Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: FXHFaY7Mbg7aXQjwJet/yNPg+lr3lYm/RrBQzw2Wx2w=
Subject key identifier: 56:D7:8B:8A:1E:2B:22:0B:AA:08:8C:8D:43:2D:23:30:63:E2:1F:DE
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 05D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 05D5
Signing time: Mon 30 Jun 2025 02:26:11 +0000
Manifest this update: Mon 30 Jun 2025 02:26:10 +0000
Manifest next update: Wed 02 Jul 2025 02:26:10 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: w/lnKfJKW5H7y2tD95/coi8YkKhJIN1coNNZbc3Jn38=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1493 (0x5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Jun 30 02:26:10 2025 GMT
Not After : Jul 2 02:26:10 2025 GMT
Subject: CN=6861f5c3-2a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:6c:c3:ec:5a:22:c7:7c:ea:fa:37:c9:35:
71:c1:35:88:ac:9d:e6:b1:74:c8:f1:16:4e:7d:0b:
78:ae:bc:39:9f:01:5d:22:2c:e8:9d:8f:28:39:23:
13:94:5b:3e:26:29:d2:3e:30:73:d2:16:7a:68:36:
6e:27:b6:ef:55:5d:c6:85:79:15:42:76:3f:9c:d5:
d2:df:8a:51:cb:22:47:1f:01:92:dc:6d:c9:b7:63:
ff:03:c3:80:c2:c2:1a:fd:4c:04:4d:8d:3b:58:58:
83:10:25:d1:dd:35:e2:bf:c8:1c:53:48:4d:50:cd:
d6:cb:05:e0:45:53:9a:4f:f6:28:ce:18:73:e9:19:
a5:d8:f5:99:cd:b6:d8:54:cc:7b:0b:34:2f:a1:e3:
24:b0:ed:b8:3c:95:66:9b:39:2e:cf:bb:fa:ee:72:
61:fb:25:da:8f:3a:cf:b9:19:8b:c5:34:51:20:e5:
84:85:e2:99:ec:e2:47:07:5a:7a:57:b3:a4:43:87:
cb:c8:71:cf:f8:c4:4b:1e:df:72:59:78:e8:41:63:
55:79:52:25:1b:a5:e8:b7:ba:bd:00:97:c7:9c:ef:
da:cf:4b:4a:12:5d:1a:6a:66:cf:2e:0b:00:35:13:
95:9b:3e:3f:9f:3f:16:54:13:1e:61:7e:0e:bc:f0:
8f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D7:8B:8A:1E:2B:22:0B:AA:08:8C:8D:43:2D:23:30:63:E2:1F:DE
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:13:42:b9:ec:70:b1:7b:ad:c8:10:6e:60:1d:9c:35:62:a8:
96:f0:7b:ea:83:53:2f:cd:02:83:a4:9c:03:d8:3a:e8:de:8a:
6d:0e:13:db:97:b4:38:3b:0e:f9:12:0e:0f:80:fa:e6:51:be:
df:bb:78:fd:02:2c:b6:d9:d0:54:30:dc:31:8b:7c:58:93:38:
bc:d6:0f:59:62:b0:e1:64:12:c3:50:99:0a:15:72:00:06:8b:
10:48:a7:18:6b:30:c2:53:7d:c7:83:7c:b2:68:3d:5e:ba:cb:
10:24:78:62:af:77:d4:ba:5b:0f:99:a2:33:12:cf:ea:95:64:
53:62:4b:cb:db:85:b1:38:db:fa:31:31:ff:4a:16:f4:85:dd:
d3:64:71:16:02:9a:ac:78:a5:eb:dd:ae:a6:e8:3c:d0:3c:a3:
9f:f7:30:65:aa:13:29:a8:b6:aa:b9:cd:0d:09:ee:d8:3a:f9:
19:be:80:16:bf:fb:60:db:60:a6:c1:6e:71:15:85:7a:9f:d5:
d2:d6:92:00:35:27:2b:a5:98:b3:3d:ed:0e:32:31:17:48:16:
10:c6:c7:6b:04:96:a5:e7:93:e7:c2:98:81:3c:13:ed:9d:2b:
c9:0e:b6:33:fe:9a:1a:54:68:f0:a6:cc:da:c2:20:33:78:f3:
03:7a:6c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:41:51 2025 by rpki-client