Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: 1oofCs17an97vRr6Ef2uUHn43JiS38IrOfpXdv+9u2s=
Subject key identifier: 2F:DC:06:F9:87:B5:74:A0:83:27:85:F4:0A:14:4A:51:69:6B:32:C4
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 0255
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 0252
Signing time: Sun 10 Aug 2025 04:24:32 +0000
Manifest this update: Sun 10 Aug 2025 04:24:31 +0000
Manifest next update: Tue 12 Aug 2025 04:24:31 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: 9Tf3K80Juokcw+8RMSaIXM3lx3XT7wRtHEqCMGuRYbs=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 04:24:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 597 (0x255)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Aug 10 04:24:31 2025 GMT
Not After : Aug 12 04:24:31 2025 GMT
Subject: CN=68981f00-601d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4c:6e:3c:da:89:b3:98:5f:f1:6e:58:b6:e6:
f2:fa:05:73:9b:f7:98:e9:d4:9a:19:0d:6d:1d:7d:
6c:26:aa:c7:15:4e:22:30:f8:ce:07:cf:24:a2:74:
63:bd:24:17:1e:3f:40:dc:8d:b5:46:89:58:47:59:
f8:37:49:5e:7f:08:cf:4c:23:44:22:10:fe:ec:d0:
ce:ae:21:58:7c:33:14:2f:9c:6b:1c:f7:37:ee:ba:
07:b6:09:d9:de:c6:40:75:02:b6:19:48:1e:59:f8:
5b:18:86:97:11:0f:c0:27:94:fc:3d:11:27:3f:57:
66:01:90:05:0f:c8:31:8e:bf:79:fa:d2:ca:3f:aa:
f8:fb:50:7c:50:2e:0c:15:b8:2b:d4:68:de:1f:f2:
33:5b:0d:be:06:0b:64:02:16:b9:0c:48:0e:9f:dc:
d3:7e:8d:94:3a:bb:21:88:ef:d0:28:69:29:73:4b:
b4:3f:27:73:81:cc:ee:6f:97:7a:5c:87:87:ae:28:
11:4e:6a:61:21:53:68:3a:b2:81:4d:0e:b3:b6:c3:
ac:cf:01:e0:7f:1a:92:b9:40:28:ae:14:f9:5d:a6:
e5:28:48:14:80:0c:68:ca:cb:1b:61:44:6e:b2:0d:
4d:64:23:4d:fe:d9:50:8d:2e:a3:69:27:8e:3c:39:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:06:F9:87:B5:74:A0:83:27:85:F4:0A:14:4A:51:69:6B:32:C4
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:1a:4b:18:17:a2:b3:e3:07:08:81:b0:11:cc:62:1d:45:34:
a0:3f:ac:e2:43:fe:11:2d:31:0b:81:5a:26:93:71:5e:25:bb:
73:9c:8f:0d:b9:6c:a2:c3:c3:32:8d:45:0b:2b:cf:ef:9a:57:
62:71:ae:65:39:c9:10:65:cb:c0:90:0a:34:1f:df:15:b6:16:
fd:5f:da:b8:52:5a:35:5c:27:ec:14:8f:35:2b:87:d2:c6:df:
01:a6:25:a0:70:d8:de:8b:e8:a5:95:2e:34:be:ad:11:1d:a6:
a5:85:49:e1:1e:1f:b3:f7:f5:56:04:b3:66:53:ab:d8:19:1f:
07:f4:d4:39:c5:fa:dd:7d:a2:25:9c:a7:83:5c:0d:1b:14:02:
9c:01:e1:2f:cd:e8:18:aa:e9:00:84:c0:cc:0e:fd:25:60:bd:
27:2b:39:f6:8b:f7:48:26:49:ec:e3:96:62:78:95:a0:af:8c:
23:57:ef:7f:97:56:e8:97:d6:8a:77:37:ec:6d:f5:f9:bf:26:
82:b9:9c:9f:1e:5f:26:af:e4:1b:28:a4:63:2b:69:dd:18:da:
87:fe:79:dd:f1:3a:49:61:b7:7a:4e:a6:25:06:74:be:18:af:
c4:ad:26:28:08:69:cc:69:76:0c:d0:fa:df:12:fd:11:c1:00:
25:fe:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:23 2025 by rpki-client