
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File: osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier: L2XS77ViG5no4vJf5m/bgQaUlA8yhbsrzYnHqL84L3Q=
Subject key identifier: AE:9E:FE:F1:87:29:C2:3B:18:10:9E:5D:8E:EF:A4:10:A3:7F:28:2E
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer: /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial: 0D91
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number: 0D85
Signing time: Sat 23 Aug 2025 01:03:09 +0000
Manifest this update: Sat 23 Aug 2025 01:03:08 +0000
Manifest next update: Mon 25 Aug 2025 01:03:08 +0000
Files and hashes: 1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: 6dZNDJJGoqpfXfkCMJ5zUnx5ssGwyDFvxipLSrwSlac=)
2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3473 (0xd91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Validity
Not Before: Aug 23 01:03:08 2025 GMT
Not After : Aug 25 01:03:08 2025 GMT
Subject: CN=68a9134d-b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:df:ce:14:a4:11:22:e8:e9:b2:db:5d:25:
8b:ff:02:a8:14:17:e6:fd:71:34:1a:5f:df:c7:bc:
a4:25:17:42:18:cb:8c:f8:49:0d:cb:1f:f9:be:88:
8e:91:2b:e6:7c:62:fc:f2:a1:4a:79:52:63:3b:5a:
a7:cd:48:66:a8:b4:f8:25:0e:17:15:c4:32:96:3b:
58:55:f4:ec:ae:be:74:10:b0:04:dc:5f:00:52:db:
1d:32:df:d6:d8:63:5b:b8:ba:d1:bc:d3:a0:4f:79:
8e:4a:bd:d4:28:b8:2b:aa:43:41:76:8c:9c:4c:7d:
c6:8f:f7:5b:e4:70:a7:89:4b:27:aa:9d:c4:95:38:
84:d6:b9:10:55:75:2d:f4:81:76:52:ff:a0:c6:46:
54:aa:d6:d4:aa:f3:63:57:b4:2c:eb:30:2c:c7:08:
57:3b:95:f6:e5:8d:11:85:df:aa:e7:00:8c:66:7e:
82:5e:f0:f2:4b:ec:63:95:9f:3c:39:a9:b3:60:39:
bd:6b:8d:58:0a:44:ee:74:9d:a0:c0:12:11:4e:f0:
a0:ed:76:d9:32:df:97:06:4f:3a:df:56:c5:99:b1:
f4:61:4c:d7:b5:27:38:3f:89:ef:a2:35:46:3b:8e:
5e:7f:d0:ae:f8:88:14:6f:43:de:87:42:3f:75:94:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:FE:F1:87:29:C2:3B:18:10:9E:5D:8E:EF:A4:10:A3:7F:28:2E
X509v3 Authority Key Identifier:
keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:a9:b1:03:cb:f2:be:03:64:f0:a5:62:80:54:53:08:29:1b:
14:31:98:dd:2e:0c:d8:97:b4:3b:0a:94:81:09:5b:27:2d:2f:
cc:e5:26:39:a8:18:c6:cf:1e:3c:75:b4:56:0f:2b:de:6a:00:
b7:05:c1:74:ff:76:a9:b0:04:49:b4:c4:a0:57:21:04:43:93:
20:64:db:a2:a2:4c:1b:f8:30:6d:a1:23:b3:8a:95:3d:90:dc:
88:2e:79:68:89:88:00:8f:01:54:30:29:9b:8c:25:20:4a:1c:
be:38:38:21:79:90:2e:0c:12:0f:41:dc:4d:23:71:4f:0e:75:
1b:5a:40:0c:39:be:eb:e4:94:35:c7:fa:cd:fe:a5:8d:5a:94:
73:67:6d:c9:04:b5:73:f0:85:3a:69:df:a0:76:93:2f:69:69:
2b:b9:6b:7c:76:74:68:70:bf:74:21:5d:cc:1e:90:81:84:6f:
94:9c:ca:ff:16:08:64:24:c3:ab:b6:8e:5f:cf:a2:97:20:71:
5b:9e:39:4b:54:89:b1:22:4c:6d:86:72:7d:65:40:a0:c1:d0:
b7:70:9d:c9:a2:4a:7a:36:52:0e:62:66:c2:a4:53:49:b1:99:
69:8a:37:12:84:64:9f:a9:e0:5c:00:b4:d7:38:ff:e9:e7:15:
38:be:b6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:37 2025 by rpki-client