Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File: 8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier: +ZxtBZV3hzVtKzDIGPHMgDnDdyVHp9E3eD7V7b3aUqo=
Subject key identifier: A1:DB:B5:63:DE:28:6B:B6:1C:4C:A5:E9:7A:56:B2:3E:D8:C3:CC:42
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer: /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial: 013A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number: 0139
Signing time: Tue 12 Aug 2025 04:59:08 +0000
Manifest this update: Tue 12 Aug 2025 04:59:07 +0000
Manifest next update: Thu 14 Aug 2025 04:59:07 +0000
Files and hashes: 1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: LLGcpNqlIhLYs41LuafhxIe4Wne06313oY86JgQm9A0=)
2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 04:59:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 314 (0x13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Validity
Not Before: Aug 12 04:59:07 2025 GMT
Not After : Aug 14 04:59:07 2025 GMT
Subject: CN=689aca1b-0b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:01:13:91:a5:f2:e0:82:b7:bb:cf:af:3c:
4f:29:3b:1c:53:2b:cd:ec:fa:cb:c0:64:df:1b:ed:
7b:32:0c:af:6d:6c:b8:90:89:b3:5a:44:b8:1b:4a:
5e:01:2e:91:90:4b:bf:58:d8:fa:95:b9:96:55:2f:
0a:2c:5a:ab:d8:94:90:28:bb:77:cf:6d:0c:ce:b8:
8e:91:04:b9:c9:69:ea:ed:14:f0:a7:a0:aa:6b:f0:
fd:2e:99:0f:5c:41:1e:95:a5:9a:09:5b:02:40:e4:
02:af:89:c1:cb:73:76:05:ab:de:91:87:99:85:5f:
44:2a:cc:97:7a:54:3a:5e:c9:1d:80:0f:4d:d4:ad:
70:c4:63:38:13:a4:21:75:63:8e:59:3a:96:90:2a:
c9:c2:7b:d1:e1:03:38:a8:3b:cb:ed:e4:be:86:0b:
c6:32:39:8e:ee:39:ac:4b:50:3e:ba:b9:ef:4f:1f:
9e:15:9c:e5:fe:3e:4e:35:08:19:9a:39:7c:93:e2:
3e:0e:79:18:c8:de:a2:69:40:ae:e5:1d:3f:fe:5b:
15:9d:42:f8:45:d9:74:80:4b:ae:45:68:2f:dc:4c:
b4:9d:d1:1b:a8:c5:56:9a:de:ca:21:31:84:b0:53:
0e:4b:fe:bf:df:e4:58:e4:fe:d7:46:23:6e:da:b5:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DB:B5:63:DE:28:6B:B6:1C:4C:A5:E9:7A:56:B2:3E:D8:C3:CC:42
X509v3 Authority Key Identifier:
keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:5f:27:af:8f:62:06:04:ba:71:e9:48:46:9c:44:96:27:be:
87:c3:64:39:18:fa:10:20:4a:52:de:b6:96:f5:67:b8:1b:4d:
2f:97:47:b8:36:fe:d1:d3:78:15:90:11:73:5f:6f:1c:34:6d:
69:8a:77:b9:6f:7d:7d:84:8e:8e:ad:29:6e:37:05:1a:04:ae:
6d:c5:aa:ed:22:65:14:57:f9:a8:27:dc:46:2c:a4:ed:51:33:
26:41:f0:f0:65:bd:5a:c0:11:42:0c:e1:2e:9e:47:09:6c:46:
4e:5f:05:c2:c3:c9:1e:7a:8c:99:10:cb:72:dc:f0:47:c4:8a:
7f:2f:ed:0d:d9:f3:43:2a:28:3d:00:f7:83:10:e6:45:f7:0a:
f5:1d:d9:73:51:8b:03:f9:22:ac:fe:54:d3:10:75:22:ca:29:
bf:81:92:58:fb:17:31:e9:3e:fb:6e:3b:ce:17:d6:66:27:94:
d9:96:65:51:05:1b:b6:95:08:09:62:bc:5b:f3:3b:02:36:5e:
13:4b:5b:6e:3d:c1:06:bf:27:d1:6e:bd:46:00:cd:ec:17:29:
13:da:84:3d:84:df:f6:6e:83:e1:b8:23:c1:91:ee:03:e1:3b:
e2:82:5f:a3:64:1f:46:d2:5b:96:03:aa:0f:40:08:bd:a4:97:
5a:78:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:31 2025 by rpki-client