Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
File: NokmebLgyF9VbZR98hkWGboqv-Y.mft (raw, json)
Hash identifier: 7eEyXCny1mHliqXFLUKaU8MnOycYN/0VToF7jp8xi6U=
Subject key identifier: 67:64:08:19:43:15:7C:0A:15:17:80:71:95:86:BF:89:BA:C2:70:10
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 04A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
Manifest number: 049C
Signing time: Mon 11 Aug 2025 03:10:48 +0000
Manifest this update: Mon 11 Aug 2025 03:10:47 +0000
Manifest next update: Wed 13 Aug 2025 03:10:47 +0000
Files and hashes: 1: NokmebLgyF9VbZR98hkWGboqv-Y.crl (hash: pk1gVQNq9vKfTgYBvd6kLEKuGrnuOB+WjQJMsjSmr+Q=)
2: 4E341B66638F11EEAE8F3A334AD9E6FC.roa (hash: u8+tUOrRrY4s158s9cBRWpl8atAcZbRDPn+y7aqq15Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1188 (0x4a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF, serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Validity
Not Before: Aug 11 03:10:47 2025 GMT
Not After : Aug 13 03:10:47 2025 GMT
Subject: CN=68995f38-b078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:a2:8e:b5:7a:9c:55:47:79:0f:83:9e:27:
bd:b9:18:a6:84:ff:06:80:34:f4:44:00:4a:4d:42:
65:e3:96:28:53:9e:63:57:91:c3:c1:95:74:09:2b:
80:57:2c:2a:92:b0:92:f2:0a:d6:fd:42:4d:ed:6a:
f6:7f:df:8e:2f:bd:43:30:b7:40:d5:f1:d2:7a:78:
91:51:0d:99:e8:54:f6:f6:2e:98:a3:f8:fa:e8:43:
18:7f:21:96:d0:df:4a:0b:da:53:4e:1d:a3:9c:29:
b1:18:87:88:71:e7:5d:d4:d4:94:55:01:68:f3:ed:
5d:8a:a5:45:d3:fb:72:84:c4:6b:85:d2:ae:a0:0f:
dd:09:76:62:32:6c:b5:29:cb:0c:58:26:69:b3:06:
04:48:e8:54:d3:98:8e:24:6a:59:4d:4e:6c:41:23:
4b:05:42:c6:b2:e3:ff:e3:3c:09:a5:62:8c:35:93:
3b:43:56:15:68:61:66:a1:24:0d:42:49:ea:89:22:
f0:56:4e:72:59:4b:b2:23:45:73:01:69:4f:73:91:
cd:0f:39:07:e7:9b:5c:27:08:4c:e7:42:82:39:81:
7d:86:63:bd:79:47:ea:c3:54:11:e2:d0:83:43:0e:
2f:87:2e:26:09:26:6b:29:85:c9:82:70:98:0e:08:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:08:19:43:15:7C:0A:15:17:80:71:95:86:BF:89:BA:C2:70:10
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:69:6f:fc:87:e7:74:5a:d4:8c:9e:c7:95:f2:e4:fa:fd:
aa:75:0d:53:cb:1c:b9:9f:34:40:f5:6d:7c:f5:56:76:95:84:
2a:fb:24:59:6e:77:9f:83:9b:4f:b5:5a:58:4d:b7:4a:79:a1:
9e:7c:8e:4c:82:12:d7:62:5b:95:3c:14:c7:8f:48:dd:ae:68:
6a:6c:88:b0:c8:73:d4:4a:c8:05:d6:e0:36:bc:36:3f:72:61:
ba:33:56:6f:4b:b4:9f:3c:40:72:c9:db:50:1c:18:d6:85:92:
2b:db:d1:9a:e0:28:7c:c6:9f:8d:74:c0:23:47:a3:ee:6c:68:
d7:50:9c:92:bc:31:9d:7e:9a:55:be:26:cd:b9:99:f0:9d:87:
ea:10:42:84:1e:1a:6b:b2:b1:56:66:bf:7e:1e:fd:5b:78:15:
45:60:bb:72:0a:d6:30:e5:c6:9d:03:3d:05:3b:89:f2:e4:c4:
47:bd:b9:3e:be:4e:34:41:91:0f:75:da:93:5b:1b:d0:ab:d4:
d1:ae:fb:44:d9:84:f9:ab:4d:0f:40:d2:d9:2d:99:e5:b0:84:
73:0d:2f:23:9a:3c:4e:91:c7:c8:24:f5:24:73:77:de:0a:da:
d8:f3:54:1f:52:6f:c0:b3:8d:93:99:7b:c7:78:e9:c8:30:f4:
9f:7e:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:37 2025 by rpki-client