Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: blnbbEjGpRDxsDRmZH/5pUSJMOEHZD4MDzwEnH69lbg=
Subject key identifier: 54:C9:8B:03:45:3A:F1:12:73:D2:EA:6B:45:C8:FB:2A:AE:B7:92:FD
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 56
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C3
Signing time: Wed 02 Jul 2025 11:40:13 +0000
Manifest this update: Wed 02 Jul 2025 11:40:13 +0000
Manifest next update: Sat 09 Aug 2025 11:40:13 +0000
Files and hashes: 1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: 4Ec7wWKFwcgA5trS5zhV25RVczzWts0OvoL8QmQxsdQ=)
4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 11:40:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86 (0x56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Jul 2 11:40:13 2025 GMT
Not After : Aug 9 11:40:13 2025 GMT
Subject: CN=68651a9d-18a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:27:08:b1:01:11:5e:fd:a4:5e:1e:99:fb:fd:
9a:87:8f:80:4a:3c:a2:67:00:6a:af:29:7e:a8:4e:
8a:4d:f5:2a:90:43:7d:10:11:b7:9c:b7:1e:23:ea:
d0:8d:3a:a4:d7:fb:d9:68:df:d4:76:55:c8:29:25:
55:2b:14:2e:81:8c:82:ea:da:71:d5:cf:57:bd:3e:
50:f1:09:33:90:27:66:8f:67:1b:1f:f0:f7:bd:6f:
7d:54:fc:38:57:a4:24:d3:80:33:8b:59:3c:ea:2e:
31:dc:ed:5b:ee:91:8c:8f:d1:a2:fb:1a:9c:45:c7:
e0:e4:cd:75:8c:79:07:24:09:23:dc:a1:9a:0c:62:
47:db:98:38:5c:21:26:cf:91:7b:78:93:5c:f0:28:
c4:35:e1:c5:21:ce:9d:99:b1:7b:fa:ae:4b:54:ac:
eb:1b:ea:fd:5c:fd:4f:22:76:18:fd:f2:5f:58:d2:
93:ee:ed:10:cd:3a:76:e4:e4:19:d6:b6:47:0c:aa:
0b:fd:88:38:51:1e:4e:31:43:bb:65:e1:5a:d3:3e:
c9:09:d6:5c:b7:e0:00:89:0a:b7:85:e1:2b:15:fd:
2c:d5:7a:5f:48:66:ad:3e:cf:d1:4e:ab:f4:be:73:
8e:28:53:c4:df:2b:77:65:74:3e:7b:89:09:b3:4f:
39:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C9:8B:03:45:3A:F1:12:73:D2:EA:6B:45:C8:FB:2A:AE:B7:92:FD
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:26:0f:8d:34:13:75:00:0c:9c:0d:96:2a:00:3d:21:c4:bb:
0c:24:40:0a:a2:8d:23:45:7b:ac:5e:d3:4a:0b:b7:7e:fa:16:
51:3c:5b:82:a4:bf:02:30:a1:28:87:44:b0:3a:5c:5a:a6:95:
21:dd:b3:c3:9b:8b:c7:f0:c8:c4:06:94:9f:c2:e2:56:54:17:
f4:91:84:d8:fb:0d:05:b3:3b:53:77:07:fa:af:8b:a4:fb:6a:
66:e7:47:9e:c4:3b:e6:95:3d:a2:83:f0:44:b7:62:0b:a4:59:
b1:c1:4a:2b:83:9c:0f:ff:1e:05:ba:3d:d3:14:e0:95:e4:f6:
00:35:b5:34:e2:00:f9:e0:61:e1:b8:85:7b:64:0c:60:b3:47:
a0:fa:bc:ec:ec:bc:9f:55:62:35:13:c0:04:7e:a8:0f:81:08:
43:79:c7:05:e3:df:af:f0:6b:c8:2f:b3:61:71:6b:30:2e:8e:
08:82:64:f5:87:65:a2:81:29:9c:38:2c:1c:42:48:af:c3:1e:
1d:19:b9:34:e4:be:22:2b:77:ef:6c:50:98:aa:36:14:e5:df:
4d:59:f6:89:31:ec:51:de:e6:1a:92:69:c3:5c:00:77:f9:34:
e3:ff:fe:9e:c4:8c:a9:1c:7a:2e:f2:b5:f5:db:79:48:fd:25:
2c:b5:4c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 12:33:29 2025 by rpki-client