Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
File: jslBzFrhaLO7xSJOt19628St-As.mft (raw, json)
Hash identifier: 3ueUNbwMSLz0ziJh5zVXz5woRWdHujinqc5H/OUp7pU=
Subject key identifier: E5:72:E3:AF:58:48:00:D7:F3:8B:59:AE:D8:9D:60:9F:C4:72:64:E6
Authority key identifier: 8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
Certificate issuer: /CN=F3640700AF/serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Certificate serial: 0E99
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
Manifest number: 0E99
Signing time: Sun 29 Jun 2025 00:52:20 +0000
Manifest this update: Sun 29 Jun 2025 00:52:19 +0000
Manifest next update: Tue 01 Jul 2025 00:52:19 +0000
Files and hashes: 1: jslBzFrhaLO7xSJOt19628St-As.crl (hash: KyId75pAdwqS3p7V1UAG3Px3uRS9vl7qzKvUeqDxQag=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3737 (0xe99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640700AF, serialNumber=8EC941CC5AE168B3BBC5224EB75F7ADBC4ADF80B
Validity
Not Before: Jun 29 00:52:19 2025 GMT
Not After : Jul 1 00:52:19 2025 GMT
Subject: CN=68608e44-7c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:c5:46:32:81:71:95:0d:a6:02:76:9b:a0:
0c:49:b9:4b:ee:62:06:77:d7:bd:5c:44:5c:a6:f5:
91:89:05:56:d1:2e:53:00:44:46:42:1d:9c:8a:0f:
d5:cb:3f:90:15:b9:58:10:57:0f:8d:04:6d:88:98:
e4:09:38:20:c9:e4:1f:ae:09:46:0e:03:06:ad:2b:
6f:ed:44:5f:f5:b3:a5:2c:cd:c3:e4:e7:3c:3f:84:
3d:79:77:44:e6:76:c5:8b:67:dc:1d:05:9c:4d:99:
10:b4:96:39:81:99:8c:33:74:54:c1:79:55:0e:37:
2a:4c:e5:9e:7e:d4:d9:2b:d0:46:e2:91:32:16:7f:
2c:b9:8d:7a:4d:d4:56:07:d3:80:63:a4:ac:97:78:
44:9e:ca:3e:77:d8:4d:b2:65:ca:3c:e1:cb:1d:87:
1b:a9:89:0e:a6:70:1c:73:b0:a6:5d:b5:4c:12:f2:
eb:27:17:54:16:c4:98:a5:4f:a9:7f:fa:fa:f6:65:
90:92:8d:25:4d:5a:9e:65:10:15:e6:42:f4:50:01:
7c:a1:de:41:6b:d7:42:c4:43:f5:04:5d:33:83:1d:
6e:d0:ce:bd:b2:0a:0e:11:da:d4:71:ec:8d:4a:9d:
ca:5a:d1:1c:2b:43:8b:96:33:d6:2a:21:eb:1e:b6:
10:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:72:E3:AF:58:48:00:D7:F3:8B:59:AE:D8:9D:60:9F:C4:72:64:E6
X509v3 Authority Key Identifier:
keyid:8E:C9:41:CC:5A:E1:68:B3:BB:C5:22:4E:B7:5F:7A:DB:C4:AD:F8:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jslBzFrhaLO7xSJOt19628St-As.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640700/70FB371C14FE11E59B04AF2AF8AEA228/jslBzFrhaLO7xSJOt19628St-As.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7a:22:fd:13:53:a1:24:df:b0:30:70:1e:15:f8:41:54:70:9d:
