Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
File: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft (raw, json)
Hash identifier: hhHwjSBLhIOHe//MuSV2PI7/hwY2aM4qP5VoaxksN+4=
Subject key identifier: 58:E2:98:8B:32:FB:74:A1:77:02:5C:BA:72:D7:D9:77:3F:8A:F0:2A
Authority key identifier: 68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
Certificate issuer: /CN=F361B835AF/serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Certificate serial: 45
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
Manifest number: 44
Signing time: Thu 03 Jul 2025 05:17:30 +0000
Manifest this update: Thu 03 Jul 2025 05:17:29 +0000
Manifest next update: Sat 05 Jul 2025 05:17:29 +0000
Files and hashes: 1: aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl (hash: 7PbDZABE7Sz4a432r9JcCVxJ8YUng1f/Zc603Dh5Chw=)
2: ED854A8624C811F0B4D15694DAE4EC9C.roa (hash: KyIxaodmc2Nf2dSIBbZZRE5rqK1fV8FCMAMx88jtkk4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69 (0x45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B835AF, serialNumber=688C90F523D7ECF90EB7DC981B7071E383493152
Validity
Not Before: Jul 3 05:17:29 2025 GMT
Not After : Jul 5 05:17:29 2025 GMT
Subject: CN=6866126a-48e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:ad:4c:13:36:b5:b1:d6:1c:5b:73:88:2c:
58:de:48:24:62:ba:ac:b8:2c:e8:18:04:3e:ba:ed:
f8:59:42:ee:37:2c:b2:e5:31:9d:17:bf:f9:01:ef:
99:0b:0c:e8:be:c7:5c:8d:a1:aa:26:6d:54:36:98:
88:c6:d5:6d:29:28:43:47:4b:4a:16:52:4c:8a:d8:
99:05:12:f1:f7:d7:ce:c9:d5:35:b9:fa:6d:22:c2:
f4:8f:20:f5:97:09:48:3e:a3:75:91:d2:e8:c7:0d:
8a:16:b8:cc:0c:a5:e6:a8:e6:c4:85:c6:5b:a2:83:
5d:83:17:05:b4:e7:0e:d0:5b:ef:3a:67:22:b5:fe:
53:e5:7c:78:1e:63:e6:1f:bc:48:e7:b2:a0:92:2e:
89:69:77:10:1f:db:01:4b:d6:a5:f3:4e:19:98:73:
42:c1:75:c3:b9:49:32:58:95:87:8a:4a:ee:40:ef:
29:db:1f:69:3d:52:cd:9b:9e:91:83:b0:c9:8a:f3:
03:fd:ff:50:98:ec:4b:8e:bb:80:87:31:0e:76:ed:
94:98:15:09:67:cf:fe:bf:87:b1:dd:fd:cf:29:57:
ac:91:d5:87:e7:cf:fa:3f:6a:aa:86:45:63:c8:61:
6c:1b:b2:63:23:e3:ec:f1:7c:1b:ef:1a:ac:42:b6:
d0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:98:8B:32:FB:74:A1:77:02:5C:BA:72:D7:D9:77:3F:8A:F0:2A
X509v3 Authority Key Identifier:
keyid:68:8C:90:F5:23:D7:EC:F9:0E:B7:DC:98:1B:70:71:E3:83:49:31:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B835/9F84D4AC24C611F099A06586DAE4EC9C/aIyQ9SPX7PkOt9yYG3Bx44NJMVI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:4f:80:f8:93:37:63:c0:27:75:1d:ce:89:f1:16:e0:d5:
92:b1:80:f5:d9:30:26:5e:cc:cd:7d:94:41:f3:03:24:fb:e0:
bc:b2:b7:d9:f6:67:0e:b5:ab:db:4d:77:9f:10:e7:b9:7a:ab:
5e:5c:99:b5:c9:ce:8e:fb:ac:f0:75:06:02:d7:13:c5:d7:54:
9d:26:d3:bb:31:ad:17:25:79:a7:2f:02:4a:93:6f:f9:85:a1:
3c:66:ec:31:1e:46:55:83:15:69:b4:a4:77:75:2d:d0:45:0c:
2d:1c:f7:da:c4:b1:a5:18:4c:eb:08:77:de:1e:f0:d6:85:ae:
20:12:f2:b1:d7:c5:9a:16:e0:ba:fe:ca:8b:40:1d:4c:58:5b:
d8:db:47:1c:b9:86:83:31:d9:07:ae:cd:a4:55:bf:9f:d8:f4:
ce:c0:57:08:a2:9c:32:39:ab:6a:17:c2:3f:44:93:6f:9a:ef:
44:41:3a:95:5c:da:c6:2c:f6:a2:03:96:aa:34:4a:7c:54:5f:
30:c1:74:76:bf:5e:9e:d1:06:1f:d1:3e:84:dc:09:c4:43:d5:
41:bb:95:2d:35:17:fc:b0:37:f9:0e:d0:c8:2e:ee:09:bb:d4:
b7:9c:47:3d:bd:65:93:3a:6a:67:35:37:39:e2:fa:9d:26:88:
df:5c:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:59:32 2025 by rpki-client