Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
File: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft (raw, json)
Hash identifier: 2Brg3/3Ojk6ZMgyTBORTQ4q8gRepEw9f13McEayq7W8=
Subject key identifier: CD:7C:D7:37:BE:28:01:F8:60:E6:69:B7:9B:03:2A:9A:9D:B3:C4:E9
Authority key identifier: 0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
Certificate issuer: /CN=F3626CB6AF/serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Certificate serial: 0678
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
Manifest number: 0678
Signing time: Sat 23 Aug 2025 02:10:01 +0000
Manifest this update: Sat 23 Aug 2025 02:10:00 +0000
Manifest next update: Mon 25 Aug 2025 02:10:00 +0000
Files and hashes: 1: D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl (hash: 2+o9PlWgARoRFj/YlE25n8qaTNhOtUmLPXlvH12yb/o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1656 (0x678)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3626CB6AF, serialNumber=0F595081812DF1597E84EC11464E64C187EE3808
Validity
Not Before: Aug 23 02:10:00 2025 GMT
Not After : Aug 25 02:10:00 2025 GMT
Subject: CN=68a922f9-d979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:24:98:e5:c8:31:f0:6c:17:7e:aa:62:a9:fa:
b7:fd:7d:dd:d8:c6:5b:e3:5b:f2:78:ee:c7:f6:6a:
e7:2a:2c:7d:06:49:47:79:8e:7a:fb:d7:57:60:17:
6c:d2:1b:04:9f:7a:96:b3:39:24:eb:cf:af:92:50:
40:3d:e8:5b:2c:0c:97:e9:89:7e:92:68:32:97:90:
75:5f:c8:42:8e:b9:35:b0:94:fd:14:c0:79:6d:e2:
30:82:0f:4d:8b:70:a9:00:ef:cd:2a:08:af:26:88:
d3:75:da:fb:2c:e7:e7:08:9a:e5:fc:71:65:18:49:
11:7e:c4:93:6c:fc:b4:a4:ed:d3:07:bb:fe:fc:18:
69:35:79:fe:1a:f0:e3:50:09:a1:f7:9d:06:44:6f:
c0:a1:c6:5b:3d:56:c5:64:0b:83:e6:35:18:5c:4f:
ae:e6:28:8f:d7:87:32:da:b1:b2:b7:14:c8:3e:7d:
55:e6:50:48:72:b9:6d:23:a0:2a:c2:ff:aa:11:5c:
bf:bb:f1:52:4b:9d:9f:b1:06:d2:ef:d4:6b:c4:7f:
07:1d:ad:f7:a3:90:e2:81:03:41:67:4d:44:1a:47:
47:8a:79:5b:b2:40:34:33:83:78:d2:ad:23:9d:c5:
77:1c:42:e8:2d:fa:8e:2a:79:40:32:66:3f:a8:ba:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:D7:37:BE:28:01:F8:60:E6:69:B7:9B:03:2A:9A:9D:B3:C4:E9
X509v3 Authority Key Identifier:
keyid:0F:59:50:81:81:2D:F1:59:7E:84:EC:11:46:4E:64:C1:87:EE:38:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/F51239688BD811EBAEE28A37F8AEA228/D1lQgYEt8Vl-hOwRRk5kwYfuOAg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e0:97:92:b0:69:97:fb:89:1c:c1:9d:e4:5e:17:57:5c:cb:
b7:ca:37:84:21:a1:5c:54:16:0a:2b:c7:45:5e:90:c3:2d:f2:
90:b2:9e:75:4d:81:a0:0b:6e:13:66:01:61:e2:ab:69:57:5d:
65:af:fb:d8:59:08:ea:5f:18:34:35:1a:5e:3e:6b:d3:db:75:
81:ac:4d:44:b5:fa:12:c6:cc:71:25:cc:f7:85:a4:4c:c6:76:
27:49:23:ea:ad:90:a7:65:a4:50:b2:34:14:bb:65:09:23:e1:
e2:b1:a4:23:40:da:3c:b5:86:31:ea:ce:3a:d7:6d:7f:8a:3b:
ba:b3:cc:bc:61:18:94:0f:9c:46:63:bf:77:6c:4f:8e:57:e3:
3c:b4:93:61:cb:84:5b:85:6c:d4:2b:b2:b1:25:60:2f:10:f6:
2a:64:6b:f3:c4:dd:e5:6d:64:56:63:78:72:26:95:a7:93:5b:
05:18:2b:65:a7:5f:68:5c:ce:63:62:d4:9b:fa:3f:c4:4c:64:
d6:44:89:31:65:6b:4b:4f:84:eb:43:bf:30:f5:75:18:e1:a9:
aa:93:28:15:fc:17:81:db:c9:2e:d4:74:3b:37:b9:43:9d:b2:
a3:a9:e9:ef:6b:8f:d0:a1:ec:53:33:3a:06:65:6e:22:f3:41:
9e:1f:c0:62
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBngwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZDQjZBRjExMC8GA1UEBRMoMEY1OTUwODE4MTJERjE1OTdFODRFQzExNDY0RTY0
QzE4N0VFMzgwODAeFw0yNTA4MjMwMjEwMDBaFw0yNTA4MjUwMjEwMDBaMBgxFjAU
BgNVBAMTDTY4YTkyMmY5LWQ5NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaJJjlyDHwbBd+qmKp+rf9fd3YxlvjW/J47sf2aucqLH0GSUd5jnr711dg
F2zSGwSfepazOSTrz6+SUEA96FssDJfpiX6SaDKXkHVfyEKOuTWwlP0UwHlt4jCC
D02LcKkA780qCK8miNN12vss5+cImuX8cWUYSRF+xJNs/LSk7dMHu/78GGk1ef4a
8ONQCaH3nQZEb8Chxls9VsVkC4PmNRhcT67mKI/XhzLasbK3FMg+fVXmUEhyuW0j
oCrC/6oRXL+78VJLnZ+xBtLv1GvEfwcdrfejkOKBA0FnTUQaR0eKeVuyQDQzg3jS
rSOdxXccQugt+o4qeUAyZj+ounGbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzXzX
N74oAfhg5mm3mwMqmp2zxOkwHwYDVR0jBBgwFoAUD1lQgYEt8Vl+hOwRRk5kwYfu
OAgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2L0Y1MTIzOTY4OEJEODExRUJBRUUyOEEzN0Y4QUVBMjI4L0QxbFFn
WUV0OFZsLWhPd1JSazVrd1lmdU9BZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QxbFFnWUV0OFZsLWhPd1JSazVrd1lmdU9BZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjZDQjYvRjUxMjM5Njg4QkQ4MTFFQkFFRTI4QTM3RjhB
RUEyMjgvRDFsUWdZRXQ4VmwtaE93UlJrNWt3WWZ1T0FnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM4JeSsGmX+4kcwZ3kXhdXXMu3yjeE
IaFcVBYKK8dFXpDDLfKQsp51TYGgC24TZgFh4qtpV11lr/vYWQjqXxg0NRpePmvT
23WBrE1EtfoSxsxxJcz3haRMxnYnSSPqrZCnZaRQsjQUu2UJI+HisaQjQNo8tYYx
6s46121/iju6s8y8YRiUD5xGY793bE+OV+M8tJNhy4RbhWzUK7KxJWAvEPYqZGvz
xN3lbWRWY3hyJpWnk1sFGCtlp19oXM5jYtSb+j/ETGTWRIkxZWtLT4TrQ78w9XUY
4amqkygV/BeB28ku1HQ7N7lDnbKjqenva4/QoexTMzoGZW4i80GeH8Bi
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:08 2025 by rpki-client