Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File: Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier: at3RPdVdvb5TSjpY7GMIQ+Fmd0Ce54B7GV1oJCkYpsQ=
Subject key identifier: 4E:BB:84:72:50:31:64:9F:13:75:2A:25:2C:F8:7C:4E:29:CC:BA:38
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer: /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial: 03BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number: 03BB
Signing time: Thu 07 Aug 2025 03:28:24 +0000
Manifest this update: Thu 07 Aug 2025 03:28:23 +0000
Manifest next update: Sat 09 Aug 2025 03:28:23 +0000
Files and hashes: 1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: Qt2bXdMGsZ+OlsmeDn8HLt9IGQ0eiSV1lO38Byf0GDw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 03:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 955 (0x3bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Validity
Not Before: Aug 7 03:28:23 2025 GMT
Not After : Aug 9 03:28:23 2025 GMT
Subject: CN=68941d58-81b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:f9:f6:0d:f0:08:2b:db:c9:96:00:08:a8:
db:f0:c0:17:2f:f2:1a:2c:90:3a:33:82:49:74:e3:
94:b4:42:d8:75:c9:95:9a:b6:45:03:1f:70:22:2a:
f2:26:cb:07:ab:78:35:aa:5e:41:a4:9e:57:6b:5d:
a9:8d:59:94:67:1d:8c:81:80:14:02:60:30:ae:59:
df:0a:ea:68:06:fa:21:6d:36:6a:ba:af:c8:c1:f9:
1d:d0:77:e6:b0:ad:07:0f:f9:6e:1e:fc:e0:1b:e6:
13:ba:5a:6c:46:b3:c6:7c:22:65:f6:13:60:e1:95:
74:9f:82:b5:94:5b:e6:58:f2:34:67:d0:45:c1:3d:
96:12:fa:87:1c:f1:a0:c0:2b:ed:93:e5:58:9a:59:
b2:b2:5f:35:08:21:50:ea:47:76:72:fc:a6:08:fb:
32:07:ac:69:64:e7:83:5d:ca:b0:be:0c:b6:2c:14:
bf:3b:b7:e5:bc:6d:70:13:0a:9d:71:e3:a9:8f:ad:
29:3e:7c:5b:ba:3c:2d:61:ad:f5:35:f3:c1:bc:91:
ea:9a:78:1c:ed:44:9b:12:13:21:39:1e:53:fe:2e:
c7:97:cc:ac:22:99:b8:f3:52:aa:17:43:97:43:e0:
43:4a:f9:4e:f3:30:1a:23:3c:21:c2:60:bc:23:80:
de:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BB:84:72:50:31:64:9F:13:75:2A:25:2C:F8:7C:4E:29:CC:BA:38
X509v3 Authority Key Identifier:
keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:20:60:72:77:59:8f:6c:73:58:c7:03:60:36:b6:ed:8a:a2:
7a:d4:89:e2:97:06:df:7d:ac:45:33:da:da:a4:b5:75:24:ff:
0f:dc:e7:01:f9:31:36:45:29:d2:4a:0b:96:28:89:56:5f:dd:
2e:0c:5c:68:ec:c4:cb:d3:f7:64:2b:17:7c:63:d4:b2:cc:08:
93:68:a0:bc:28:b0:d3:10:e3:02:c8:44:81:1c:ce:91:7f:68:
f5:10:eb:b8:2f:2a:62:9b:32:6e:23:a6:7d:36:87:c5:ab:3a:
f8:fc:74:74:29:bf:b7:d8:25:2e:0e:eb:dd:da:c3:56:f9:fe:
8d:64:a2:d4:e5:93:1f:87:b2:e2:ff:c4:d9:20:ee:ec:a1:d9:
67:f6:07:db:3e:3f:5f:c8:18:ef:bb:ff:59:a5:d4:35:05:9c:
fb:a1:ab:51:c8:a7:cb:c8:81:7b:45:47:ee:73:c3:e5:b6:e7:
19:7c:84:69:32:48:cf:6e:18:60:e3:87:97:e4:dc:c1:81:7c:
92:de:e9:d5:b4:e6:0c:65:40:6f:ce:62:6b:1f:89:04:97:8b:
c2:1f:a8:60:1f:6b:0e:ed:a8:22:33:d6:5c:71:b7:a0:0c:1e:
00:a6:40:95:9d:b9:75:81:5e:18:20:fd:97:18:37:a2:af:83:
28:3c:9e:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA7swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBRjExMC8GA1UEBRMoMUU3RDFCNkUxMjY0NzA4NDA0Mzg3OURFNUREOTA3
OTBBNkFENTAwQjAeFw0yNTA4MDcwMzI4MjNaFw0yNTA4MDkwMzI4MjNaMBgxFjAU
BgNVBAMTDTY4OTQxZDU4LTgxYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwM/n2DfAIK9vJlgAIqNvwwBcv8hoskDozgkl045S0Qth1yZWatkUDH3Ai
KvImywereDWqXkGknldrXamNWZRnHYyBgBQCYDCuWd8K6mgG+iFtNmq6r8jB+R3Q
d+awrQcP+W4e/OAb5hO6WmxGs8Z8ImX2E2DhlXSfgrWUW+ZY8jRn0EXBPZYS+occ
8aDAK+2T5ViaWbKyXzUIIVDqR3Zy/KYI+zIHrGlk54NdyrC+DLYsFL87t+W8bXAT
Cp1x46mPrSk+fFu6PC1hrfU188G8keqaeBztRJsSEyE5HlP+LseXzKwimbjzUqoX
Q5dD4ENK+U7zMBojPCHCYLwjgN6FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTruE
clAxZJ8TdSolLPh8TinMujgwHwYDVR0jBBgwFoAUHn0bbhJkcIQEOHneXdkHkKat
UAswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzBGMzYxN0IyOUQyODExRUQ4MzAyRUM4QUYxMjIyNDY4L0huMGJi
aEprY0lRRU9IbmVYZGtIa0thdFVBcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0huMGJiaEprY0lRRU9IbmVYZGtIa0thdFVBcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIxMjMvMEYzNjE3QjI5RDI4MTFFRDgzMDJFQzhBRjEy
MjI0NjgvSG4wYmJoSmtjSVFFT0huZVhka0hrS2F0VUFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnIGByd1mPbHNYxwNgNrbtiqJ61Ini
lwbffaxFM9rapLV1JP8P3OcB+TE2RSnSSguWKIlWX90uDFxo7MTL0/dkKxd8Y9Sy
zAiTaKC8KLDTEOMCyESBHM6Rf2j1EOu4LypimzJuI6Z9NofFqzr4/HR0Kb+32CUu
Duvd2sNW+f6NZKLU5ZMfh7Li/8TZIO7sodln9gfbPj9fyBjvu/9ZpdQ1BZz7oatR
yKfLyIF7RUfuc8PltucZfIRpMkjPbhhg44eX5NzBgXyS3unVtOYMZUBvzmJrH4kE
l4vCH6hgH2sO7agiM9ZccbegDB4ApkCVnbl1gV4YIP2XGDeir4MoPJ74
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:41:31 2025 by rpki-client