Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
File: c_ReAoX9cOku_fc2CqXtcWKLafw.mft (raw, json)
Hash identifier: ETHOlxmFWOMWjtCW1GCrRLl1C/vOc/1yiHWT3Aqokf0=
Subject key identifier: 70:93:4C:8F:02:CF:CD:49:58:CE:29:C9:9E:04:97:E8:D4:72:F5:A9
Authority key identifier: 73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC
Certificate issuer: /CN=F36ED8A8AF/serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
Certificate serial: 9B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
Manifest number: 9B
Signing time: Sun 10 Aug 2025 05:24:13 +0000
Manifest this update: Sun 10 Aug 2025 05:24:12 +0000
Manifest next update: Tue 12 Aug 2025 05:24:12 +0000
Files and hashes: 1: c_ReAoX9cOku_fc2CqXtcWKLafw.crl (hash: hcDqjPjriNWQ7aihy1/2obUrBhgGoZB3UDLxVxhxUxY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155 (0x9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED8A8AF, serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
Validity
Not Before: Aug 10 05:24:12 2025 GMT
Not After : Aug 12 05:24:12 2025 GMT
Subject: CN=68982cfd-9b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:05:86:a9:65:af:12:d6:a6:ad:09:c0:b5:1c:
34:61:c0:07:34:1e:40:6b:69:d0:d7:1b:4c:cf:a0:
ea:36:39:d2:a2:a1:62:04:0d:62:65:44:cd:15:da:
23:db:27:32:ca:c4:50:2d:80:24:81:04:37:09:44:
34:87:2c:cf:7f:fb:f9:00:e4:b7:3b:f3:da:3f:09:
51:d0:e2:cc:43:d5:3a:6b:4c:5d:b2:35:d7:70:da:
30:c0:b6:98:36:a7:04:10:ce:ec:e5:a7:42:98:bd:
82:74:7f:82:3f:d6:21:9f:00:3e:7f:b5:a1:0f:40:
9b:27:2c:9b:e9:de:45:b8:19:48:3d:56:05:70:60:
e7:f0:b8:35:bd:a7:79:f7:4a:0d:25:74:6f:2c:f7:
84:ac:56:6a:79:fe:7d:97:ab:59:42:b7:4d:71:23:
d6:fd:06:4a:e5:b4:d6:69:f8:1c:41:5f:cd:50:20:
ca:82:b4:83:86:93:77:51:03:01:01:42:8b:65:95:
0e:d3:bb:a8:f8:ab:8a:61:42:c7:80:96:17:aa:c3:
30:61:e4:30:f7:46:2a:c2:9c:fc:42:22:ab:16:2a:
8a:56:93:89:18:c4:e3:ec:12:40:6a:28:8e:18:fd:
3c:df:e8:a5:2d:16:91:8b:e0:25:e8:e2:ba:ff:65:
a5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:4C:8F:02:CF:CD:49:58:CE:29:C9:9E:04:97:E8:D4:72:F5:A9
X509v3 Authority Key Identifier:
keyid:73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ea:a0:f2:60:b7:c3:12:f6:f1:ea:0a:dc:0d:9e:b4:e0:86:51:
ec:c9:77:22:eb:02:9c:16:69:bb:a3:7d:e3:14:ab:64:17:1a:
9a:ee:08:14:f6:d0:c7:83:f8:41:02:b9:a0:03:51:a8:d4:09:
ce:44:d9:b2:e8:6c:9b:46:23:7c:82:5d:83:c4:02:1c:12:bd:
27:92:c7:02:58:e9:18:a6:9c:7f:33:fc:01:56:c8:53:95:54:
aa:0b:9b:06:f3:fb:09:f9:55:04:31:bb:9e:65:89:05:47:48:
58:c4:91:4d:a5:96:ce:d3:9d:c0:c5:67:db:94:85:d9:40:08:
3e:a5:e2:23:27:fc:f8:22:ed:c1:25:05:bf:52:fa:5a:84:f4:
f7:a2:46:0c:c9:45:ae:df:69:10:2f:7e:33:02:9f:bc:07:46:
ad:92:1e:d4:69:3a:71:44:a0:d3:f7:a8:be:e7:6a:1d:bb:ad:
68:f4:98:ac:25:11:72:26:f7:ad:da:11:fc:0d:83:f9:47:b9:
dd:e2:3a:65:4d:34:3f:b4:5a:e0:5e:29:bf:8d:ff:f1:d7:b6:
ac:74:60:76:34:9e:e9:7e:ff:4f:1a:b5:de:28:99:1b:36:77:
de:c1:e5:09:38:41:f4:93:0c:16:39:36:c7:cf:33:98:d2:b9:
49:66:e9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:57 2025 by rpki-client