Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier: IR+1s6LCHSbSnFOq2AHVKSEPYYFc+gLyEnay2KE5fN0=
Subject key identifier: C4:81:32:5E:FD:8E:F8:CC:53:B1:86:F0:EA:69:CD:65:CE:0E:EA:F7
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer: /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial: CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number: CB
Signing time: Thu 03 Jul 2025 05:07:18 +0000
Manifest this update: Thu 03 Jul 2025 05:07:17 +0000
Manifest next update: Sat 05 Jul 2025 05:07:17 +0000
Files and hashes: 1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: 5/wj6XbRjSUAzcPBvA6gG8XB/crR2OuWc8b23qpbG48=)
2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 204 (0xcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Validity
Not Before: Jul 3 05:07:17 2025 GMT
Not After : Jul 5 05:07:17 2025 GMT
Subject: CN=68661006-d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:06:b4:ac:e6:d2:44:95:b9:a8:da:63:0f:57:
7b:eb:4d:c0:93:d8:4a:cc:76:75:28:2b:0f:99:d6:
64:7e:0d:d0:3e:e0:b1:c8:9b:ee:46:52:1b:08:19:
47:bf:6c:da:c1:4f:6b:f0:9e:a8:bb:88:1b:ba:91:
04:08:23:5f:90:90:98:e3:13:c5:b5:b1:ee:15:d6:
0e:08:e3:00:48:ce:53:1b:29:01:43:73:68:f5:b1:
32:de:c1:12:ad:fe:c3:f9:54:ea:43:c9:a9:55:ef:
2f:d9:8e:d7:d2:ac:87:6e:4f:1a:81:46:5c:38:6f:
3e:16:6d:e0:de:47:3f:c9:5e:50:b8:b5:01:4c:c4:
36:b6:a1:5d:d9:9d:28:f7:e4:b0:33:f4:57:53:22:
e2:82:4a:e3:0f:ae:ed:76:a4:72:58:25:e5:52:ea:
06:03:2c:84:9a:1f:e7:e2:b8:1c:14:a6:1f:21:29:
f3:f6:9f:98:76:37:12:fd:f3:23:c7:9c:18:1c:23:
a8:97:50:94:59:9e:e6:cf:6f:ac:b0:32:ee:96:1c:
0d:63:2c:c1:a2:87:9d:bd:37:b3:4c:09:f6:90:1f:
26:ef:8e:29:89:ef:98:54:93:1d:4a:ca:12:3d:e1:
b9:ff:b3:7a:37:b8:d1:60:bd:9c:5a:16:a8:c4:43:
c0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:81:32:5E:FD:8E:F8:CC:53:B1:86:F0:EA:69:CD:65:CE:0E:EA:F7
X509v3 Authority Key Identifier:
keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
68:f1:fe:5b:90:6d:7d:78:1f:83:46:7c:e6:fa:97:3f:8a:8c:
69:92:80:68:aa:6e:c1:f8:fc:84:f0:67:b0:04:2e:3e:18:91:
80:47:46:ec:16:0c:f3:12:d6:fc:75:89:06:a2:2e:93:38:7d:
a3:d4:8c:7d:e2:68:7d:2b:5b:94:2e:90:87:08:c9:35:15:85:
fa:74:0d:af:0a:cc:f6:49:21:bf:69:04:66:13:c0:d7:de:56:
94:c7:0c:e2:f0:b1:65:f1:85:b7:bf:75:66:a4:ab:c5:eb:72:
21:0a:a0:aa:d2:af:50:11:83:29:dc:6f:bf:2c:c9:23:cd:22:
37:27:73:f4:48:52:de:77:3f:d5:f3:00:17:0b:4c:09:5f:85:
23:38:29:e5:f7:d4:71:f1:02:28:7c:38:34:d8:b4:3b:f1:e1:
19:d6:6b:3d:84:d7:e9:15:21:5d:c5:89:62:3e:1f:45:f0:89:
48:4c:b8:1e:91:01:34:23:97:2d:bb:9f:17:95:3b:0d:8d:4e:
70:85:2b:82:96:95:67:52:52:29:7b:dc:df:b5:ef:1b:c6:ea:
cd:16:96:19:fb:4e:e7:68:89:d8:77:21:b3:d2:12:af:0d:da:
9e:73:a1:fb:1e:1b:4f:02:48:b5:18:42:f1:5c:26:72:6e:7c:
f4:42:7c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:05:17 2025 by rpki-client