Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
File: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft (raw, json)
Hash identifier: zzeZYILZFDNBMTL6wQhjTNQh060dMpzNb3X/w32vAb8=
Subject key identifier: 16:8E:B6:9C:62:87:5D:EF:A4:48:C1:1B:5C:AC:16:FB:A7:6F:47:99
Authority key identifier: E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
Certificate issuer: /CN=F36EEB6BAF/serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
Certificate serial: CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
Manifest number: CA
Signing time: Mon 11 Aug 2025 05:21:44 +0000
Manifest this update: Mon 11 Aug 2025 05:21:43 +0000
Manifest next update: Wed 13 Aug 2025 05:21:43 +0000
Files and hashes: 1: 4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl (hash: kAKeVf0EGxFLPCOSfdoIvnzlQQCsDqXPAZDsiQ7NoYE=)
2: 70FA4310DCE111EF90F8E0A3762E951A.roa (hash: qc0AnixuJmucaaftQ/LyI87IbNHlxudRS98tlTGyyas=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 203 (0xcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EEB6BAF, serialNumber=E16533BAF90FDFE61F88207EDAE004FDCB52FA30
Validity
Not Before: Aug 11 05:21:43 2025 GMT
Not After : Aug 13 05:21:43 2025 GMT
Subject: CN=68997de8-f8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f9:bc:4b:c0:3e:a9:91:23:8e:73:66:5c:35:
72:f1:91:a6:a1:e3:97:bb:1d:77:f6:8c:c8:82:33:
bb:ab:c5:7a:0d:9a:42:5e:47:1e:f8:e9:40:bd:cb:
e8:cf:08:92:c1:84:ff:9d:01:42:17:cb:ae:a7:00:
31:da:ff:ce:71:42:37:17:2a:a4:f2:e7:0f:27:83:
af:42:6b:5e:37:55:05:d7:84:a4:92:32:cd:27:71:
b1:49:96:d9:dd:05:4e:b7:2b:26:ee:aa:ca:c0:4f:
6b:29:87:7d:7e:d5:7e:c5:28:e9:d9:80:8a:db:f6:
0c:ed:2b:5b:fe:05:fc:0c:96:aa:88:bf:d1:70:dd:
cf:16:5d:de:f6:01:f5:27:ac:34:e7:8e:8c:2e:10:
74:7c:d3:a3:ed:f1:f4:cd:b0:a3:a5:ab:5a:74:1c:
91:ca:93:26:7e:59:88:01:b5:2b:47:4f:c4:f3:60:
ae:b4:11:bd:f9:c9:b3:97:9c:51:29:1d:77:2b:53:
32:8d:c6:e6:10:26:68:78:8b:2f:52:46:1b:e2:b0:
71:ce:ba:a5:a8:bc:d6:44:67:4e:12:14:8d:68:e9:
9f:41:08:09:b1:31:79:4a:74:b3:76:04:6a:5c:2f:
6d:9d:d4:6d:49:c2:05:b8:1b:d5:82:b1:3e:31:f4:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8E:B6:9C:62:87:5D:EF:A4:48:C1:1B:5C:AC:16:FB:A7:6F:47:99
X509v3 Authority Key Identifier:
keyid:E1:65:33:BA:F9:0F:DF:E6:1F:88:20:7E:DA:E0:04:FD:CB:52:FA:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4WUzuvkP3-YfiCB-2uAE_ctS-jA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EEB6B/2AD08F1CDCDB11EFB46B417A762E951A/4WUzuvkP3-YfiCB-2uAE_ctS-jA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:40:d5:4f:ba:37:62:3e:65:6a:0f:6e:fa:d7:81:70:a8:91:
