Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File: SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier: Pce+iECYWD5Q6PI8NTKHVxq3xP3/LZ/s6Kqfq724yz0=
Subject key identifier: DA:F1:CC:3F:3E:1D:1C:70:35:65:34:14:F5:97:EC:0D:DA:0B:B2:7E
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer: /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial: 03D9
Authority info access: rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number: 03D7
Signing time: Mon 11 Aug 2025 03:29:17 +0000
Manifest this update: Mon 11 Aug 2025 03:29:16 +0000
Manifest next update: Wed 13 Aug 2025 03:29:16 +0000
Files and hashes: 1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: RSPHAc4k26tBY42ZeqT1F7YnRNGHJnM0GR9BJXyspuk=)
2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 985 (0x3d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Validity
Not Before: Aug 11 03:29:16 2025 GMT
Not After : Aug 13 03:29:16 2025 GMT
Subject: CN=6899638d-db70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:4e:05:fb:f1:96:17:f3:4e:27:82:fa:5d:
13:81:a8:25:15:56:47:34:85:2a:50:e2:07:4f:8a:
e0:52:92:5b:35:7b:cb:c0:13:56:9d:99:a0:1e:86:
f7:40:9e:42:26:67:6b:79:9c:fd:f6:0f:0f:95:99:
81:59:3e:47:a0:bc:00:af:90:89:2b:cb:51:df:16:
40:20:ad:7b:c1:8b:c5:c6:62:cf:e8:6d:b8:94:5e:
9b:b0:ab:9b:45:12:a5:fa:c5:34:b5:1e:ea:ac:9e:
2c:5b:74:15:d2:fa:2f:78:12:ed:17:39:41:fb:6c:
a0:45:73:f3:32:32:22:ac:b3:4e:a0:8f:da:f4:9a:
14:1c:60:55:fe:7b:63:a5:9d:29:f0:fe:1c:38:c8:
5f:f8:67:b3:8e:eb:e5:06:f2:f0:cd:e7:01:d3:b4:
fc:e0:28:48:af:b8:88:44:5e:e3:e7:28:6f:c7:bf:
97:e6:53:ab:66:3a:16:84:0c:40:95:5e:b5:5b:81:
06:1d:e8:e9:a2:47:cf:97:33:90:ad:6b:df:ec:20:
bb:a1:28:a1:4a:67:0e:5f:9c:45:8b:84:d7:c0:c0:
60:90:a5:77:dd:9a:4b:bd:61:63:5f:d6:0b:20:3c:
15:de:6f:69:a1:3c:2b:c4:32:28:12:e5:69:45:c6:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:CC:3F:3E:1D:1C:70:35:65:34:14:F5:97:EC:0D:DA:0B:B2:7E
X509v3 Authority Key Identifier:
keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:85:55:ca:93:56:55:ff:e0:e3:e6:93:ca:11:33:4c:d4:8c:
c0:29:5e:7d:3a:22:dd:26:b6:4f:06:93:0c:81:0f:28:51:61:
55:3e:5a:1e:37:ed:e3:8c:ce:fc:eb:96:d1:4d:96:c6:46:7b:
bd:72:bb:4a:3b:e7:3d:4a:70:cb:cc:23:bd:97:ed:5b:3c:a8:
5b:b7:e4:38:b6:62:72:1c:ad:c3:c2:57:d3:ce:c6:95:02:48:
d2:ce:84:a1:fc:70:66:90:fd:83:74:64:f4:24:d9:27:84:42:
af:b9:c8:77:94:22:18:28:04:4c:27:36:eb:95:3a:6d:5d:4d:
e9:8f:16:e0:69:ca:6d:e9:12:e9:37:b5:5b:e7:63:16:1a:e9:
ae:68:7e:ce:81:30:43:70:2d:f6:43:21:ee:fc:4c:59:24:03:
6a:6e:c7:8a:41:ef:c2:a8:c9:86:f6:a9:d1:f0:c1:28:aa:d4:
49:47:85:10:e7:ff:84:46:c8:42:1f:1a:ac:07:bb:eb:2d:1f:
47:b4:02:7d:38:08:3b:cf:d7:c3:1a:05:4f:5e:bd:3a:42:59:
77:53:ac:9b:b8:b1:94:85:81:b6:85:73:7b:8d:50:2e:12:73:
e3:ea:86:8f:d0:fe:d2:a2:4d:d5:a9:e0:59:89:d9:df:fd:c0:
66:eb:42:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:27 2025 by rpki-client