Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
File: An4aRGPGhfvWOGP507I7rC2TsWg.mft (raw, json)
Hash identifier: mLU0UEUzrj+FWMQ1BEMBgkEp2VXOTJy549WpFFVwrJY=
Subject key identifier: DC:F4:2A:9C:5A:4B:1B:FF:42:00:FE:21:08:57:84:45:2D:7B:A6:61
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Certificate issuer: /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial: 0873
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
Manifest number: 086F
Signing time: Tue 01 Jul 2025 01:42:15 +0000
Manifest this update: Tue 01 Jul 2025 01:42:14 +0000
Manifest next update: Thu 03 Jul 2025 01:42:14 +0000
Files and hashes: 1: An4aRGPGhfvWOGP507I7rC2TsWg.crl (hash: TA9zw/sT8+UHahCia+tsQMISSiC5K+hnLRFJmcqrQjQ=)
2: B2E0450EE3A911E99D048322F8AEA228.roa (hash: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=)
3: E9F7B7D4E3A911E9BF86B122F8AEA228.roa (hash: 9COidhiFaVCAPV0UHswnXt+QzIn+TW+J/QQrjMlznyw=)
4: 34BC8634C70711ED87A7AD9EF1222468.roa (hash: jLffPLsCVmDn3eu+ZH7RN7a2yuNgI7fFi99PH05ncKE=)
5: CE979090E3A911E982D79922F8AEA228.roa (hash: ZUuGDNl5OtIqVt3JPAYRM2b5xFa0dAXmMX0QV9sXPf0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2163 (0x873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Validity
Not Before: Jul 1 01:42:14 2025 GMT
Not After : Jul 3 01:42:14 2025 GMT
Subject: CN=68633cf6-2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:6c:c5:d2:4d:2e:9c:67:8a:d9:85:9a:01:
74:20:22:07:fe:35:bb:69:a5:cf:d3:2c:1a:92:08:
ca:0f:28:7e:3b:c1:5a:f9:22:9f:5e:4e:a5:58:db:
63:15:aa:4c:a4:93:15:bc:a0:b0:03:fc:57:0e:e6:
b3:39:57:95:08:31:ae:4b:b6:6e:4f:e0:08:ce:15:
6e:53:c9:5e:bf:22:bc:7f:07:fb:51:57:74:62:c0:
23:a8:ca:b3:87:51:9d:2e:6b:7d:ef:f3:7d:b2:bc:
60:60:c8:6f:69:46:82:6c:da:10:b5:58:2a:6d:1a:
51:2e:ba:19:12:67:d6:dd:60:df:e0:0b:77:13:22:
a6:64:08:76:fb:65:01:4f:7f:24:d3:4a:21:c5:59:
78:ce:9e:a4:b5:ba:c6:72:e8:f3:eb:b9:f5:73:bf:
3e:11:7f:c2:ac:5a:94:ff:eb:2c:2a:51:35:8e:91:
84:d4:09:d5:ea:61:0d:87:6c:4a:25:e8:42:a5:4d:
e8:36:b5:f3:25:2b:c5:83:e9:81:3b:ec:cb:5d:98:
07:23:7a:a1:c3:f1:33:56:8a:e5:cd:d3:8a:bc:2d:
c8:21:fd:68:5e:6e:80:de:db:b8:75:c1:46:fd:60:
47:df:48:15:a4:c7:6c:cb:1a:17:06:3c:0f:1d:35:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:2A:9C:5A:4B:1B:FF:42:00:FE:21:08:57:84:45:2D:7B:A6:61
X509v3 Authority Key Identifier:
keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:14:cf:b2:d8:6b:2f:be:e9:60:88:1b:d8:17:69:4a:ff:e4:
85:7b:1e:c6:14:9b:76:66:da:7b:eb:08:34:7b:9b:42:24:18:
2c:ef:ea:e7:ea:0d:35:f9:27:31:5e:16:1d:09:01:68:dc:19:
12:5d:c0:90:7e:b6:60:09:3d:c4:ba:e7:76:86:c1:44:85:3c:
4f:83:40:cf:9d:a7:68:34:07:09:63:00:f9:55:43:81:df:4f:
72:c7:59:a1:15:98:8d:f8:4b:14:1c:43:2d:41:92:d2:73:ec:
01:51:a1:a1:12:b3:1b:2c:6d:e8:42:2f:27:93:06:b0:c3:a2:
80:f6:32:d5:d2:56:94:90:6b:2b:10:92:d8:f9:be:50:aa:ab:
48:79:a5:52:1e:ff:89:59:32:2f:c6:9e:b1:ff:55:2d:6d:c7:
f8:7a:14:46:bf:7b:8b:7a:71:27:c1:21:91:32:26:4c:6a:02:
9d:2b:e1:0a:1b:9d:24:b6:f1:6b:c5:e2:7f:0a:b9:6d:ee:4f:
d0:a6:ca:b2:87:63:69:d3:53:b1:52:f0:55:0b:1f:58:e2:c1:
0e:a6:fc:c0:54:dc:a0:05:0b:8c:ab:52:26:ab:72:e6:ee:35:
ce:70:19:54:34:f8:1b:3b:b4:c1:c7:c3:75:ee:c3:c8:0e:d4:
8f:7c:af:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:06:33 2025 by rpki-client