Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File: HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier: cLtKznD/ueANUu1z8FWjjKkLdbe44Pvbr9RuvPCnsiA=
Subject key identifier: 8F:17:AF:F3:82:65:F6:0E:1E:84:42:AC:A6:92:21:E6:90:F0:7F:A3
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer: /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial: 0342
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number: 0341
Signing time: Mon 04 Aug 2025 03:44:44 +0000
Manifest this update: Mon 04 Aug 2025 03:44:43 +0000
Manifest next update: Wed 06 Aug 2025 03:44:43 +0000
Files and hashes: 1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: 7VOzyQxdcw3Kg1JbJ6C7iMqEEyBGZ9U4EOtImoukW20=)
2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 834 (0x342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Validity
Not Before: Aug 4 03:44:43 2025 GMT
Not After : Aug 6 03:44:43 2025 GMT
Subject: CN=68902cac-f214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:67:d8:49:4e:8a:de:f7:35:7e:52:50:40:7e:
35:f6:58:58:dc:b6:5d:85:53:c6:88:27:3d:41:d3:
e7:74:d5:b0:1a:b2:56:a7:0f:90:f6:a3:ec:b7:44:
e3:0b:19:fb:09:23:fd:e6:9d:cc:10:b1:ed:ca:f2:
2d:b4:5e:71:f8:17:e3:77:42:ab:7a:47:de:2e:a1:
8e:fe:60:d9:fb:a5:da:0b:97:0c:b1:1f:dd:d4:af:
26:31:b3:a8:55:e2:42:d8:8d:04:c5:cd:64:57:e5:
56:bb:81:43:8a:92:f1:d8:26:6d:f5:75:a1:fa:3e:
04:81:30:47:cc:a0:6b:d5:04:95:dd:a4:c0:0b:f2:
c7:35:d9:2a:c9:b5:f7:79:f1:91:ea:01:90:67:15:
24:16:30:89:67:45:6d:64:a9:d2:a0:93:c6:36:14:
ff:7a:57:10:7a:84:b9:7e:9f:58:a8:71:0b:9d:62:
ab:0b:33:81:de:b0:13:ee:3b:c9:db:82:63:74:f5:
b3:3f:34:41:9f:ab:b5:9b:94:99:30:fc:c6:8d:9f:
c4:34:e0:b2:01:8e:b1:ae:aa:98:b3:ee:bb:c6:eb:
68:67:1a:3d:f4:44:81:c0:53:73:8e:3f:cb:d3:b1:
1f:b8:a4:7b:be:d9:f3:4e:14:e9:a8:0c:57:8f:e3:
20:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:17:AF:F3:82:65:F6:0E:1E:84:42:AC:A6:92:21:E6:90:F0:7F:A3
X509v3 Authority Key Identifier:
keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:25:b3:f8:b5:37:e3:36:b8:91:5a:d1:6e:ad:ca:03:52:4f:
b5:ef:c6:31:c1:eb:9a:20:f8:26:cc:85:7a:f2:b0:e6:89:c9:
9c:9f:b0:84:95:c9:b1:19:c7:43:18:ff:ae:ca:19:1e:81:0e:
cb:f9:92:d3:47:3c:fa:32:88:66:99:d3:94:6d:4b:12:ae:31:
ac:96:c8:49:7c:c9:11:86:77:04:d2:70:0a:da:90:c7:ce:15:
8d:63:e8:00:2e:45:28:a2:75:12:c9:db:84:f1:77:e2:c1:0d:
3b:75:8c:c9:99:54:c0:91:e4:94:13:33:4b:bc:60:f0:4e:95:
5e:c4:7f:31:84:49:22:19:c0:36:3b:73:92:6e:2c:9e:de:73:
91:e7:47:09:ef:62:87:a1:a4:a0:01:2a:64:e6:5f:a7:ff:1a:
6c:52:f4:d3:bd:bc:3a:16:1f:ba:b0:dd:49:77:ba:57:e3:9e:
2c:15:41:a8:f9:ee:1e:31:61:55:cd:e4:a1:80:cf:01:84:38:
b4:94:1a:55:db:2c:1f:c7:d3:83:1b:c6:8c:54:a1:49:3d:8b:
8b:91:af:ed:04:5c:26:09:2a:03:c9:96:67:27:19:fc:05:52:
48:d1:e1:fb:b6:ae:3b:87:fa:9b:dd:99:e8:03:24:f4:7a:7f:
98:29:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:08:38 2025 by rpki-client