Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
File: RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft (raw, json)
Hash identifier: qj1CCmzehEt9ZET4rHm+6jN0mOOEeXWjKC8cs2gqpZI=
Subject key identifier: 6C:AC:F3:50:6B:C8:9F:68:F0:57:C4:90:BE:12:D0:FF:8A:82:FD:5C
Authority key identifier: 44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
Certificate issuer: /CN=F363CC54AF/serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Certificate serial: 089A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
Manifest number: 0897
Signing time: Wed 02 Jul 2025 01:38:38 +0000
Manifest this update: Wed 02 Jul 2025 01:38:37 +0000
Manifest next update: Fri 04 Jul 2025 01:38:37 +0000
Files and hashes: 1: RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl (hash: RSfiSVwFteHzKVtiR+AgWp8O767K49Af4ZfQQtvVSmk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363CC54AF, serialNumber=44AF2366B6314C5177AECD1521877D7C5AB1EC6F
Validity
Not Before: Jul 2 01:38:37 2025 GMT
Not After : Jul 4 01:38:37 2025 GMT
Subject: CN=68648d9e-bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:5d:49:2f:64:76:bc:59:7a:c4:be:22:69:
72:35:d3:b6:59:a0:80:c0:fe:92:cd:58:ab:44:bc:
0b:5d:8c:f3:5c:ca:20:55:9b:56:b3:fb:2b:56:d5:
45:e0:a7:43:31:f2:c4:6f:7e:06:fe:6e:d1:8b:11:
e0:c5:8c:2b:3b:a1:e9:54:45:6f:73:c9:7f:15:bb:
32:fc:0b:a5:a7:f3:b3:43:7a:0a:bc:0f:d0:49:06:
ec:98:53:6b:03:fd:ec:fd:d1:87:bf:d5:6c:10:99:
1c:a1:71:8b:db:04:bc:c7:78:8d:53:25:db:11:1d:
19:84:9e:47:f7:a6:b7:ad:6d:cb:00:9f:4f:43:29:
b7:15:ed:60:ec:ef:5b:90:6a:d5:cf:99:eb:2a:db:
12:53:fa:3d:32:a4:ab:32:ec:0c:0a:2e:2a:84:01:
dc:1e:5a:bd:cb:1f:af:ff:e3:ea:43:59:3e:8d:e7:
02:20:96:b0:a5:0d:c5:c4:ea:d0:e2:e7:4a:b3:df:
44:14:74:75:14:cf:39:84:67:5f:1b:8e:9a:04:9f:
18:57:57:50:0b:4a:59:62:9c:a6:f1:a5:aa:42:b0:
f5:44:72:3e:d5:f0:f6:47:11:0b:91:0b:99:ce:f0:
a3:54:7d:ef:9b:e7:7f:cc:c2:9d:73:67:24:27:40:
46:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:F3:50:6B:C8:9F:68:F0:57:C4:90:BE:12:D0:FF:8A:82:FD:5C
X509v3 Authority Key Identifier:
keyid:44:AF:23:66:B6:31:4C:51:77:AE:CD:15:21:87:7D:7C:5A:B1:EC:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RK8jZrYxTFF3rs0VIYd9fFqx7G8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC54/6F78F9A4C59111E9B6C62E2FF8AEA228/RK8jZrYxTFF3rs0VIYd9fFqx7G8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:d9:b5:0f:30:64:da:cf:52:ab:02:44:53:80:73:57:40:
00:65:41:88:2c:3e:24:51:a4:c6:e3:24:18:7f:47:82:20:03:
3e:58:91:b3:5d:a2:73:c3:a4:79:10:45:bc:f3:fa:e0:69:55:
2e:c7:69:c9:1a:86:50:54:df:06:e1:7c:b7:b5:d1:25:cb:5c:
73:1c:c8:9e:4f:c8:ce:78:fe:14:97:f1:8f:a3:42:d9:fd:7c:
ef:09:bc:2e:28:35:7a:09:83:a5:da:59:3d:e0:31:a9:95:eb:
5f:44:e1:a5:a2:84:0d:e8:cb:9b:56:92:86:d0:3e:3e:cb:6b:
8d:e7:f4:ff:f0:79:d5:70:76:0e:f4:9a:88:68:65:5c:84:04:
62:43:75:61:4c:c4:21:e7:cb:c5:23:fa:63:27:f1:ef:42:0d:
13:07:92:79:00:dc:e7:cb:09:d2:e1:df:f8:3c:5f:0d:5c:3c:
09:2d:5f:92:00:9e:10:81:e3:b3:26:8f:60:06:3a:e8:a7:41:
4b:90:cc:a3:95:63:ef:98:e4:bc:fc:00:8e:ac:ab:3e:85:c4:
9c:79:08:84:dd:90:b5:fa:c7:56:d8:b2:a2:89:80:0b:0b:c0:
b2:af:25:88:cc:0d:20:91:83:32:a9:d7:78:ed:92:7b:ef:83:
c4:fb:b2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:02:08 2025 by rpki-client