42:0e:16:b7:3b:87:29:aa:40:33:15:38:5b:3d:9e:0f:70:28:
0b:5d:f6:d2:3a:8e:84:29:38:f3:aa:25:68:f2:39:81:42:d6:
d2:c2:15:7f:91:6b:ae:93:dc:78:d0:31:6f:bd:c4:ae:b4:70:
8a:5f:21:e0:45:ae:96:0c:d0:de:b7:51:d4:58:40:c6:16:34:
40:2d:05:c1:67:be:a3:f4:a4:96:e1:60:72:9e:55:cc:c9:e1:
a4:a4:32:9c:30:ee:e2:48:ab:e8:14:11:ed:be:8a:e9:26:5b:
88:37:29:97:68:cc:26:d2:91:97:61:f3:47:25:69:63:ec:34:
9f:7e:bf:52:5c:39:ff:ad:5e:10:92:72:6b:8c:c1:c2:3b:82:
ac:d1:f5:bd:68:59:81:34:3c:3b:cb:b2:30:29:36:d6:d9:55:
9b:1f:af:cb:93:0c:6c:1b:a5:18:b3:3d:01:8a:36:93:ac:14:
eb:d7:33:8b:77:cb:f3:bc:0c:ce:88:af:de:28:47:ed:3b:b5:
ed:42:0e:7b:7e:35:68:7c:8a:fa:dc:e1:37:36:03:48:73:68:
a0:0e:84:d4:0f:ee:eb:4e:02:39:b0:3a:0b:49:c2:6e:81:65:
32:99:48:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDpkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA3MDBBRjExMC8GA1UEBRMoOEVDOTQxQ0M1QUUxNjhCM0JCQzUyMjRFQjc1RjdB
REJDNEFERjgwQjAeFw0yNTA2MjkwMDUyMTlaFw0yNTA3MDEwMDUyMTlaMBgxFjAU
BgNVBAMTDTY4NjA4ZTQ0LTdjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC37MVGMoFxlQ2mAnaboAxJuUvuYgZ3171cRFym9ZGJBVbRLlMAREZCHZyK
D9XLP5AVuVgQVw+NBG2ImOQJOCDJ5B+uCUYOAwatK2/tRF/1s6UszcPk5zw/hD15
d0TmdsWLZ9wdBZxNmRC0ljmBmYwzdFTBeVUONypM5Z5+1Nkr0EbikTIWfyy5jXpN
1FYH04BjpKyXeESeyj532E2yZco84csdhxupiQ6mcBxzsKZdtUwS8usnF1QWxJil
T6l/+vr2ZZCSjSVNWp5lEBXmQvRQAXyh3kFr10LEQ/UEXTODHW7Qzr2yCg4R2tRx
7I1Kncpa0RwrQ4uWM9YqIesethDLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5XLj
r1hIANfzi1mu2J1gn8RyZOYwHwYDVR0jBBgwFoAUjslBzFrhaLO7xSJOt19628St
+AswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNzAwLzcwRkIzNzFDMTRGRTExRTU5QjA0QUYyQUY4QUVBMjI4L2pzbEJ6
RnJoYUxPN3hTSk90MTk2MjhTdC1Bcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pzbEJ6RnJoYUxPN3hTSk90MTk2MjhTdC1Bcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDA3MDAvNzBGQjM3MUMxNEZFMTFFNTlCMDRBRjJBRjhB
RUEyMjgvanNsQnpGcmhhTE83eFNKT3QxOTYyOFN0LUFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6Iv0TU6Ek37AwcB4V+EFUcJ1CDha3
O4cpqkAzFThbPZ4PcCgLXfbSOo6EKTjzqiVo8jmBQtbSwhV/kWuuk9x40DFvvcSu
tHCKXyHgRa6WDNDet1HUWEDGFjRALQXBZ76j9KSW4WBynlXMyeGkpDKcMO7iSKvo
FBHtvorpJluINymXaMwm0pGXYfNHJWlj7DSffr9SXDn/rV4QknJrjMHCO4Ks0fW9
aFmBNDw7y7IwKTbW2VWbH6/LkwxsG6UYsz0BijaTrBTr1zOLd8vzvAzOiK/eKEft
O7XtQg57fjVofIr63OE3NgNIc2igDoTUD+7rTgI5sDoLScJugWUymUgz
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:13:25 2025 by rpki-client