Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: zrV5P9a4onhw0PCQ7OfOs2BZNhxMO3gsP2JKJ42UzeQ=
Subject key identifier: 73:21:1E:EF:11:0C:B7:7D:E9:FE:8D:A7:E2:B9:F4:1B:17:40:16:5F
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 05E6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 05E4
Signing time: Mon 04 Aug 2025 02:28:15 +0000
Manifest this update: Mon 04 Aug 2025 02:28:14 +0000
Manifest next update: Wed 06 Aug 2025 02:28:14 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: mXIx8nkLv5a3jDIBOGYe+Kso8szOhNRnCzdpX6VolTc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1510 (0x5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Aug 4 02:28:14 2025 GMT
Not After : Aug 6 02:28:14 2025 GMT
Subject: CN=68901abf-d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:bd:4a:17:c8:3b:44:d6:d9:11:74:cf:83:
ac:20:50:1c:7a:3e:21:e1:9f:13:84:9d:b9:f0:c3:
46:cc:35:d9:56:37:ec:c5:18:91:e7:22:41:cb:26:
ce:86:bc:69:69:f5:2f:4e:3d:07:dd:23:81:3f:8c:
85:99:a9:06:6e:54:f8:b8:4c:ca:b0:60:de:c4:88:
11:65:c5:40:6b:62:a4:88:b4:bb:08:22:cd:2c:f7:
3e:82:74:66:9b:d6:85:d9:03:18:cd:7e:5a:cf:f7:
32:cd:77:f0:ed:01:8b:f7:d5:84:84:2d:e1:27:9c:
b0:ea:62:f7:c6:ad:79:7c:b2:b2:5a:fc:51:5c:56:
5e:88:f5:12:87:80:9b:fc:e7:4c:eb:5c:7d:e3:58:
f4:96:f5:24:45:87:39:07:d7:78:3b:62:5d:2a:18:
50:ef:e8:36:a2:47:14:3e:24:aa:58:29:1a:a5:99:
0c:1f:00:28:1e:9c:57:85:9d:56:39:17:cf:39:8f:
b8:a0:30:a9:7c:eb:64:53:52:34:26:c1:43:73:d0:
dd:45:e1:d1:b0:0e:e8:b8:62:ae:03:70:ac:91:9f:
77:94:86:1b:c8:d9:cd:44:2a:68:c5:e2:cd:81:56:
6a:7f:cd:7f:6f:ea:13:d4:7b:4f:a6:ce:e8:9d:e5:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:21:1E:EF:11:0C:B7:7D:E9:FE:8D:A7:E2:B9:F4:1B:17:40:16:5F
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:5c:d0:09:54:77:d1:0a:d3:98:60:6d:7f:09:00:0c:d3:af:
ca:58:64:fd:23:37:90:01:ce:d3:b0:a6:56:16:66:66:70:1a:
5b:67:51:90:14:be:32:fd:6d:a4:d8:8c:62:73:af:74:a5:23:
38:55:5d:c6:9d:03:77:39:96:f2:20:f6:12:b9:8f:db:0d:08:
d7:81:48:08:23:9d:b4:13:ba:1e:29:8c:0e:0d:5c:d3:8e:0e:
d1:c1:e1:f9:ae:90:7d:b3:e8:51:fc:97:87:b2:e5:d0:cb:45:
29:27:fa:e1:e5:53:7b:38:60:c6:c1:fa:4f:a2:58:b3:d1:da:
82:a2:f4:d5:11:17:4b:6f:c9:4d:68:17:f2:4c:c4:46:8e:0d:
f2:b5:0b:cc:43:c6:77:9f:de:a7:da:6b:80:3f:bb:9c:37:9e:
ff:81:b5:e4:24:16:61:7f:8a:f3:17:51:eb:f9:c5:cf:e6:9a:
90:61:b3:96:09:e3:24:cf:98:4a:20:ef:fc:60:a8:b4:85:2c:
23:c2:fb:c1:22:cd:19:97:d8:41:1d:a4:6b:c0:9d:84:44:50:
27:9b:ad:1d:c7:7f:f0:66:5f:39:5f:c6:7a:81:27:d6:05:28:
8e:10:9a:21:56:9a:5d:0d:87:20:38:9d:ee:14:2f:95:c1:3d:
34:fb:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:32 2025 by rpki-client