
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: U4yj0FGGV+QP0l3JAYEAhP7v3PiQyf86CzjDODqdyis=
Subject key identifier: D4:29:EF:73:5A:5B:E8:98:44:74:BA:D8:83:6B:01:1A:26:7C:6B:48
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0CFA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0CFA
Signing time: Sat 23 Aug 2025 01:07:09 +0000
Manifest this update: Sat 23 Aug 2025 01:07:08 +0000
Manifest next update: Mon 25 Aug 2025 01:07:08 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: S+4qZTS1l1TuqEjws3HyvO3rOWhgp936GS0X9CbQaT8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3322 (0xcfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Aug 23 01:07:08 2025 GMT
Not After : Aug 25 01:07:08 2025 GMT
Subject: CN=68a9143d-501f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:06:38:a3:35:d6:b2:19:18:e2:12:07:61:
c6:8b:df:cd:a1:70:f1:46:bc:27:49:e2:71:ea:42:
9f:d6:9b:07:7f:94:60:77:4a:d1:a6:3c:c8:b4:5c:
0b:ff:b6:4f:15:58:1a:f3:17:57:30:1a:6a:29:63:
61:dc:d9:38:31:fc:bd:12:8b:93:fa:f9:57:73:f4:
5c:10:94:de:19:a8:ef:aa:ef:80:31:96:48:50:0f:
5f:55:90:cf:1d:32:0a:cf:0e:a3:09:c5:cc:9b:ea:
7c:0b:8d:29:ba:45:f2:af:0c:19:fb:29:2f:3b:69:
6d:d0:0d:51:de:f6:ee:88:c9:97:94:eb:2c:3e:02:
9e:f2:75:00:ab:95:80:8a:80:b3:03:db:1a:8d:4d:
77:5e:80:46:2e:72:6a:9b:52:cd:d5:0a:ea:e2:db:
56:9b:5a:4b:3e:8a:c4:26:43:af:8f:87:a9:cc:78:
42:5a:4f:7a:26:59:03:a5:e7:11:dc:c6:a7:a0:e2:
b6:6f:dd:9a:91:29:1c:cc:1a:2a:d4:d6:22:29:34:
7c:58:55:2b:2d:a2:61:ae:01:f0:3d:ce:37:36:ca:
17:a1:e3:63:f2:c1:4d:b3:33:79:c3:e0:3f:5f:ce:
01:c4:95:9c:8a:9e:fe:82:24:54:99:a8:e6:44:73:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:29:EF:73:5A:5B:E8:98:44:74:BA:D8:83:6B:01:1A:26:7C:6B:48
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:46:b1:a9:88:b4:90:bd:2b:fc:74:2b:9d:25:72:94:7e:09:
7f:d0:67:3a:a2:b5:5c:3d:91:02:d1:48:ec:9d:82:82:38:73:
de:04:24:3e:e9:e2:be:c1:73:96:7d:49:b7:a3:33:e6:69:41:
16:31:be:31:93:b8:44:fb:f2:ee:ba:75:d9:0b:91:f8:b2:a8:
d4:2b:a1:80:9c:ef:38:d3:ae:46:78:11:63:a6:77:fc:d6:4b:
eb:f8:7a:7e:33:49:e9:04:2f:fd:75:5f:f1:86:7f:21:8d:b9:
2e:66:e6:2d:d3:f8:64:df:07:f8:d5:72:13:58:60:0f:b5:b6:
b3:04:7d:00:84:e4:ce:9b:ac:ec:8f:21:df:73:5e:9c:19:c9:
1f:36:d9:81:18:15:2e:b5:52:ba:06:46:40:f6:d4:3f:3d:85:
b3:e6:fd:7a:a7:69:72:ee:2a:f2:b9:47:46:5d:81:ff:da:fd:
e7:d4:f3:e0:3c:31:65:1d:cc:fd:48:3b:cc:c9:a0:10:1b:31:
1e:75:a5:9f:b1:39:54:15:24:02:85:ae:12:ad:a4:55:67:b0:
61:cc:33:64:05:37:1b:57:12:2f:72:0a:b2:23:ba:2b:ce:91:
03:ad:6d:0b:f4:c7:d9:48:e5:82:aa:79:97:ba:cf:f4:47:db:
bb:f9:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:18 2025 by rpki-client