
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
File: _IwxIe9n77axzoOCjjTdt-4B7nc.mft (raw, json)
Hash identifier: 7+2rg2crhia532+Jx0NwpHTbSst2WV70bsEocyF5sbM=
Subject key identifier: 95:CB:EB:A9:73:F2:6F:DD:54:3D:27:5C:83:D0:54:32:7B:81:3A:B9
Authority key identifier: FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
Certificate issuer: /CN=F36D2FA4AF/serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Certificate serial: 0230
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
Manifest number: 0230
Signing time: Fri 08 Aug 2025 04:23:41 +0000
Manifest this update: Fri 08 Aug 2025 04:23:41 +0000
Manifest next update: Sun 10 Aug 2025 04:23:41 +0000
Files and hashes: 1: _IwxIe9n77axzoOCjjTdt-4B7nc.crl (hash: h54kp2v5GuS4bIXxWE8UJLQEp2kIg0Gsjvi3Y6aVkiw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 04:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D2FA4AF, serialNumber=FC8C3121EF67EFB6B1CE83828E34DDB7EE01EE77
Validity
Not Before: Aug 8 04:23:41 2025 GMT
Not After : Aug 10 04:23:41 2025 GMT
Subject: CN=68957bcd-919d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:9f:e3:57:13:8c:01:a8:49:2d:d4:52:96:
ef:7d:98:d9:c5:30:b3:bb:6d:f1:69:57:8a:17:18:
fa:33:12:4e:bd:21:b2:94:fb:c7:db:1c:08:59:7e:
92:65:b2:32:2c:eb:2b:e7:17:db:8e:2a:6f:04:8d:
0d:05:af:48:15:73:3a:b3:64:47:79:a8:41:10:30:
c4:2a:0f:5c:c7:c8:dd:3c:8d:77:04:87:98:2b:90:
3b:b4:b0:62:59:49:fd:cf:0e:4e:8a:91:bd:c1:9a:
91:b7:18:8d:47:9c:8a:ba:fe:03:f7:95:84:77:57:
8c:ad:71:15:4f:54:e0:35:43:89:cc:3b:db:e0:34:
90:b9:3e:65:06:c7:90:f7:26:71:ad:99:b3:bc:97:
eb:cc:ca:e6:15:01:e8:7a:ed:0e:16:3c:64:e7:de:
e9:bf:72:94:fa:87:43:53:86:ee:6b:d3:30:3c:a7:
12:9d:7d:a7:c0:9f:35:b9:3d:96:61:b4:d9:9e:a3:
d8:51:31:c2:f6:a0:a5:f6:ff:88:30:3f:9a:45:a8:
e5:6f:68:98:71:74:a3:31:7d:6d:92:fd:1a:86:73:
a8:b4:94:72:c0:93:14:72:fc:46:e1:2e:59:c3:e8:
96:9a:3f:78:70:ca:84:2f:ea:2f:ff:8d:8b:3d:d3:
b7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CB:EB:A9:73:F2:6F:DD:54:3D:27:5C:83:D0:54:32:7B:81:3A:B9
X509v3 Authority Key Identifier:
keyid:FC:8C:31:21:EF:67:EF:B6:B1:CE:83:82:8E:34:DD:B7:EE:01:EE:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_IwxIe9n77axzoOCjjTdt-4B7nc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/28EF067EC9A911EE801F6F7B775412E6/_IwxIe9n77axzoOCjjTdt-4B7nc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:38:ec:fe:5c:4a:98:0a:2c:5d:9f:b8:02:d9:ad:16:20:28:
4f:3c:a4:f5:f8:bd:8c:31:4f:0f:38:df:ff:98:cf:a9:68:b3:
62:ce:e8:0a:05:7e:aa:be:1d:7e:ac:75:e1:49:9c:85:73:76:
34:64:e8:ac:c8:b6:df:42:f6:6c:f9:4c:94:a4:8a:9a:f0:d5:
f9:39:15:ea:8c:89:8c:c0:79:40:68:d0:b9:ac:bd:7e:a1:ab:
1a:c9:61:30:07:88:95:18:9c:fd:8e:d5:8c:0f:09:22:8b:bb:
75:81:7d:79:eb:32:5f:b5:8f:ea:b7:39:59:4e:00:f4:df:22:
97:ef:5d:b5:a5:21:be:94:34:f0:52:69:b6:da:95:51:b5:c3:
15:bb:29:65:4c:bf:b8:4d:66:6d:74:6d:5c:aa:ee:bc:cd:02:
f0:f1:81:e7:ef:80:34:08:d3:91:79:2e:aa:fd:37:16:02:08:
2e:b3:5f:b3:0f:70:d7:95:75:a5:17:ab:b9:24:27:0c:7f:ee:
7a:2c:e1:3b:e4:0c:c4:82:b0:8c:49:38:a7:c0:cb:09:f1:a2:
ab:f7:3f:7a:db:95:61:f9:55:27:83:b2:70:51:ed:d6:6a:f2:
50:72:45:1a:d2:c0:8d:ad:e9:14:12:ab:6a:70:58:40:40:dc:
25:d0:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:50 2025 by rpki-client