Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: LcOuM7aS6oAkmBjbR3K1ey9SXxR1YhXkQacUnOUvsJw=
Subject key identifier: F4:56:75:10:00:A4:12:7A:06:25:3A:26:34:F7:A9:E1:60:AC:B5:F5
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 04BE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 04BD
Signing time: Sat 23 Aug 2025 02:56:10 +0000
Manifest this update: Sat 23 Aug 2025 02:56:10 +0000
Manifest next update: Mon 25 Aug 2025 02:56:10 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: UiJIy6Ktyia7ck6Xy60y2YIvL2rWaeUfKetb3OvTSaE=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1214 (0x4be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Aug 23 02:56:10 2025 GMT
Not After : Aug 25 02:56:10 2025 GMT
Subject: CN=68a92dca-fc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:d8:19:55:9b:f3:6a:fc:e3:13:0a:b6:6e:
c6:cb:b4:a9:f6:1e:80:7c:05:a2:a7:32:3e:f3:e1:
db:52:d9:1a:88:0d:2b:b3:2a:83:1e:09:ad:ca:d4:
0c:96:a8:83:2d:bb:33:2b:be:84:fa:8a:e2:db:94:
18:09:e6:3e:71:f2:68:3f:ff:d8:84:1b:48:3e:3d:
44:8e:c3:21:7f:42:8f:f0:62:2d:56:ad:af:eb:10:
10:7a:79:2a:c8:f7:11:ac:04:5a:39:6e:1f:6a:33:
42:c5:97:59:25:15:1f:23:98:74:c5:ef:8f:00:96:
a9:07:67:fb:56:c7:fc:43:99:81:1f:bf:9e:12:e4:
4b:25:1f:c5:3b:53:2f:a3:20:c1:0c:d8:53:cc:3f:
94:c7:08:19:00:22:21:73:34:36:cc:5f:87:fc:b9:
6f:ab:c1:3b:23:5f:b4:f1:6f:25:41:3b:92:8d:24:
99:1a:d9:3c:ed:24:23:d4:3e:ed:5a:8b:d2:82:06:
30:b7:17:32:44:6e:97:6b:fb:43:78:0e:37:8a:bd:
64:96:61:7b:ae:c8:31:7c:3c:53:57:10:59:05:bc:
ae:b7:b2:02:7a:3b:23:92:f2:4b:51:44:54:67:9e:
fb:47:86:c2:d6:39:12:fa:ed:fb:1c:7f:91:2a:91:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:75:10:00:A4:12:7A:06:25:3A:26:34:F7:A9:E1:60:AC:B5:F5
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:14:7a:87:89:49:d9:62:e3:81:72:27:9b:9a:e3:d4:cc:59:
00:2f:d6:ba:22:92:67:b8:b3:25:a7:0a:4b:d9:6b:1d:83:03:
6c:64:4b:ba:ec:40:06:8c:95:38:2f:a0:7e:c4:b0:91:c7:f0:
1f:1d:a1:cb:8c:48:30:c6:c2:f8:14:8d:64:e6:c2:4e:30:49:
24:34:9c:de:cb:18:45:aa:bc:ec:6a:5d:c0:72:e6:66:ec:bb:
3b:90:24:5f:da:f8:1a:05:ba:fc:92:f3:87:c0:d9:69:70:2c:
08:7a:dc:83:13:e9:2b:43:c3:3e:6f:64:be:e3:08:c4:c2:6b:
66:81:6f:07:33:5d:cd:d3:b2:b2:44:5b:29:f7:2d:0d:59:df:
28:17:c7:ba:c5:45:3f:29:8f:f1:92:dc:b3:77:cb:64:eb:c7:
8e:d2:9c:97:b3:b5:92:ba:a3:b2:89:23:be:35:64:f4:6c:84:
8e:9f:eb:a0:d9:f9:e9:88:8e:b9:be:29:a2:16:aa:27:4e:82:
5d:31:cf:d1:cb:72:21:65:0f:ee:d8:53:7e:48:c2:fc:da:f4:
7f:89:7d:c9:90:ae:1c:0e:3b:47:b9:9d:84:d9:07:20:22:d9:
e5:e6:c3:ed:0e:8c:f0:d5:46:10:73:ac:e7:4b:cf:dc:58:34:
e3:f4:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:08:07 2025 by rpki-client