Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File: YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier: QDZVBzVJfJWTZWyi3wCSNNwFTdnUF0kWYCZ8rdfslMI=
Subject key identifier: 80:15:5E:AE:8C:FD:01:C2:40:FC:51:6D:C7:BC:BC:AB:64:A6:46:82
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer: /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial: 048A
Authority info access: rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number: 0489
Signing time: Wed 06 Aug 2025 03:03:42 +0000
Manifest this update: Wed 06 Aug 2025 03:03:41 +0000
Manifest next update: Fri 08 Aug 2025 03:03:41 +0000
Files and hashes: 1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: +dyKm6cWR/vXNdoynzsjCmL8gETmxciAcAWpjdm1Ncs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Validity
Not Before: Aug 6 03:03:41 2025 GMT
Not After : Aug 8 03:03:41 2025 GMT
Subject: CN=6892c60e-8eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:50:7d:ea:23:df:fe:ae:0a:01:03:83:2b:d3:
43:d5:0e:71:33:cb:f2:e3:fc:e0:f3:54:46:55:b7:
1b:5c:3b:48:a1:4c:23:39:20:c0:63:ca:72:dc:65:
73:f6:bf:f3:85:e4:cd:c7:c0:43:43:28:22:a9:98:
ec:6c:7d:eb:9b:f8:8c:32:1d:16:67:fc:24:0b:fb:
33:03:47:1a:7e:f4:ed:f4:65:92:da:0d:d4:c7:cb:
8c:cc:6d:97:7e:23:75:df:17:80:be:d8:c8:3d:16:
23:d4:f8:62:e8:fb:ba:e0:5b:3a:44:0c:cb:12:50:
6e:bf:db:13:68:9d:5c:10:dd:43:49:17:4e:a7:cb:
38:37:a2:9a:d1:27:84:73:3b:b5:76:38:2b:52:6f:
3c:c0:7d:2e:ad:22:ea:c0:f0:e3:6f:c3:e7:fb:62:
c0:c1:09:92:ea:57:0d:ba:5c:28:0c:f9:8c:70:27:
5f:10:93:fa:4b:48:2e:43:06:b1:9a:a7:d3:da:c1:
c4:34:a5:e0:65:4c:6a:09:af:8c:bf:75:a0:c5:60:
c6:d3:22:18:1b:56:a9:32:d7:17:6e:38:89:1f:fa:
aa:d4:92:6b:5e:2a:63:b0:31:a0:5c:d1:37:43:11:
cb:ed:a9:d7:5d:31:e5:ca:c1:1b:25:0f:5e:96:77:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:15:5E:AE:8C:FD:01:C2:40:FC:51:6D:C7:BC:BC:AB:64:A6:46:82
X509v3 Authority Key Identifier:
keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:97:8a:54:60:d1:9c:50:1e:bb:54:c5:c8:1d:0c:94:0c:
46:97:81:14:84:47:f4:61:94:ee:0b:6c:c4:ba:8e:5a:3e:e8:
06:37:35:de:d4:81:92:4b:33:a6:7a:81:87:94:ac:e0:4d:55:
47:d2:d9:25:2d:5b:a8:f8:83:de:55:46:a1:ff:6b:07:5e:b6:
d8:fa:8b:2f:77:4c:e5:3c:ae:c3:06:41:e9:f9:f3:15:df:e1:
3b:f4:cd:f3:5f:53:51:c7:9f:66:3d:f6:6c:a0:b6:33:34:c3:
1c:7f:d6:37:28:70:f7:5f:00:d7:d3:e7:3c:4b:44:52:5e:9c:
ea:de:ee:29:ef:df:ad:5c:85:4e:84:fb:99:4d:d1:df:ec:18:
14:45:22:6e:7d:9b:17:53:eb:70:50:55:b6:ca:ab:10:cc:de:
f7:9b:c3:bc:84:af:48:7c:1f:dc:82:fd:5d:bb:04:27:85:5b:
97:d0:d6:3a:80:f5:3d:6d:8a:d9:a1:ca:d6:a6:da:65:c3:af:
96:b4:d1:82:ee:42:f4:5d:14:5d:3c:2b:5b:75:e7:73:c4:f9:
57:f3:b6:1f:a1:9e:5f:cb:36:63:22:f0:5a:9b:52:5f:22:a1:
8c:4d:90:cb:2d:8e:80:d9:ce:c5:85:13:c4:1e:8e:3d:4a:43:
c5:3e:c1:88
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBIowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRFMkNBUjExMC8GA1UEBRMoNjIwNjBBMzkxNDFFNjFGRDdGODQ4NzI4MDFEOTJB
NEE4MDk4MEY2QTAeFw0yNTA4MDYwMzAzNDFaFw0yNTA4MDgwMzAzNDFaMBgxFjAU
BgNVBAMTDTY4OTJjNjBlLThlYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9UH3qI9/+rgoBA4Mr00PVDnEzy/Lj/ODzVEZVtxtcO0ihTCM5IMBjynLc
ZXP2v/OF5M3HwENDKCKpmOxsfeub+IwyHRZn/CQL+zMDRxp+9O30ZZLaDdTHy4zM
bZd+I3XfF4C+2Mg9FiPU+GLo+7rgWzpEDMsSUG6/2xNonVwQ3UNJF06nyzg3oprR
J4RzO7V2OCtSbzzAfS6tIurA8ONvw+f7YsDBCZLqVw26XCgM+YxwJ18Qk/pLSC5D
BrGap9PawcQ0peBlTGoJr4y/daDFYMbTIhgbVqky1xduOIkf+qrUkmteKmOwMaBc
0TdDEcvtqdddMeXKwRslD16Wd2jZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgBVe
roz9AcJA/FFtx7y8q2SmRoIwHwYDVR0jBBgwFoAUYgYKORQeYf1/hIcoAdkqSoCY
D2owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0RTJDL0Y0Qjg3RDM4RkQ2NTExRUNCRTFFMDJFMkYxMjIyNDY4L1lnWUtP
UlFlWWYxX2hJY29BZGtxU29DWUQyby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lnWUtPUlFlWWYxX2hJY29BZGtxU29DWUQyby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzRFMkMvRjRCODdEMzhGRDY1MTFFQ0JFMUUwMkUyRjEyMjI0
NjgvWWdZS09SUWVZZjFfaEljb0Fka3FTb0NZRDJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUOJeKVGDRnFAeu1TFyB0MlAxGl4EUhEf0
YZTuC2zEuo5aPugGNzXe1IGSSzOmeoGHlKzgTVVH0tklLVuo+IPeVUah/2sHXrbY
+osvd0zlPK7DBkHp+fMV3+E79M3zX1NRx59mPfZsoLYzNMMcf9Y3KHD3XwDX0+c8
S0RSXpzq3u4p79+tXIVOhPuZTdHf7BgURSJufZsXU+twUFW2yqsQzN73m8O8hK9I
fB/cgv1duwQnhVuX0NY6gPU9bYrZocrWptplw6+WtNGC7kL0XRRdPCtbdedzxPlX
87YfoZ5fyzZjIvBam1JfIqGMTZDLLY6A2c7FhRPEHo49SkPFPsGI
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:49:20 2025 by rpki-client