Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: YdeFxigN3o5U4t4fSjJaoi+0TKFbtmH8yWbgux/QqC8=
Subject key identifier: 71:8F:77:3B:E7:21:63:E2:7A:52:00:4C:FA:78:BD:5F:E6:DF:41:C5
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 03AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 03AE
Signing time: Thu 07 Aug 2025 03:30:12 +0000
Manifest this update: Thu 07 Aug 2025 03:30:11 +0000
Manifest next update: Sat 09 Aug 2025 03:30:11 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: 8H40xni9kkh7in59fp/2tsdCawAAJKUXG/X6J4L1BbI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 03:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 943 (0x3af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Aug 7 03:30:11 2025 GMT
Not After : Aug 9 03:30:11 2025 GMT
Subject: CN=68941dc4-3e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:15:01:cf:5d:de:ce:1a:79:a9:78:9f:50:59:
05:65:82:f5:48:52:c3:8e:b1:56:89:0d:83:e9:c5:
06:be:78:d1:75:dc:ba:da:a8:74:1c:63:63:fc:28:
ae:29:c9:d8:07:31:79:8f:61:13:e5:7b:04:d4:df:
e7:11:f0:fb:26:d5:07:42:2e:88:28:59:80:0c:a2:
c9:8e:3f:85:08:23:64:38:58:90:46:68:8c:c6:63:
cc:7f:39:14:88:ea:c1:d9:99:ba:9e:a9:4f:e9:89:
dd:83:33:60:7a:8b:b1:97:2f:53:79:b1:49:32:78:
f5:47:0f:c4:d2:78:c2:a6:88:b3:5c:63:79:38:8b:
3e:bd:48:b2:7c:6b:e7:4a:69:e1:99:2d:08:57:f9:
36:02:09:8d:34:83:6b:f1:21:51:0d:20:08:65:f5:
de:e7:46:fd:a5:0e:22:02:24:27:b2:88:32:3b:f3:
49:58:f3:b1:ad:56:10:1a:55:d8:ac:ce:65:c2:c3:
60:b3:e2:02:7f:4f:0a:40:4b:9f:8d:ef:37:08:f0:
95:1a:47:07:04:32:1a:c4:3c:60:60:7c:a9:2d:2e:
e9:18:4b:1e:8c:b7:6e:49:f6:f7:e3:9e:c6:71:33:
f1:9b:e7:31:03:57:14:9e:0e:4a:b9:07:0f:13:1c:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8F:77:3B:E7:21:63:E2:7A:52:00:4C:FA:78:BD:5F:E6:DF:41:C5
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
93:8f:d9:22:e4:4f:0a:27:1a:bf:f6:a7:9d:d2:f2:0a:43:9d:
90:09:4c:b8:8c:4b:de:8f:94:34:c7:0c:db:5c:0f:9a:89:af:
a7:8b:79:f7:5e:45:02:c2:43:66:95:20:2e:83:7f:53:87:dd:
1c:18:bf:10:9e:fb:69:c1:f8:29:4d:97:94:d2:dc:c2:03:96:
20:57:df:61:da:27:97:c7:3d:a5:17:30:24:d0:9a:5e:89:ba:
d6:62:ae:3f:f1:02:63:bc:15:06:4d:cc:7a:15:04:37:91:3f:
19:70:a3:53:ac:3b:fd:7f:4c:97:49:31:ed:a3:58:13:81:77:
cf:02:d5:d4:86:1e:c0:47:03:2e:a1:45:b0:ec:4e:85:3d:c4:
04:30:e7:4a:5a:3b:64:39:ad:82:9c:7c:8e:ba:25:31:70:61:
00:2e:12:0a:df:c1:5d:85:62:4c:9f:51:f8:11:24:ad:13:59:
d8:7d:a9:2a:12:e9:58:7c:92:63:af:1e:1f:f0:71:a0:0f:fc:
12:ac:72:32:5f:07:13:3f:eb:0b:31:f1:b4:5b:83:09:25:b5:
b9:ce:60:2f:3b:0a:9b:56:54:73:1d:5c:9a:90:73:ae:69:72:
93:8c:6d:08:09:cc:96:18:08:3c:8a:13:e1:78:76:0d:60:1f:
f7:69:6f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:15:15 2025 by rpki-client