Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: /TmVKmz8Id0PmZ9MulRw8fyRBH+HtL6k2lTQf4RK0qw=
Subject key identifier: 3A:75:A7:CE:05:AD:16:C5:C2:F0:B9:BC:C2:9D:13:E5:CE:C9:44:05
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 090D
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 090C
Signing time: Thu 07 Aug 2025 01:29:10 +0000
Manifest this update: Thu 07 Aug 2025 01:29:09 +0000
Manifest next update: Sat 09 Aug 2025 01:29:09 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: 7nZUEuQ0LCuzd/3vwsEyrye2QMK33m9KeskClh5xA0E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2317 (0x90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Aug 7 01:29:09 2025 GMT
Not After : Aug 9 01:29:09 2025 GMT
Subject: CN=68940166-b812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:94:82:71:ac:73:15:71:0f:68:be:51:93:75:
62:da:4d:b1:af:8a:62:02:76:fb:e7:08:7a:e3:3e:
da:70:c7:00:58:01:5d:ce:04:4b:b3:64:cd:77:ac:
a3:94:a0:ee:73:6c:0e:f3:99:f4:f7:18:4c:96:55:
fe:22:de:e3:04:77:02:6a:72:f8:d3:c6:94:f3:ed:
13:1d:0c:76:d5:42:fd:84:59:a3:6f:8a:55:9e:af:
24:1f:9d:f5:f1:fe:9b:38:fa:2f:5a:5c:c9:19:dc:
64:cd:3e:28:fa:65:d4:c0:9b:6d:c6:d3:20:4a:e9:
78:d5:c9:25:2c:cc:56:f0:59:e9:46:84:3c:d3:f2:
82:0c:4e:bd:ae:63:e8:d3:67:00:2b:f2:dd:ca:04:
d9:81:d9:c5:fc:4d:e8:e5:13:35:73:22:35:12:d8:
9c:ba:5d:e3:00:70:f0:a3:56:d0:98:d1:d5:d6:8c:
f2:f5:b3:c3:d4:ee:b0:fd:a5:ee:3f:93:57:1d:c1:
25:57:1a:24:dd:c1:09:c9:53:e6:29:68:2e:71:03:
49:89:a6:ae:ef:a7:f4:78:e3:10:23:8b:92:fa:7d:
90:bc:fb:cf:fb:7d:e2:fc:5f:e5:19:2f:67:3d:de:
98:6a:d6:04:bc:7e:3d:b8:84:9a:e7:92:87:51:01:
41:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:75:A7:CE:05:AD:16:C5:C2:F0:B9:BC:C2:9D:13:E5:CE:C9:44:05
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:5c:09:a9:89:27:61:d0:45:ea:54:1c:c0:47:4a:5c:78:f3:
83:b4:bb:9b:e8:6f:00:03:9c:af:12:0a:aa:7d:64:5b:e3:63:
a6:71:f4:e2:ee:09:05:21:7e:55:87:46:2b:e2:7c:b8:76:e4:
3b:f4:ed:95:05:58:56:ae:34:f4:7a:0e:1e:38:cb:62:d8:35:
2f:e4:76:70:4d:21:9f:6a:10:1d:f3:d5:a4:14:4e:3d:41:62:
89:19:9c:47:f9:6a:e7:b6:f1:43:c1:59:63:7b:5e:6a:fc:fe:
34:cc:ac:44:a1:92:7e:b3:33:ff:82:62:d4:16:23:ff:18:0f:
f5:24:cf:30:f8:ba:0a:2f:7d:43:2c:9a:17:de:5e:c6:2d:25:
95:ab:f8:a9:52:29:69:48:e6:53:1d:75:2c:3b:b4:e0:2e:89:
b1:24:49:9d:49:ce:09:b3:c3:d9:be:c8:f8:52:e9:4d:d8:1b:
7a:98:27:b2:1d:e1:80:a0:fa:40:96:02:a9:db:a7:d2:30:c1:
e2:20:16:90:6e:8c:93:55:b7:e1:f8:e6:fa:6c:71:d4:08:7b:
a3:86:1c:9a:0a:59:eb:17:46:63:16:8c:d5:8a:ea:85:e3:7c:
be:a6:55:14:e3:84:2b:0f:61:ff:3a:f6:60:9c:74:37:2d:54:
1e:f9:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:27 2025 by rpki-client