Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File: v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier: MycfeGEKTGDoLJnN6B5LIcTT+4LwE1LKvuBjsKvMPFA=
Subject key identifier: E8:2B:91:3F:B0:EC:AD:7B:84:44:30:19:8F:06:40:A7:A6:CC:4E:3A
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer: /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial: D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number: D5
Signing time: Sat 23 Aug 2025 05:07:03 +0000
Manifest this update: Sat 23 Aug 2025 05:07:02 +0000
Manifest next update: Mon 25 Aug 2025 05:07:02 +0000
Files and hashes: 1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: +5xO0xFJzBJzKKVgoNNLo2jjh8lJfnDZG7cmiMvDyYc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Validity
Not Before: Aug 23 05:07:02 2025 GMT
Not After : Aug 25 05:07:02 2025 GMT
Subject: CN=68a94c77-000d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8a:fc:cd:38:8f:bd:2b:da:77:54:07:cc:7d:
9f:e0:f6:9e:31:96:cf:ac:d1:9f:f8:83:c9:37:32:
00:8f:1c:8d:fe:10:d4:01:71:1c:55:85:f5:32:9d:
90:3e:0f:38:f0:a7:06:d6:d6:22:d7:cc:3d:a9:51:
92:19:a1:b7:80:12:f9:22:63:b1:8d:97:1c:9f:7b:
c5:3f:33:20:f9:a2:94:3a:48:8c:47:a4:59:c8:0e:
3c:ce:c6:e4:32:88:c8:27:94:55:48:b6:40:5a:0e:
10:31:71:b9:a6:54:9b:8c:69:81:b0:da:2b:a3:76:
88:f2:e4:e4:4f:92:3a:3a:d8:e1:11:0b:43:36:d6:
a2:80:3b:a1:23:f0:a7:5a:8f:ea:6a:07:72:82:74:
b2:41:7c:42:0b:07:76:af:d3:dd:ca:74:6e:56:c8:
6b:5d:d4:91:9f:9b:c7:16:37:0d:08:82:a7:47:f6:
da:52:a4:31:cc:59:23:e2:a4:17:97:88:6d:37:12:
2d:c2:c7:39:da:b3:d1:a0:80:47:10:2b:f0:2e:d5:
3f:b8:82:98:2f:02:44:2e:87:e7:52:67:d6:e8:f5:
a8:d1:0e:14:38:12:81:40:c5:f9:ac:af:61:05:45:
33:58:99:e5:22:b7:45:5f:e4:b1:a3:55:6d:16:80:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2B:91:3F:B0:EC:AD:7B:84:44:30:19:8F:06:40:A7:A6:CC:4E:3A
X509v3 Authority Key Identifier:
keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b4:af:ca:d7:e0:4e:ec:c5:ea:e2:56:28:e3:41:95:fc:f8:
27:a3:74:04:2b:05:a1:d0:a9:1e:ca:fa:50:76:a9:1d:17:db:
50:b7:33:8e:7b:48:fc:f8:d6:37:e4:1e:87:78:eb:24:98:e4:
ec:76:5c:c3:34:b4:cf:c3:0a:11:01:8b:6d:8c:df:68:dc:c0:
79:4e:5b:fb:fb:75:ee:ea:7e:3e:2c:3f:7f:73:45:d9:bb:a3:
1c:5e:ba:14:72:66:44:c4:b5:a3:2f:63:a4:25:1e:fa:d2:c0:
3a:fc:9d:c8:7b:a4:72:ac:bd:6d:f5:36:88:0b:f7:81:b2:88:
c2:c4:cb:e8:53:c0:57:80:7c:fa:67:ae:70:49:95:7a:36:4d:
16:83:2d:ab:43:a0:4c:75:5f:96:9a:16:96:ff:ee:87:02:ae:
1b:44:32:f6:01:0b:b4:26:01:94:f8:e9:c5:07:da:a5:d1:42:
34:79:29:d5:b1:22:2c:99:33:3c:e7:57:18:2a:78:d0:f5:87:
b2:86:61:58:ab:5d:cf:f7:16:fc:dd:26:ca:f4:8c:55:4f:1b:
67:52:04:d6:bc:46:d2:a5:25:44:91:67:8c:3e:c4:cd:ab:ec:
9e:3b:11:9c:4d:31:d4:25:28:32:85:b6:c2:2e:9e:93:52:8b:
0e:3f:21:ee
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc3NzBBRjExMC8GA1UEBRMoQkZBREFFRENENTQ4MzIwRkM4RjJDNzk4N0MwRTIy
OTlEQ0JBM0E5QzAeFw0yNTA4MjMwNTA3MDJaFw0yNTA4MjUwNTA3MDJaMBgxFjAU
BgNVBAMTDTY4YTk0Yzc3LTAwMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD9ivzNOI+9K9p3VAfMfZ/g9p4xls+s0Z/4g8k3MgCPHI3+ENQBcRxVhfUy
nZA+DzjwpwbW1iLXzD2pUZIZobeAEvkiY7GNlxyfe8U/MyD5opQ6SIxHpFnIDjzO
xuQyiMgnlFVItkBaDhAxcbmmVJuMaYGw2iujdojy5ORPkjo62OERC0M21qKAO6Ej
8Kdaj+pqB3KCdLJBfEILB3av093KdG5WyGtd1JGfm8cWNw0IgqdH9tpSpDHMWSPi
pBeXiG03Ei3Cxznas9GggEcQK/Au1T+4gpgvAkQuh+dSZ9bo9ajRDhQ4EoFAxfms
r2EFRTNYmeUit0Vf5LGjVW0WgDSDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6CuR
P7DsrXuERDAZjwZAp6bMTjowHwYDVR0jBBgwFoAUv62u3NVIMg/I8seYfA4imdy6
OpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NzcwL0U1N0JBOUQ4REMwMzExRUY5QzQ4MkM1Mjc2MkU5NTFBL3Y2MnUz
TlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Y2MnUzTlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc3NzAvRTU3QkE5RDhEQzAzMTFFRjlDNDgyQzUyNzYy
RTk1MUEvdjYydTNOVklNZ19JOHNlWWZBNGltZHk2T3B3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCutK/K1+BO7MXq4lYo40GV/Pgno3QE
KwWh0KkeyvpQdqkdF9tQtzOOe0j8+NY35B6HeOskmOTsdlzDNLTPwwoRAYttjN9o
3MB5Tlv7+3Xu6n4+LD9/c0XZu6McXroUcmZExLWjL2OkJR760sA6/J3Ie6RyrL1t
9TaIC/eBsojCxMvoU8BXgHz6Z65wSZV6Nk0Wgy2rQ6BMdV+WmhaW/+6HAq4bRDL2
AQu0JgGU+OnFB9ql0UI0eSnVsSIsmTM851cYKnjQ9YeyhmFYq13P9xb83SbK9IxV
TxtnUgTWvEbSpSVEkWeMPsTNq+yeOxGcTTHUJSgyhbbCLp6TUosOPyHu
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:36 2025 by rpki-client