Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
File: 4-0KKxQeZZxFITmco8yPgYx19x0.mft (raw, json)
Hash identifier: ORtbKB1azG9FB5Lj9n+lU40/xWylZlWjgWrHQCmkQ5I=
Subject key identifier: E7:0E:3C:2A:5C:CC:76:22:11:01:4A:4D:C4:1F:84:F9:41:D8:59:37
Authority key identifier: E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
Certificate issuer: /CN=F363A48BAF/serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Certificate serial: 37
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
Manifest number: 36
Signing time: Sat 23 Aug 2025 05:21:50 +0000
Manifest this update: Sat 23 Aug 2025 05:21:49 +0000
Manifest next update: Mon 25 Aug 2025 05:21:49 +0000
Files and hashes: 1: 4-0KKxQeZZxFITmco8yPgYx19x0.crl (hash: qNd6wW7aIBAjE0ntIfAtqPBTZdNtwTuY+Fk55pKa1IY=)
2: 075271E4574811F0A7DC6D7EDAE4EC9C.roa (hash: zOGSgi/1KJ9xQcEdBGnV40++jUsJYV1/+BcJ8fXP1w8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363A48BAF, serialNumber=E3ED0A2B141E659C4521399CA3CC8F818C75F71D
Validity
Not Before: Aug 23 05:21:49 2025 GMT
Not After : Aug 25 05:21:49 2025 GMT
Subject: CN=68a94fee-55e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:28:be:e8:b0:96:b0:c3:f6:b6:78:56:fb:
ba:6f:9c:2a:b8:ae:82:c9:ac:74:7c:e1:b9:55:cb:
6a:f3:ef:93:a0:a7:b9:d3:66:95:14:22:0e:3c:92:
9d:99:26:5d:24:5e:f4:69:6a:dc:47:ba:5d:e8:6d:
6f:1a:9f:64:25:53:1a:29:82:48:8c:2f:66:8b:ef:
e2:cd:5e:6a:df:6c:01:88:12:b0:a6:b7:4b:1f:fe:
25:62:22:0f:7c:db:99:2c:13:99:bf:87:53:c0:52:
94:6f:b3:64:71:1a:c8:97:45:77:9c:4f:33:eb:05:
63:11:c2:b6:33:b8:bb:8e:6f:7c:77:f4:a4:e4:58:
8d:8c:8a:cd:ce:18:3b:6a:13:7f:b6:e9:36:71:0e:
f1:e6:58:67:d4:60:91:56:e1:c6:81:27:53:f6:56:
55:44:f3:07:c2:2b:64:cc:02:99:f1:8e:fe:a9:f5:
f6:d6:58:64:30:49:e1:29:b2:92:f0:46:f8:ac:b4:
83:82:71:df:1e:45:da:6b:2a:94:97:94:c4:1a:ef:
46:fb:dc:94:00:51:2f:b3:e3:6b:bb:71:a6:6b:6c:
c9:15:81:b1:db:b9:17:9c:1d:a1:99:df:64:1d:62:
c7:f7:76:55:62:db:22:f6:57:57:2a:d1:15:e7:aa:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0E:3C:2A:5C:CC:76:22:11:01:4A:4D:C4:1F:84:F9:41:D8:59:37
X509v3 Authority Key Identifier:
keyid:E3:ED:0A:2B:14:1E:65:9C:45:21:39:9C:A3:CC:8F:81:8C:75:F7:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-0KKxQeZZxFITmco8yPgYx19x0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A48B/103FED46574711F0BA585979DAE4EC9C/4-0KKxQeZZxFITmco8yPgYx19x0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:54:0c:09:b9:9c:93:64:2c:f2:ee:5f:e5:db:c5:73:e7:26:
8c:5f:42:1a:db:fc:15:bb:8d:d2:c4:ac:52:68:9e:6c:bd:13:
c2:fa:fe:75:7e:da:5a:6c:c4:3f:71:96:aa:c7:a5:74:d5:a7:
2e:fc:33:40:a1:e1:f5:41:ba:cc:d4:dc:7f:15:0b:fb:98:65:
34:e5:08:89:8b:57:98:e4:fc:8e:53:10:f5:fd:45:c1:8d:6a:
89:ce:ba:2f:d3:dd:c6:f7:4c:66:cb:a2:fe:fd:2e:9f:38:71:
4b:f1:1d:c6:3b:89:f0:bb:d9:c0:5a:76:2e:1d:58:c8:21:b5:
d1:40:28:9e:0c:98:94:4a:c1:e5:a0:2a:80:c1:4d:ed:2e:9e:
17:d0:57:cc:51:00:ae:be:cd:78:30:4e:19:5e:21:d9:04:7d:
16:d7:ad:fb:1b:15:80:80:25:5a:fa:ae:ba:2a:01:46:3d:59:
76:8a:fe:a3:50:3b:e5:1a:d6:be:5f:8e:4a:91:76:a0:a3:3a:
91:0f:cc:cd:af:db:22:3e:db:7a:9f:4f:9c:06:31:35:f1:8b:
e6:ed:b0:b5:16:93:8d:5e:af:e9:12:bc:c2:32:65:ce:d9:10:
be:b7:0b:ec:42:09:45:cb:5e:9e:cb:95:a2:9e:03:f6:cb:ad:
97:e2:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:33 2025 by rpki-client