
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: Z0I8FkcAIjBhLa16Exy1B0G0ljrqzwSXFTnX1vaK+Bk=
Subject key identifier: F7:CA:90:8D:E9:1C:5C:3D:B7:D9:2C:3D:25:F4:CA:04:A5:63:F5:B5
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 02F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 02F2
Signing time: Tue 05 Aug 2025 04:00:55 +0000
Manifest this update: Tue 05 Aug 2025 04:00:54 +0000
Manifest next update: Thu 07 Aug 2025 04:00:54 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: KzzOPD04UjBE1F5lZzbd8aCC/sV+IpyBlYSN8MGTzwQ=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 760 (0x2f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Aug 5 04:00:54 2025 GMT
Not After : Aug 7 04:00:54 2025 GMT
Subject: CN=689181f7-524c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:76:69:53:d5:6f:0a:2f:ec:28:a5:f3:d9:ea:
db:59:3a:fb:8e:88:e5:be:55:46:b2:16:fb:92:8e:
fc:ee:29:dc:75:8c:59:b6:47:57:67:24:21:61:9e:
d1:22:27:84:63:71:f5:e7:27:15:c6:33:a9:df:4a:
9e:e8:8f:de:c4:64:e0:5e:48:b1:ad:12:58:05:4b:
3f:bc:ba:cd:c9:2f:a9:8c:10:14:fe:e7:8f:0d:de:
71:39:95:fd:8a:97:2e:2d:ee:cc:9c:e7:e7:7d:95:
e0:fe:c3:29:69:d2:b4:ab:72:48:96:f0:b7:20:cb:
61:0e:56:f6:48:ae:8b:93:53:9c:cd:6f:e6:a4:9b:
d5:be:52:2b:73:0f:13:0a:5c:9d:2b:ea:e5:6f:a5:
4f:f7:c5:c9:32:e1:c8:92:48:ca:e3:9b:37:fb:62:
e4:df:3a:9e:48:a0:8e:bf:a1:67:26:7e:42:cc:3a:
95:e0:40:2a:f2:77:2d:c4:39:bb:1b:de:9b:54:54:
8c:c6:f6:6d:a4:85:91:2c:95:8b:1f:d4:2f:2d:81:
66:1b:d0:ef:46:38:5b:eb:b3:1c:ba:bd:be:d0:1d:
50:59:56:5e:dc:ed:8f:25:94:fa:29:29:e3:54:d9:
56:ad:a7:d5:a2:d2:ce:31:10:28:f1:46:f3:04:e2:
22:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CA:90:8D:E9:1C:5C:3D:B7:D9:2C:3D:25:F4:CA:04:A5:63:F5:B5
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e8:47:07:9c:34:40:0f:79:9e:d1:c0:eb:6b:20:84:85:b6:
ac:5b:11:02:be:7e:a3:ae:ff:01:e3:12:f1:0d:ff:01:13:7c:
73:08:b7:9c:cb:33:14:2d:11:d5:12:7a:a5:7b:23:61:fb:c1:
ff:b6:a9:21:d3:c9:bc:0c:03:d3:f7:3a:1c:fe:6d:ac:50:3f:
7d:c7:e4:6b:b6:41:c6:84:07:e2:c3:9a:bf:f0:1d:15:79:37:
c4:ff:31:f1:7f:b5:fc:7c:bb:84:69:36:ef:c0:38:b6:d0:57:
29:92:c1:fc:77:f9:4e:eb:19:2a:4b:a6:d8:4f:01:ac:4e:38:
91:a0:82:44:77:00:ac:59:7f:80:31:2d:e9:92:13:44:b6:d7:
32:80:df:97:e5:8f:56:86:50:d2:60:de:0d:34:9a:63:ae:89:
1f:e6:2f:bf:9b:3e:b2:ff:19:1a:9a:11:af:65:07:f9:dc:33:
e8:38:fd:d1:d9:6a:d9:d7:66:ad:9b:4e:55:5a:36:bc:5b:eb:
95:fe:a4:c5:91:9a:06:d7:a0:88:16:d7:2e:7c:17:f7:13:b3:
6b:da:32:48:fd:ec:66:38:ac:13:1f:b8:75:c0:83:e0:53:9a:
69:53:6d:a3:38:22:7b:7c:47:72:d6:7c:88:2f:54:99:35:da:
e0:83:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:28:43 2025 by rpki-client