Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier: hygGm3Luk0yK2NThe1lvjTmlUN5eXtLTLcwok8RUZ2c=
Subject key identifier: F2:49:47:A4:59:06:23:95:9A:C0:2A:0C:45:D2:90:FB:6F:A0:9A:BA
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer: /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial: 040A
Authority info access: rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number: 0409
Signing time: Sat 14 Jun 2025 03:15:40 +0000
Manifest this update: Sat 14 Jun 2025 03:15:39 +0000
Manifest next update: Mon 16 Jun 2025 03:15:39 +0000
Files and hashes: 1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: u0P9JD64KUzvYMkdUGhNf+ZIY+GyGL0MIBEko69kgv8=)
2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Validity
Not Before: Jun 14 03:15:39 2025 GMT
Not After : Jun 16 03:15:39 2025 GMT
Subject: CN=684ce95c-23a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:80:21:07:e7:7a:95:cb:4c:61:32:cf:b9:
2d:0e:8d:2f:4f:30:8c:a9:66:8d:59:49:4d:8c:16:
f0:a0:d6:ad:b9:77:64:a0:c8:b8:45:1c:00:52:4f:
6b:a4:3e:d1:4d:32:3c:4e:ab:34:33:39:14:d9:88:
94:a1:34:28:5f:9e:42:75:21:0b:b5:f8:ce:3c:b9:
3f:d1:d3:3e:1e:4d:ff:87:34:70:fb:5f:38:c6:ff:
ae:38:8a:0a:24:de:5c:4d:04:86:41:4d:dc:bf:0e:
f9:7a:8b:ba:01:17:77:38:27:23:e8:f3:72:a9:10:
a6:9b:97:69:7d:90:f4:5a:d3:49:50:05:4e:07:e6:
ef:39:dd:ae:55:fd:e7:c7:41:57:2c:d9:b3:8e:58:
46:59:21:31:cc:af:87:af:d9:6b:19:bf:2f:9d:ad:
6f:bc:d2:63:d1:cb:bb:21:48:d8:a1:0e:23:c3:b6:
03:ca:1b:8b:9d:95:c6:a8:51:40:6b:8a:5a:9b:1e:
36:4a:71:fe:67:74:6d:8a:a7:fa:9f:60:ab:10:53:
b4:70:b7:3c:1c:7a:72:20:07:2b:50:74:3b:9f:b5:
00:b9:18:8b:32:d0:cc:c9:36:12:79:a9:a6:7a:70:
50:af:d3:09:21:77:7b:48:b4:46:dc:1f:12:fa:1b:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:47:A4:59:06:23:95:9A:C0:2A:0C:45:D2:90:FB:6F:A0:9A:BA
X509v3 Authority Key Identifier:
keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:25:22:c5:51:8a:00:ee:e5:32:6b:73:c4:68:ad:d4:ec:fe:
a7:41:d6:0d:20:73:12:a2:b7:78:a0:a6:05:24:53:b7:31:29:
82:41:25:3d:73:c5:77:5a:70:cf:39:36:c1:55:63:0d:c0:26:
a5:66:a1:64:3d:bf:8f:35:6b:7d:9c:a3:25:61:f9:9b:9e:e2:
ee:f6:dd:0c:7f:f7:2f:ca:e5:80:4f:a9:58:8f:3f:91:35:ce:
77:72:9d:49:35:42:c8:21:fb:a1:f1:55:a7:8e:b6:45:71:3d:
f1:71:12:d4:da:b0:01:3c:5e:85:3e:8d:38:1f:10:bd:2d:83:
1b:73:de:b5:cc:bc:73:fc:7d:9f:52:93:1c:89:a1:3f:c4:57:
0c:c2:b9:67:d9:85:3c:f0:60:48:5d:78:f6:58:3a:9b:da:4a:
53:5f:11:d2:e5:40:0c:73:1c:19:a1:fa:c7:45:b3:cf:4e:7e:
e8:5f:6c:1f:09:7c:99:4f:58:07:c8:73:d1:5b:b7:aa:9b:b0:
d7:d5:29:2c:5d:56:85:ae:46:e5:17:86:74:e7:e5:fd:fc:e0:
dd:a2:c0:69:c1:4e:ed:b6:68:50:c5:40:64:f9:21:43:fc:75:
82:57:08:71:71:6b:38:e8:44:64:c5:fc:f9:d7:17:d6:b1:4d:
b0:88:3c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:21:11 2025 by rpki-client