Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: CdC3HAehWuvFbFogriII7RxpDWFQ9tGJf4PiBoidV8c=
Subject key identifier: 65:6B:D5:2A:8F:7D:E9:71:A4:89:CF:A1:AF:6B:74:5A:77:E9:66:87
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0E68
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0E67
Signing time: Tue 17 Jun 2025 00:53:08 +0000
Manifest this update: Tue 17 Jun 2025 00:53:07 +0000
Manifest next update: Thu 19 Jun 2025 00:53:07 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: AEB5HUH5j1ufPPMrEqdi1vfLQ11TD5NwEHAn9bYEy2A=)
2: 36DF01DC39AA11E59B5A3D32F8AEA228.roa (hash: KB4karfPnV5f0+SNVM+1NuYPsr7TtEZ+5kiyQgRzqTE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3688 (0xe68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Jun 17 00:53:07 2025 GMT
Not After : Jun 19 00:53:07 2025 GMT
Subject: CN=6850bc74-6a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:94:00:64:57:a9:3d:b8:fe:97:e9:2d:ed:
e1:bf:a9:a1:e7:fa:69:d6:df:49:b2:46:c2:6f:be:
23:87:ad:3a:10:e5:e4:95:61:9c:3e:73:8f:07:6d:
55:c2:71:24:14:25:f3:6d:94:c9:4c:05:c9:20:6f:
42:8b:23:18:bd:cb:dc:c8:93:ea:a3:83:7c:16:cd:
38:85:e9:8e:75:d8:ab:57:22:6f:91:e2:8b:52:c8:
5c:31:56:d5:28:51:cf:d2:9b:4e:cc:cb:53:99:ee:
9a:c4:9f:64:ec:bb:b7:8b:a9:02:7b:a6:b5:53:a3:
43:e1:83:2b:38:00:66:00:cb:b9:9e:6e:10:48:db:
b4:46:50:1c:46:fc:75:67:78:1e:6e:b2:3e:40:02:
72:8b:bc:03:30:fd:97:5c:94:6e:02:e5:7f:f1:c5:
eb:b3:ef:cb:c0:5a:81:68:dc:29:77:11:43:9c:66:
45:69:be:78:4c:33:bf:ff:96:32:30:a0:32:f9:43:
78:75:45:0f:61:34:a1:a6:19:45:66:44:cf:f9:10:
b4:42:d7:54:d9:90:1d:17:c5:69:22:00:c3:37:f5:
a6:85:0b:6a:e4:f4:50:9b:45:ad:30:82:14:bb:6e:
fa:ea:00:cf:85:ca:ca:13:c0:10:6b:2f:4c:13:c7:
83:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:D5:2A:8F:7D:E9:71:A4:89:CF:A1:AF:6B:74:5A:77:E9:66:87
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:ae:5a:e8:d2:1d:ed:ba:66:29:99:37:e3:cd:4d:7f:d5:6c:
42:68:c0:0c:e2:7d:1f:3e:b4:b9:05:fa:88:e5:c4:87:1c:1a:
49:01:93:21:c7:5c:ad:df:eb:90:b6:63:36:9d:d6:2a:c4:d2:
6b:bb:7c:de:4a:5a:c7:6f:a7:c4:65:02:82:c1:82:57:5b:fa:
29:90:47:44:d1:84:e2:f0:80:f3:86:d2:77:9a:a6:9b:c8:66:
44:af:c3:f7:3e:78:70:ab:af:10:50:a4:3e:43:a0:db:00:6a:
5a:ec:5d:df:62:82:6a:c5:61:e0:3f:15:10:7c:d9:77:c9:a0:
2a:05:92:80:b4:e2:1b:e3:c5:ec:90:4c:f8:29:7c:69:3c:ca:
2f:c7:30:e7:11:21:1e:dd:2b:6b:44:15:89:73:fc:41:0a:86:
8a:86:d8:6b:d3:1d:ee:67:b7:0c:42:7a:63:29:b6:fa:32:00:
a2:72:ab:66:1a:e8:f0:87:79:b9:84:3d:1c:cf:5d:dc:4b:14:
7e:18:a4:25:8f:27:44:25:7d:f0:37:46:8a:aa:e6:7a:88:53:
77:63:f3:f6:a4:45:79:26:67:b6:f8:b6:74:24:fd:7c:d7:20:
9f:3e:c0:99:39:d8:c1:f0:4b:8d:bc:27:98:30:2a:3d:a3:8f:
cb:dd:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:55:06 2025 by rpki-client