
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier: sw2b084cCoE2Fy/r5/AZEAvlXh2CUxJPMe5b20JktsE=
Subject key identifier: CF:04:9E:F6:99:11:D0:1D:DE:C8:79:5A:E4:F6:6C:A3:D5:A5:B9:35
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer: /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial: 040A
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number: 0409
Signing time: Sun 06 Jul 2025 03:18:43 +0000
Manifest this update: Sun 06 Jul 2025 03:18:43 +0000
Manifest next update: Tue 08 Jul 2025 03:18:42 +0000
Files and hashes: 1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: 7Q/SdbomQVINJTgsTqZQhxmpHrU7jFcAzy7PNtxgSHE=)
2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Validity
Not Before: Jul 6 03:18:43 2025 GMT
Not After : Jul 8 03:18:42 2025 GMT
Subject: CN=6869eb13-17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:ec:ee:c4:d7:67:fd:49:37:9a:9d:1e:99:
19:d1:63:d9:03:d2:fa:34:4e:7a:c0:44:c4:8b:b4:
75:2a:bb:91:31:f7:67:1f:a5:ef:55:58:e3:30:58:
27:8f:ef:fd:2c:77:3f:70:28:c0:89:a7:64:4b:08:
12:eb:32:53:7b:1c:09:18:57:00:51:c9:18:b4:4d:
be:0d:24:ea:61:6d:2d:16:b8:f1:51:cf:06:56:e9:
b4:f1:2e:2b:6a:a9:5b:13:07:d8:48:74:04:b9:7e:
f1:03:7f:72:0a:ed:cb:86:27:9f:c9:4d:1f:b2:1d:
df:4d:6a:61:de:ba:6f:d1:bb:e8:09:1e:f5:79:a8:
13:e9:c4:89:c1:77:f4:db:ea:f4:c0:3e:0d:85:ef:
cf:e5:c8:01:e3:ed:a0:8d:c3:af:ae:57:45:3f:49:
3b:d1:6c:c6:fd:11:db:e7:db:47:83:1e:3a:84:a7:
db:1e:30:ec:b5:cb:fe:4b:bc:78:ce:ed:86:a8:50:
2e:fd:c3:f4:bd:bb:6a:57:1a:9b:1e:05:67:0a:2e:
3f:e4:40:ce:80:eb:82:fe:c3:06:10:40:97:0a:85:
ba:00:ab:9d:37:d5:c2:c3:5d:79:19:67:42:b9:52:
e2:ed:1d:20:dd:07:9f:a2:88:e3:ee:ca:e6:31:8e:
59:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:04:9E:F6:99:11:D0:1D:DE:C8:79:5A:E4:F6:6C:A3:D5:A5:B9:35
X509v3 Authority Key Identifier:
keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:b7:1d:31:0e:0b:5a:b8:d8:6c:1a:8f:98:4e:4a:b6:a6:a2:
53:f6:2e:f6:cc:90:03:52:19:23:5d:21:17:39:31:6a:bf:80:
d6:42:1e:1d:7f:10:cb:db:13:03:75:88:a6:cc:1e:46:d8:fc:
f2:e4:ee:73:f3:d4:7d:76:fd:20:72:07:a5:93:2f:17:24:b6:
62:b9:a5:f6:b2:77:36:c4:be:0e:2a:7d:07:13:50:0f:ed:aa:
e1:5e:72:a5:5f:9c:b9:e9:95:95:32:27:6f:d8:e7:e9:35:ad:
50:16:0c:71:0c:36:cd:c8:3f:4c:08:54:a7:6b:a5:75:6a:ce:
8b:ce:30:e5:d0:ff:80:42:60:62:44:85:cd:7e:f4:5c:1b:38:
4c:98:62:d3:b1:97:dd:d5:06:9c:bd:83:26:a5:d3:ed:60:32:
96:63:69:4d:61:3d:7b:12:d7:bc:7b:5c:c5:cc:bf:cc:71:2a:
40:57:01:c0:94:16:d4:14:b8:1b:db:90:49:15:c1:9f:9d:5e:
84:87:ab:02:60:95:ef:83:2d:52:f8:d0:b1:9c:e4:e1:f4:6d:
74:05:96:ac:aa:7d:62:44:c8:61:2f:05:75:4e:78:c5:dc:8a:
c2:e7:07:3f:6b:90:ec:0d:8e:ee:d2:3a:fe:49:a3:4a:da:9f:
fd:30:48:78
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBAowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxNTlBUjExMC8GA1UEBRMoNjcyMUExOTJGQ0ZEMjYxQTc3QzFDRERDNDc4OTFD
NzgxNEZBQzc3NzAeFw0yNTA3MDYwMzE4NDNaFw0yNTA3MDgwMzE4NDJaMBgxFjAU
BgNVBAMTDTY4NjllYjEzLTE3YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkuuzuxNdn/Uk3mp0emRnRY9kD0vo0TnrARMSLtHUqu5Ex92cfpe9VWOMw
WCeP7/0sdz9wKMCJp2RLCBLrMlN7HAkYVwBRyRi0Tb4NJOphbS0WuPFRzwZW6bTx
LitqqVsTB9hIdAS5fvEDf3IK7cuGJ5/JTR+yHd9NamHeum/Ru+gJHvV5qBPpxInB
d/Tb6vTAPg2F78/lyAHj7aCNw6+uV0U/STvRbMb9Edvn20eDHjqEp9seMOy1y/5L
vHjO7YaoUC79w/S9u2pXGpseBWcKLj/kQM6A64L+wwYQQJcKhboAq5031cLDXXkZ
Z0K5UuLtHSDdB5+iiOPuyuYxjlmlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzwSe
9pkR0B3eyHla5PZso9WluTUwHwYDVR0jBBgwFoAUZyGhkvz9Jhp3wc3cR4kceBT6
x3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTU5LzhBMEE1QUU4NEFCQzExRURBQ0ZEMzE4NEYxMjIyNDY4L1p5R2hr
dno5SmhwM3djM2NSNGtjZUJUNngzYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1p5R2hrdno5SmhwM3djM2NSNGtjZUJUNngzYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzIxNTkvOEEwQTVBRTg0QUJDMTFFREFDRkQzMTg0RjEyMjI0
NjgvWnlHaGt2ejlKaHAzd2MzY1I0a2NlQlQ2eDNjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFtx0xDgtauNhsGo+YTkq2pqJT9i72zJAD
UhkjXSEXOTFqv4DWQh4dfxDL2xMDdYimzB5G2Pzy5O5z89R9dv0gcgelky8XJLZi
uaX2snc2xL4OKn0HE1AP7arhXnKlX5y56ZWVMidv2OfpNa1QFgxxDDbNyD9MCFSn
a6V1as6LzjDl0P+AQmBiRIXNfvRcGzhMmGLTsZfd1QacvYMmpdPtYDKWY2lNYT17
Ete8e1zFzL/McSpAVwHAlBbUFLgb25BJFcGfnV6Eh6sCYJXvgy1S+NCxnOTh9G10
BZasqn1iRMhhLwV1TnjF3IrC5wc/a5DsDY7u0jr+SaNK2p/9MEh4
-----END CERTIFICATE-----
Generated at Sun Jul 6 14:48:31 2025 by rpki-client