Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: CtYZmqQY0WKXHqK3wrZbXzzyhogZ3D8QOZX5MCISPsA=
Subject key identifier: 42:DA:3C:F7:08:C9:41:80:FE:E8:56:A7:9B:8B:02:C4:A4:CA:F9:67
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0E9D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0E9C
Signing time: Fri 08 Aug 2025 00:53:08 +0000
Manifest this update: Fri 08 Aug 2025 00:53:07 +0000
Manifest next update: Sun 10 Aug 2025 00:53:07 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: TxXuX1LXr83AlX0UZodlbFo2SSs/JrYRLzZGH9tBLZg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 10 Aug 2025 00:09:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3741 (0xe9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Aug 8 00:53:07 2025 GMT
Not After : Aug 10 00:53:07 2025 GMT
Subject: CN=68954a74-9068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:05:ae:a9:53:55:c5:39:50:5c:2e:b5:cb:
0b:09:ea:01:19:cc:46:ad:a9:de:bf:12:04:84:b0:
36:fb:f7:5c:43:4b:f9:43:2c:1c:b2:24:02:5c:d4:
10:8d:27:65:2d:eb:9f:81:19:23:b9:fc:6c:10:65:
55:e0:84:dd:bc:33:d4:c3:0a:c0:e0:b1:ca:d0:bf:
a2:f2:b7:4e:d9:0f:4a:f8:9e:fa:02:05:02:46:ab:
6a:91:d1:7a:0c:bf:0c:d0:9a:d5:31:28:5c:b1:04:
b7:91:28:b9:48:f9:3b:27:66:ff:8f:5a:be:27:12:
ab:a2:55:fd:f3:9f:0c:9f:85:42:72:53:c5:0c:88:
d9:9f:08:44:29:30:e1:f3:10:5f:6f:1d:cc:f7:16:
5f:de:70:f4:4b:a7:e0:d9:6d:ff:92:3d:7f:67:80:
11:f2:57:e5:d0:c4:bc:16:fd:80:6d:55:f0:e2:83:
f6:bb:54:37:06:9c:35:45:55:d9:ce:16:d6:fc:e6:
9c:fc:5a:86:3e:1e:d3:34:81:df:cf:90:bf:40:95:
d0:8e:23:05:ef:51:59:79:df:cb:98:e4:68:2f:34:
a4:6d:0b:9d:86:ea:86:f3:67:1f:26:f3:26:e0:90:
8b:f1:ed:e7:32:f8:30:cc:fc:4e:9f:b4:35:9e:4b:
41:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:3C:F7:08:C9:41:80:FE:E8:56:A7:9B:8B:02:C4:A4:CA:F9:67
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
82:a0:3b:6a:42:28:f6:8c:8b:d0:a6:82:a3:70:9e:e5:6d:44:
1a:c3:9b:c9:89:b1:de:37:76:98:b1:01:93:b2:9f:0b:cb:ee:
e0:6d:ee:f3:c3:85:47:67:3e:31:17:d6:3e:9d:d4:e6:ce:7d:
d1:16:64:20:84:37:0a:48:76:23:16:af:82:25:50:db:a4:93:
b4:84:53:d6:06:c9:07:b2:52:92:df:e7:01:15:05:d8:00:a2:
96:88:d7:b6:0e:e3:db:8c:50:95:fe:d5:f1:1b:c0:6b:88:6b:
bf:4f:43:d0:11:f8:aa:98:4b:61:4b:0e:e0:94:fb:08:79:15:
a5:57:93:22:9a:74:40:00:c6:2c:8a:d2:80:21:d1:dd:86:a5:
05:ee:d3:8e:d3:f4:9a:c1:1b:18:c8:9e:39:10:42:97:47:7d:
31:ee:b7:9a:43:13:de:26:a8:40:22:f4:f9:17:94:00:dc:b8:
d4:b0:5f:9b:ce:b1:47:4e:42:18:c6:74:16:d3:23:9b:e7:91:
2c:b4:e4:09:b6:ee:03:e5:95:cf:f4:9e:3d:d5:d4:0e:84:52:
2f:53:4b:b4:c9:59:4b:c3:3f:c3:2a:11:65:5c:d9:c8:69:a0:
44:a2:c5:3a:f7:70:ce:d8:7e:b7:59:9a:54:5f:d8:e4:0d:a4:
8a:c8:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:33 2025 by rpki-client