Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File: cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier: 3QcBagbjJLxMqvhyXk6EwxqkAq9aPLI49v2p+eIgha8=
Subject key identifier: 1A:40:A7:10:93:5A:32:3A:89:4B:C0:34:18:EB:E4:C9:E6:44:A2:11
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer: /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial: 0230
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number: 0230
Signing time: Sat 23 Aug 2025 04:21:33 +0000
Manifest this update: Sat 23 Aug 2025 04:21:32 +0000
Manifest next update: Mon 25 Aug 2025 04:21:32 +0000
Files and hashes: 1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: xephurEpZkzt/D26sQu/jFZhM89VgbYGZ59fYSjcixI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Validity
Not Before: Aug 23 04:21:32 2025 GMT
Not After : Aug 25 04:21:32 2025 GMT
Subject: CN=68a941cd-ccae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:68:71:db:9d:92:43:ae:e9:71:8d:4f:23:f8:
54:8f:38:7c:03:0e:33:07:19:66:b2:6f:39:b8:34:
a4:e0:30:15:71:01:83:ff:f3:54:aa:cb:2a:49:b7:
42:cc:fb:68:2b:76:0f:16:0e:fc:ec:ba:3b:c6:5c:
4e:93:6a:1f:8c:f3:89:0d:95:fb:42:0b:9d:65:4c:
f0:95:ba:e9:fb:86:3a:87:99:d5:2a:b9:32:f6:00:
dc:45:fb:24:91:e7:2d:cc:7a:92:c1:ea:8c:f7:5d:
c4:0a:6e:05:73:9c:e1:aa:d8:e0:6e:47:46:35:74:
2d:d3:fd:21:3b:2a:0c:ef:42:0f:df:c7:75:2a:59:
fc:f1:c0:90:b1:cd:d6:ad:15:b6:94:7e:83:fc:2e:
f7:31:d2:64:7c:bf:e1:a5:e5:c4:3d:a6:ea:9b:47:
e4:d6:4d:b4:03:21:54:0d:f5:61:56:85:28:68:3d:
e7:dd:33:fd:12:96:a2:14:be:d5:4c:8c:1c:ee:47:
93:ad:00:ff:39:3a:fc:5a:20:e5:c4:86:68:27:24:
48:f3:e4:2d:21:ef:12:ff:e2:3c:50:c0:a8:55:65:
fa:07:be:25:25:79:8c:4f:0a:34:1f:58:bc:bb:74:
a6:f7:7e:14:87:bf:ec:e9:b3:ee:b4:f5:82:20:06:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:A7:10:93:5A:32:3A:89:4B:C0:34:18:EB:E4:C9:E6:44:A2:11
X509v3 Authority Key Identifier:
keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:a5:d1:b0:c8:6d:9b:1a:cc:6a:a7:bb:a7:7c:cc:94:f5:
cc:81:5a:61:5e:98:fc:2f:e1:23:f4:e1:58:90:8c:cc:6c:76:
4f:55:1a:43:fd:24:bb:be:20:c4:5a:ca:b9:e7:c8:21:f0:48:
e6:fe:87:f7:b4:c2:f1:21:fa:d0:27:24:55:4d:57:4d:5d:a3:
3f:50:ce:3e:0b:ee:ad:2e:bf:35:81:6f:e9:9e:d5:4f:8d:79:
7d:dc:5a:00:bd:a7:cf:9f:90:13:09:40:3c:28:74:b0:da:d2:
12:aa:09:45:3b:45:ac:72:71:b4:e6:37:9d:66:a1:81:93:d9:
19:c5:18:af:9d:83:de:0d:d0:af:f8:ee:5e:78:19:4b:32:30:
6f:93:f6:a5:34:9c:3d:67:65:96:f6:dc:88:8c:c9:e0:bc:66:
3a:10:e2:91:fd:c6:c3:cd:cc:80:e9:95:95:2b:ec:96:f8:e5:
17:4c:8c:b0:56:c1:7a:61:99:72:a3:06:84:78:5f:72:1c:27:
71:42:77:a3:84:5c:b1:e9:cb:0f:57:19:ae:7a:68:be:3e:28:
6c:77:b2:4a:b4:59:57:f8:d0:2a:79:0d:1c:03:54:dc:3c:8f:
28:56:20:23:50:01:88:16:2c:66:d3:86:7d:12:68:2a:2b:b6:
89:e4:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:38 2025 by rpki-client