
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
File: GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft (raw, json)
Hash identifier: a6xN5GvKiGPBrl5opJ1FM0a9qQNpXrKHSU+nta7IAG8=
Subject key identifier: 0A:E2:E4:35:89:7B:F1:5D:1D:2D:DC:66:DF:BC:30:21:52:60:BA:F9
Authority key identifier: 18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
Certificate issuer: /CN=F3683B5BAF/serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Certificate serial: 02F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
Manifest number: 02F5
Signing time: Sat 09 Aug 2025 04:04:23 +0000
Manifest this update: Sat 09 Aug 2025 04:04:22 +0000
Manifest next update: Mon 11 Aug 2025 04:04:22 +0000
Files and hashes: 1: GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl (hash: jzZ1un7BKPfQ2Ffo39SPmU7PCnzbAjdf4ht0AYeb8VY=)
2: 87C7C2B035D611EEBE3A3B464AD9E6FC.roa (hash: MtKo8Pihi6475anM5rJMbxhyk73uAQ3ZXlWwhalQKAk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 759 (0x2f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683B5BAF, serialNumber=1835072A22EF9D9C7CB8B5A36C69E7C398133C61
Validity
Not Before: Aug 9 04:04:22 2025 GMT
Not After : Aug 11 04:04:22 2025 GMT
Subject: CN=6896c8c7-a42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:4a:ba:e6:f6:22:a4:e2:74:65:84:b8:c0:
38:a2:75:f4:8e:f6:1b:2f:92:7e:30:36:4f:9e:b7:
a0:b8:9c:7e:c6:42:d5:11:22:5f:2e:ad:4d:63:5e:
9c:52:20:39:fb:e5:d5:a8:bb:3f:b8:1f:d3:d1:f6:
16:82:f2:7c:d2:d0:58:3e:e9:2b:36:e2:95:4f:bd:
eb:d0:e8:01:e6:89:d5:a9:09:9d:33:ca:61:14:8b:
61:d4:7c:da:b2:05:05:1c:1c:9e:12:a2:f9:9e:f1:
42:9f:30:88:cb:dd:97:d4:47:ae:2e:ce:4c:ac:e8:
4b:25:c3:ce:8b:6c:c1:5d:7d:4f:6b:06:96:2b:41:
d2:0b:ba:f5:91:54:65:4b:20:da:68:10:11:7a:a8:
80:50:27:2a:26:85:d0:ca:73:99:6b:eb:02:e5:fc:
5e:11:55:5d:49:4f:ba:47:e3:04:d7:9d:cc:5b:88:
e6:fb:52:96:cb:be:b2:e6:d4:5c:33:61:50:04:7a:
75:92:89:4a:df:3d:77:3e:c0:82:ed:e1:eb:25:56:
5e:69:0b:55:a5:a4:fd:10:fd:fa:49:ef:59:42:f4:
c6:5b:b3:9e:dd:45:43:37:de:ed:0a:ec:80:d7:c0:
b4:da:c8:b0:d4:c6:8c:e6:9a:e4:ff:f9:9a:c1:10:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E2:E4:35:89:7B:F1:5D:1D:2D:DC:66:DF:BC:30:21:52:60:BA:F9
X509v3 Authority Key Identifier:
keyid:18:35:07:2A:22:EF:9D:9C:7C:B8:B5:A3:6C:69:E7:C3:98:13:3C:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GDUHKiLvnZx8uLWjbGnnw5gTPGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683B5B/7C3BEF0835D511EE9C89C3434AD9E6FC/GDUHKiLvnZx8uLWjbGnnw5gTPGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:ca:72:e0:24:2b:25:30:1b:d5:f7:bb:ad:b7:cb:28:d2:e0:
12:e3:a7:94:29:8a:fa:fe:21:32:f3:75:49:70:e5:04:31:e4:
30:3e:6c:8b:3c:24:88:61:8f:d6:44:74:0d:d3:05:77:ad:04:
38:4c:77:2a:f6:60:a5:95:9d:48:15:c2:ac:dd:81:9b:e8:12:
c7:62:37:46:dd:01:44:67:af:ad:2f:0d:de:50:4a:3d:b7:e9:
38:fc:39:e8:0f:7a:cd:d0:21:59:56:19:7d:1b:7b:ed:be:63:
3f:0f:51:ce:a3:41:4f:b7:64:e2:1d:78:06:47:31:1a:92:1b:
68:50:e7:e0:6e:5f:55:f7:9d:91:cc:e4:32:aa:25:a7:b8:a5:
16:0d:fa:b5:cd:f1:18:45:45:39:70:86:a5:4c:55:f0:61:c9:
99:df:9e:59:27:53:db:71:06:4c:eb:33:c2:0d:bb:82:b5:f5:
6f:81:45:3d:42:25:5e:9a:ba:88:91:69:eb:31:ff:a3:69:11:
1f:27:12:ce:d6:2b:0b:43:32:83:56:56:9a:31:aa:1c:cc:3a:
f3:9c:e2:63:a8:6c:8e:d2:4c:95:75:5c:e7:7a:1f:17:ac:79:
2b:4f:ca:27:20:d5:12:e3:94:d0:c9:4b:13:03:85:80:36:94:
d8:93:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:26:06 2025 by rpki-client