Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File: o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier: 4pWZk2a4VaVz7NpXXpVCS0HqF9PiZjOr8Yqfj9D//po=
Subject key identifier: 9B:06:89:0F:5A:C9:AC:AE:62:BF:D6:ED:37:1D:2B:5D:51:A6:7A:BF
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer: /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial: CD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number: CA
Signing time: Tue 12 Aug 2025 05:11:35 +0000
Manifest this update: Tue 12 Aug 2025 05:11:34 +0000
Manifest next update: Thu 14 Aug 2025 05:11:34 +0000
Files and hashes: 1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: HuWBu8adcwvMpHLQKVfWZVRoy4o1gNjOo0B9Yzhq7gE=)
2: D3D6067449F411F0B90F0DC7DAE4EC9C.roa (hash: Q+BFKYSnO6fuQCFkfzwVQZk6vXnihXirdAglo9VE170=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 Aug 2025 05:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Validity
Not Before: Aug 12 05:11:34 2025 GMT
Not After : Aug 14 05:11:34 2025 GMT
Subject: CN=689acd07-e1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:2f:7c:c2:4e:b1:a0:5d:00:d3:83:6f:aa:
15:88:a8:69:fb:89:38:a9:c6:17:01:f5:07:29:0d:
df:7b:ca:5d:51:67:b9:ed:58:e0:88:42:69:cd:6b:
d5:3e:c4:35:6b:fb:1d:10:fe:85:f5:d7:0c:c8:fa:
74:7b:92:19:4e:98:6d:86:75:5b:f3:1d:f2:73:67:
bc:bd:f8:56:1a:e5:59:3e:9d:88:a5:64:d1:a4:43:
61:8d:bf:6e:96:4e:ac:9e:54:31:09:78:15:6e:63:
d2:40:37:01:32:9b:e6:03:2b:47:77:fe:bf:75:96:
4b:dc:29:53:83:78:e6:5e:d5:56:33:7a:dc:c5:f9:
a6:ea:92:25:83:d6:e3:0b:25:7d:09:5b:80:0f:e4:
c0:eb:a5:f7:d5:4e:5e:2f:33:d7:87:0e:6a:e8:e0:
73:8c:ba:16:6c:49:3a:99:bc:05:f4:e3:32:5c:11:
ef:81:1e:f2:57:ef:b9:35:a9:03:b1:aa:4a:1a:dd:
a5:63:8b:18:c5:e1:28:e0:eb:56:65:f2:b5:41:fd:
5d:65:1c:0b:cc:e4:73:c9:2d:16:17:c4:97:51:c3:
53:b2:65:1d:c7:5b:14:7b:ee:01:7f:dd:c8:20:58:
5f:9c:a0:67:83:a7:d8:40:e8:d6:a6:7a:fe:69:11:
f3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:06:89:0F:5A:C9:AC:AE:62:BF:D6:ED:37:1D:2B:5D:51:A6:7A:BF
X509v3 Authority Key Identifier:
keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0f:b3:53:91:c5:cf:cd:4c:de:9d:87:ae:b8:29:2d:a9:81:
6d:81:90:66:32:8d:2d:44:d0:dd:25:81:1f:4b:db:6f:d6:e1:
e8:d4:16:00:2b:de:92:8c:48:00:12:9c:0e:78:01:32:16:b7:
b1:4f:52:e6:bb:9a:1d:de:13:92:2b:b3:8c:57:9b:7d:e9:c0:
54:b7:df:08:52:b4:27:d4:7b:69:54:23:e9:86:d4:cd:ed:93:
78:c3:7e:ef:ff:53:29:b0:7f:99:7a:51:02:e2:e8:c7:3e:05:
bc:06:ca:5f:52:7c:ca:3a:35:bf:20:e2:24:ee:0c:5e:ee:3c:
65:9b:a6:b8:41:56:2f:a1:0b:2d:77:ef:ab:3d:00:5b:59:2b:
f8:e5:f5:e2:20:68:cb:e3:97:86:ac:a7:e7:08:1a:76:70:d1:
4e:90:32:b6:47:7d:46:17:4b:20:2a:05:62:83:f7:0e:78:fe:
f1:e2:8c:46:0e:5f:3a:df:46:65:21:bb:bb:17:1b:d8:df:14:
44:2a:be:15:1c:b7:60:38:f7:cb:d7:5c:4e:79:ce:41:74:88:
fa:53:73:e8:8c:65:44:4c:78:7f:a1:75:53:c0:ce:f1:31:49:
ce:d2:43:78:bb:e6:6b:b7:4e:71:e2:f7:4e:6b:fd:f3:e6:61:
08:83:66:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:19 2025 by rpki-client