
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: Yx1jXgfiAkZRXOaLUKAyNwhlz7bKxcZztf/KIPlbX64=
Subject key identifier: A0:64:91:C0:8B:3A:AA:BB:7A:2C:FE:4A:91:75:E4:CF:80:C3:21:AB
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0D5D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D3D
Signing time: Mon 04 Aug 2025 01:04:29 +0000
Manifest this update: Mon 04 Aug 2025 01:04:28 +0000
Manifest next update: Wed 06 Aug 2025 01:04:28 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: eJxEG1f5gu0N9Ljj1CqqSE1nMr/r74JRwUizQc/oAGY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Aug 4 01:04:28 2025 GMT
Not After : Aug 6 01:04:28 2025 GMT
Subject: CN=6890071d-ef4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b2:d4:1c:ac:b6:95:fd:6a:50:06:d3:e5:23:
28:97:04:63:7f:75:9d:c2:1f:ae:ee:41:c6:7c:d0:
34:73:90:3a:30:e1:fc:4d:d9:05:25:94:db:82:40:
d1:e1:7e:52:10:00:01:ec:ec:b5:17:3a:2b:8b:48:
ca:a0:73:a8:8b:dc:a0:a0:e2:aa:6f:6b:74:f1:c1:
f0:d3:30:21:cd:2f:17:bc:9c:e5:71:bc:52:04:08:
c2:55:2c:9f:79:83:79:17:1c:22:22:fd:7c:28:97:
8e:eb:57:b7:31:70:4a:c0:b2:ee:1a:30:66:30:e1:
75:98:1a:09:a1:be:38:94:0b:9c:51:23:4d:93:c8:
b4:de:fc:58:1a:2f:fa:bc:39:a5:e2:3b:5c:24:63:
69:93:92:c4:3b:64:42:2d:90:56:a3:8d:d5:69:bc:
a3:22:31:2b:a0:51:62:1d:8b:9e:f4:25:77:e0:1e:
6f:5d:4a:02:7f:61:e6:28:86:ff:1c:aa:fa:48:02:
49:32:eb:7d:b2:ef:c3:a6:f9:55:49:8c:93:9f:a6:
69:b6:a1:fc:1d:8a:e2:d7:88:01:95:96:ce:6b:6c:
45:7b:9d:e2:ba:32:2a:43:b3:5f:21:5c:cb:34:ee:
ad:ce:70:db:9f:f8:30:e1:3a:52:ac:93:17:a9:8b:
58:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:64:91:C0:8B:3A:AA:BB:7A:2C:FE:4A:91:75:E4:CF:80:C3:21:AB
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:74:94:3a:a4:36:92:d0:4b:2b:a4:25:4b:eb:50:27:df:c1:
de:33:93:01:97:6a:c9:04:34:72:93:03:1d:0e:4c:64:91:c2:
f8:e0:31:34:c6:a8:32:e8:f8:6a:2a:f9:02:dc:36:df:15:a4:
a9:cf:3a:e6:0a:e8:c0:ba:e1:1c:bc:12:13:0d:16:f2:e9:54:
38:fa:bb:36:ca:89:f0:40:66:47:6f:49:ff:cf:60:58:96:52:
27:35:9c:3c:a4:0f:8f:9e:ee:14:43:e8:19:65:a2:36:f3:78:
79:d3:4e:9f:fa:70:f9:a5:3d:42:48:cf:c7:e8:2d:b3:ab:48:
3b:1e:a9:66:23:8c:d0:04:50:c4:03:e8:98:ae:7e:bb:95:56:
62:6b:8a:fa:23:36:78:bf:42:ef:1e:62:56:9a:80:26:3c:31:
6f:fc:0e:8e:de:d4:58:e4:82:93:cc:25:c8:67:f8:aa:02:a8:
c9:04:53:e0:8a:e7:56:3d:2b:6f:50:98:b7:50:c6:18:d2:1e:
3f:e3:39:74:95:b4:9c:58:d2:64:93:32:25:a4:64:6b:aa:b0:
80:03:94:3b:15:a9:eb:c7:29:74:1b:2d:9f:04:02:1b:51:5f:
7b:6d:6c:93:9c:70:bf:94:e4:9f:07:00:9a:9f:da:6a:a1:06:
f8:fa:96:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:51 2025 by rpki-client