
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File: Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier: 7WKyb8LzVeu5lFgfA/YG0CTI+RuEG3Y953B2XikSTto=
Subject key identifier: A8:7C:3B:57:A7:DB:F6:99:19:FC:09:00:20:02:65:D7:55:5B:76:03
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer: /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial: 0387
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number: 0387
Signing time: Tue 17 Jun 2025 03:28:10 +0000
Manifest this update: Tue 17 Jun 2025 03:28:09 +0000
Manifest next update: Thu 19 Jun 2025 03:28:09 +0000
Files and hashes: 1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: 9IjQkQm3TwFW+mBvxFJvHOYue77z78zljcjfFpxGSMg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 903 (0x387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Validity
Not Before: Jun 17 03:28:09 2025 GMT
Not After : Jun 19 03:28:09 2025 GMT
Subject: CN=6850e0ca-5721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:27:24:97:54:4b:dd:3e:c8:8e:52:c8:67:
44:9c:7c:a9:39:f4:d2:14:82:3c:9a:69:0d:44:42:
0c:d0:0d:f0:17:a1:f7:cd:b9:69:84:e0:ca:4e:9a:
9c:c3:4e:10:be:ab:e9:5b:8b:27:3b:80:56:65:32:
43:83:75:7e:8b:29:e6:6c:f7:88:6b:ca:62:19:5e:
48:9b:68:76:62:27:5a:00:00:84:c1:46:06:01:4e:
87:03:00:00:6b:e2:96:12:17:b5:5a:3d:bc:04:e0:
2e:20:3b:76:53:e9:80:53:a0:b6:94:9c:72:26:1f:
1d:5c:a4:5f:c2:b8:f2:ea:3c:8c:37:c7:ca:9d:8d:
e8:d1:30:f2:e3:1c:d1:db:bb:23:4f:bb:71:ec:05:
b5:0d:e9:02:7f:aa:55:db:40:6e:0e:93:26:88:14:
92:b8:a6:83:af:26:0e:0a:43:d0:ec:93:33:fe:b6:
96:b2:b7:64:ab:43:c9:af:30:7b:3e:f3:ec:9c:ef:
54:b5:4b:23:07:f5:bf:4c:7d:38:7a:57:63:cd:66:
11:5d:4f:3b:3b:02:4d:4b:cf:16:c9:af:40:b4:87:
2c:57:69:9f:98:55:c8:39:fe:38:1b:c4:dc:ad:79:
89:f9:b3:a6:39:20:31:38:f4:6e:bd:e5:7c:ca:06:
e0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:3B:57:A7:DB:F6:99:19:FC:09:00:20:02:65:D7:55:5B:76:03
X509v3 Authority Key Identifier:
keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:82:ad:05:1b:67:f7:03:90:a1:04:54:c3:3f:f8:34:fc:0b:
d7:5a:b8:b9:bd:7c:fb:26:39:53:9f:3d:f6:0c:5a:4a:05:e6:
ad:91:fd:f6:af:8a:39:1c:79:7b:c8:1b:36:e4:ad:98:56:c6:
fc:80:6c:15:64:fc:d0:17:3a:52:af:13:30:8f:08:ab:f1:7c:
ef:b7:66:6f:e2:77:47:ed:f5:77:0b:f4:9b:ff:84:7b:a0:81:
8b:01:3d:a3:72:1c:96:ab:30:16:e0:e2:cd:2a:05:c5:44:5e:
ca:ab:fb:a0:31:67:ec:46:d0:04:28:ce:6c:97:4a:30:b4:34:
88:9d:e2:ea:f9:ce:4a:d5:d4:c8:8d:32:e3:86:46:21:11:40:
2a:db:1a:11:2e:16:14:48:e0:95:5e:6d:04:93:07:83:91:04:
96:d0:b1:33:67:77:34:cb:35:64:80:ef:c0:9d:79:61:ee:8f:
e1:01:12:81:39:44:bc:ab:9e:b8:f5:89:c1:44:cc:8b:0d:76:
b5:2f:5e:8e:c4:c8:db:84:cf:00:ab:d8:31:d2:78:0a:63:1a:
11:d4:b6:da:16:96:61:a5:53:01:df:3a:78:27:c7:f7:63:0b:
88:f7:22:98:2b:10:c8:d0:a8:81:f1:45:8b:99:f8:3a:70:c5:
48:ed:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:39:10 2025 by rpki-client