Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: 1qfC9k5HebkpMoOF6uCr3t8oMHvR9eDLDnFiaUDQc60=
Subject key identifier: 3C:47:04:85:37:15:E5:68:CC:B7:D9:1E:E0:B4:3B:CE:98:0E:AA:14
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 0631
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 0630
Signing time: Mon 11 Aug 2025 02:22:25 +0000
Manifest this update: Mon 11 Aug 2025 02:22:24 +0000
Manifest next update: Wed 13 Aug 2025 02:22:24 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: ZphtSi/rLbag1r35GmbVQ7IHiODoEKRMXG3OzxekiZY=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1585 (0x631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Aug 11 02:22:24 2025 GMT
Not After : Aug 13 02:22:24 2025 GMT
Subject: CN=689953e1-ec3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:bf:58:78:73:bd:76:9c:d3:ef:48:66:d5:
72:ce:b8:7a:0e:c9:e5:02:40:38:19:de:f5:27:b8:
ef:ee:f1:6c:7d:af:e9:00:d0:f5:7f:53:dc:00:e9:
60:37:4b:12:f5:53:44:1e:0c:87:10:d4:14:e5:b2:
7a:69:a6:5e:66:cd:8f:27:01:df:20:d4:42:9c:0c:
a1:24:84:87:3c:e6:83:b5:54:9f:52:a4:f6:d7:3b:
89:17:3d:fe:2a:2f:96:0e:b2:f1:61:be:fa:0d:03:
4f:bf:a3:e0:3b:dc:b2:d9:03:d5:42:2e:70:c8:eb:
59:a6:57:20:d4:cd:aa:cd:0c:41:db:32:72:ae:9a:
b8:e6:d2:de:c3:d7:35:d8:29:eb:6d:90:02:55:6c:
e8:a5:64:63:8b:b6:7d:94:11:f2:fe:cf:82:f5:55:
9c:97:1b:4d:ac:61:c1:fd:10:d3:01:57:10:a0:04:
98:ca:45:ac:29:87:2f:41:ad:c3:73:56:3a:c0:d1:
24:8f:a9:89:5d:82:9d:58:48:a4:28:e8:39:b1:5c:
fe:75:27:e2:d1:96:16:44:1b:bf:fd:5d:33:7e:1f:
55:6e:70:64:c0:6b:d6:69:18:c1:73:08:21:ab:84:
47:3a:67:9a:14:a8:19:9b:53:86:5b:09:89:c3:76:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:47:04:85:37:15:E5:68:CC:B7:D9:1E:E0:B4:3B:CE:98:0E:AA:14
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:9e:ad:a2:e1:a8:47:a8:b2:76:ae:ea:9e:23:74:bf:f2:71:
bd:d9:75:e8:e3:da:7e:23:f2:8d:0b:c2:1e:eb:68:03:0f:45:
69:a3:34:7d:56:7d:fb:f1:55:c1:2f:9c:e5:e8:80:f0:4f:ba:
4d:1f:ff:44:29:22:2c:11:02:5f:b8:58:97:88:45:12:5f:b4:
e9:4b:db:02:93:de:cc:62:51:73:a5:70:4f:cb:53:07:9e:c1:
6e:c9:d6:a1:3a:b9:ad:8c:09:00:08:9f:64:a2:ae:b6:76:54:
52:51:07:7b:b4:a3:6f:bf:e8:03:9a:a8:78:08:87:3c:8a:40:
91:94:b3:f9:0a:5d:fb:53:e4:71:2a:a4:99:a3:f5:55:9c:ee:
db:47:2e:1d:d1:43:66:ce:4c:6f:11:3e:6f:54:f9:78:a6:14:
4d:0c:d2:3c:97:69:1d:8f:1e:35:ba:c5:12:4b:70:bb:53:d1:
54:42:f3:be:6c:c4:8b:34:43:e8:24:ff:22:11:e9:78:54:3d:
d5:b1:be:92:c4:99:94:85:be:1c:09:fa:0d:a6:37:b4:28:06:
d5:77:e0:81:23:6c:77:b4:01:2f:c9:a6:63:30:82:22:2a:db:
aa:0e:4b:9e:82:7c:fb:45:55:93:56:e6:d4:47:0c:cd:a5:01:
21:20:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:29 2025 by rpki-client