peWjvpO7sEriASKfvk
cnHj09USmmjCTXKZ8M+4WdxonzLYTyA0ZazKaxTyK0Mlk2bkHjzq2msjn6gfCAQx
6mMejRFkOqJD1Ph731Mk/V57I2i++8OJJHyblAahGFEu4gk3JjOX8nZ4SaZ8j3/o
fZhTraNFw4NpjagGZrTiU228YCVS1hAN7u0H3eY3ATP5rIc8Male1PYaI4JNw5pK
0ZDarWdSn2qznlw+xb/EUTEhcX8pAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmvx+
kOgx5yCu1buq4lDAQ/lbl9IwHwYDVR0jBBgwFoAUvt43u99rvceiMipfCQ+A63Ef
BnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCMzdELzM1Q0M1MUQ4MzA1RTExRUU4RjA0NUY4NDRBRDlFNkZDL3Z0NDN1
OTlydmNlaU1pcGZDUS1BNjNFZkJuay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Z0NDN1OTlydmNlaU1pcGZDUS1BNjNFZkJuay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUIzN0QvMzVDQzUxRDgzMDVFMTFFRThGMDQ1Rjg0NEFE
OUU2RkMvdnQ0M3U5OXJ2Y2VpTWlwZkNRLUE2M0VmQm5rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6a3n592FdvLMRSwWzBr34nLJGE9p
JXZsfIXnsQurDLY0HTDVrelOAlntl68lNYZhYqQiHYjnfzg+QDTXyMd+5TN9cZZW
ovOMNQfxleS9r0MGqCi8fTy+Os3dRS6k7dJ+h81M8+rwuYkaoH4ZeqNmWv2yF1cP
dNvUtMVaJOudrTT3VDi3zlGXEH01CzEHu1DOWsBi2KenaJ6cu03srnIQErRL2w8R
7u2TIq1bGm1KOhp4asRRtGCm7cl3fPZ6VMiHAwiNx1zAmJSGLwoHZUx6wGy0bssL
nu+VsZvT0Bd+E7HyIRdSFTMDfIPyuUGrmJmyKs9GJVDNKkHQaD7ZLU2N
-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:28 2025 by rpki-client