Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File: v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier: 3CkIoeSX9CJuGIubyaCSeX3mCTkDtrmhHOqkl/b10QA=
Subject key identifier: D5:7A:AA:A0:13:ED:DC:E1:FE:EC:E8:FC:5B:76:7A:1A:C9:A4:42:45
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer: /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial: A0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number: A0
Signing time: Tue 01 Jul 2025 05:12:19 +0000
Manifest this update: Tue 01 Jul 2025 05:12:18 +0000
Manifest next update: Thu 03 Jul 2025 05:12:18 +0000
Files and hashes: 1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: Lhi0vBjjs3ise3QHpAjyvpN2Ak1j9U1OrfAXc9vvWEQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 05:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 160 (0xa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Validity
Not Before: Jul 1 05:12:18 2025 GMT
Not After : Jul 3 05:12:18 2025 GMT
Subject: CN=68636e33-0b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:dc:d2:07:39:f1:13:ff:ec:d8:a8:79:fc:
78:85:ab:fd:8b:f2:46:21:04:25:da:b0:92:46:ae:
f2:d9:7c:9d:59:96:b2:6d:a7:29:34:2e:92:07:83:
2a:ed:1f:1b:df:bb:99:97:75:5d:d4:ee:0a:ae:c3:
2f:fa:f3:bc:4d:fd:bd:97:9d:8c:d8:2d:c3:aa:30:
a1:7c:3d:91:f5:fd:df:f2:d0:dc:85:53:d2:8f:df:
e7:06:fb:68:ae:08:03:b3:63:17:ec:a2:4b:21:06:
11:79:2a:8e:01:6b:a5:80:21:6f:8a:b7:f0:17:28:
2e:5d:02:3b:fd:15:73:b4:bf:0d:04:72:7b:87:2a:
a8:37:1b:12:ae:b8:00:e4:da:56:66:5f:ce:81:29:
54:3f:98:21:cd:1d:58:9c:f4:eb:79:52:9c:b9:ba:
83:74:0e:7c:e4:76:20:7b:df:bc:75:c7:ac:89:96:
06:90:4c:5d:fc:56:32:ee:bc:88:38:10:c7:ec:c4:
f5:d5:ef:da:7c:b5:15:c4:c7:9a:7a:1b:38:81:8e:
e3:36:03:05:33:17:06:f1:3d:fb:bb:91:c9:30:33:
1c:20:f3:d4:3a:04:93:f8:ca:d5:ad:c8:b0:7f:49:
f7:80:67:0d:ad:5c:af:f6:bf:df:7a:56:41:82:87:
15:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:AA:A0:13:ED:DC:E1:FE:EC:E8:FC:5B:76:7A:1A:C9:A4:42:45
X509v3 Authority Key Identifier:
keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0f:f6:eb:ca:c5:16:ae:53:5c:8f:71:72:1e:c2:db:9c:56:
7f:7c:21:73:53:6b:e2:18:43:61:d1:bb:60:0a:e1:98:fa:49:
37:ec:57:22:6c:c5:89:c9:7a:ba:ad:9b:52:e1:61:0b:49:af:
b5:40:c4:a3:1b:b7:dd:c3:db:b9:71:b0:79:4d:fa:14:45:cc:
f7:63:ae:f4:64:ac:e2:e4:18:8f:dc:d7:3f:94:ae:56:ea:a4:
d7:ae:83:57:aa:46:8b:70:67:a8:44:3e:89:a3:f6:41:44:3b:
ce:51:37:30:53:d0:6a:79:19:04:6e:4a:4e:5e:9a:42:f4:ba:
df:d7:7e:f7:58:c1:0e:ce:28:71:d3:b1:63:4c:71:35:b0:73:
c3:86:b1:eb:ae:ef:4c:58:5e:ee:1f:b4:37:9d:0a:0c:d0:64:
6b:e7:13:51:17:2f:c8:ab:78:98:7d:9f:c3:f4:30:ca:12:0a:
1c:68:db:14:4e:94:9e:b6:1e:35:6e:e4:4f:3f:f5:34:4f:fb:
a2:90:bb:6c:5b:5d:8a:8c:59:f9:02:c5:a4:c5:e4:c8:0e:8e:
d0:c6:46:6b:37:a7:f2:8f:7e:87:26:e4:6d:d3:61:19:f1:30:
72:4b:1e:00:4e:53:ee:63:78:98:d5:94:48:94:e6:97:7f:40:
13:1d:02:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc3NzBBRjExMC8GA1UEBRMoQkZBREFFRENENTQ4MzIwRkM4RjJDNzk4N0MwRTIy
OTlEQ0JBM0E5QzAeFw0yNTA3MDEwNTEyMThaFw0yNTA3MDMwNTEyMThaMBgxFjAU
BgNVBAMTDTY4NjM2ZTMzLTBiNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCm3NzSBznxE//s2Kh5/HiFq/2L8kYhBCXasJJGrvLZfJ1ZlrJtpyk0LpIH
gyrtHxvfu5mXdV3U7gquwy/687xN/b2XnYzYLcOqMKF8PZH1/d/y0NyFU9KP3+cG
+2iuCAOzYxfsokshBhF5Ko4Ba6WAIW+Kt/AXKC5dAjv9FXO0vw0EcnuHKqg3GxKu
uADk2lZmX86BKVQ/mCHNHVic9Ot5Upy5uoN0DnzkdiB737x1x6yJlgaQTF38VjLu
vIg4EMfsxPXV79p8tRXEx5p6GziBjuM2AwUzFwbxPfu7kckwMxwg89Q6BJP4ytWt
yLB/SfeAZw2tXK/2v996VkGChxVDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1Xqq
oBPt3OH+7Oj8W3Z6GsmkQkUwHwYDVR0jBBgwFoAUv62u3NVIMg/I8seYfA4imdy6
OpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3NzcwL0U1N0JBOUQ4REMwMzExRUY5QzQ4MkM1Mjc2MkU5NTFBL3Y2MnUz
TlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Y2MnUzTlZJTWdfSThzZVlmQTRpbWR5Nk9wdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc3NzAvRTU3QkE5RDhEQzAzMTFFRjlDNDgyQzUyNzYy
RTk1MUEvdjYydTNOVklNZ19JOHNlWWZBNGltZHk2T3B3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+D/brysUWrlNcj3FyHsLbnFZ/fCFz
U2viGENh0btgCuGY+kk37FcibMWJyXq6rZtS4WELSa+1QMSjG7fdw9u5cbB5TfoU
Rcz3Y670ZKzi5BiP3Nc/lK5W6qTXroNXqkaLcGeoRD6Jo/ZBRDvOUTcwU9BqeRkE
bkpOXppC9Lrf1373WMEOzihx07FjTHE1sHPDhrHrru9MWF7uH7Q3nQoM0GRr5xNR
Fy/Iq3iYfZ/D9DDKEgocaNsUTpSeth41buRPP/U0T/uikLtsW12KjFn5AsWkxeTI
Do7QxkZrN6fyj36HJuRt02EZ8TBySx4ATlPuY3iY1ZRIlOaXf0ATHQJh
-----END CERTIFICATE-----
Generated at Tue Jul 1 14:03:20 2025 by rpki-client