c0:03:06:6e:5d:34:ce:02:d8:c1:03:78:43:92:00:b4:8e:24:
4d:d3:ab:fa:c9:cb:78:70:56:41:74:ce:ce:6b:f8:8f:40:60:
2f:7e:9d:8b:b9:97:8d:22:1e:d1:2d:64:90:80:df:44:a3:37:
51:a8:7e:a1:6e:d5:bb:8f:ea:76:ea:4b:ca:8b:e1:dd:e9:10:
09:e0:14:c1:97:db:a9:07:3e:cd:03:d2:17:81:0d:3f:90:bc:
b1:ed:a2:59:24:ec:ab:74:9b:8f:d9:39:20:6b:8e:da:54:bd:
9b:e7:4c:cf:40:78:19:a1:dc:c0:de:90:52:6c:c4:c7:85:08:
75:c2:ff:71:c2:df:44:8e:51:62:b7:b7:d4:96:68:d9:51:ad:
f1:ac:e4:97:8b:32:a0:9d:eb:25:1d:f3:ff:63:8b:53:8b:cd:
84:be:a1:94:cf:ab:65:1b:eb:ed:e6:00:6f:45:57:a6:ba:d5:
bc:37:6a:40:2e:5c:f5:ab:13:59:8a:f6:a6:b5:3b:6f:5a:a8:
a6:dc:45:8c:d1:d1:ea:42:ee:5d:8d:15:d2:15:2d:fd:41:d5:
77:89:d9:e1:0f:cd:b9:f4:28:d4:d1:42:b4:76:0f:ba:8d:e0:
16:4e:56:ae
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUVCNkJBRjExMC8GA1UEBRMoRTE2NTMzQkFGOTBGREZFNjFGODgyMDdFREFFMDA0
RkRDQjUyRkEzMDAeFw0yNTA4MTEwNTIxNDNaFw0yNTA4MTMwNTIxNDNaMBgxFjAU
BgNVBAMTDTY4OTk3ZGU4LWY4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU+bxLwD6pkSOOc2ZcNXLxkaah45e7HXf2jMiCM7urxXoNmkJeRx746UC9
y+jPCJLBhP+dAUIXy66nADHa/85xQjcXKqTy5w8ng69Ca143VQXXhKSSMs0ncbFJ
ltndBU63KybuqsrAT2sph31+1X7FKOnZgIrb9gztK1v+BfwMlqqIv9Fw3c8WXd72
AfUnrDTnjowuEHR806Pt8fTNsKOlq1p0HJHKkyZ+WYgBtStHT8TzYK60Eb35ybOX
nFEpHXcrUzKNxuYQJmh4iy9SRhvisHHOuqWovNZEZ04SFI1o6Z9BCAmxMXlKdLN2
BGpcL22d1G1JwgW4G9WCsT4x9I9bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFo62
nGKHXe+kSMEbXKwW+6dvR5kwHwYDVR0jBBgwFoAU4WUzuvkP3+YfiCB+2uAE/ctS
+jAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVFQjZCLzJBRDA4RjFDRENEQjExRUZCNDZCNDE3QTc2MkU5NTFBLzRXVXp1
dmtQMy1ZZmlDQi0ydUFFX2N0Uy1qQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRXVXp1dmtQMy1ZZmlDQi0ydUFFX2N0Uy1qQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUVCNkIvMkFEMDhGMUNEQ0RCMTFFRkI0NkI0MTdBNzYy
RTk1MUEvNFdVenV2a1AzLVlmaUNCLTJ1QUVfY3RTLWpBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMQNVPujdiPmVqD27614FwqJHAAwZu
XTTOAtjBA3hDkgC0jiRN06v6yct4cFZBdM7Oa/iPQGAvfp2LuZeNIh7RLWSQgN9E
ozdRqH6hbtW7j+p26kvKi+Hd6RAJ4BTBl9upBz7NA9IXgQ0/kLyx7aJZJOyrdJuP
2Tkga47aVL2b50zPQHgZodzA3pBSbMTHhQh1wv9xwt9EjlFit7fUlmjZUa3xrOSX
izKgneslHfP/Y4tTi82EvqGUz6tlG+vt5gBvRVemutW8N2pALlz1qxNZivamtTtv
Wqim3EWM0dHqQu5djRXSFS39QdV3idnhD8259CjU0UK0dg+6jeAWTlau
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:33 2025 by rpki-client