Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: ERS4FePi5LgbgZxq0HL2oAqd3ha8pP7k367joiRG708=
Subject key identifier: 2E:A7:6D:8D:AB:E5:B4:87:1C:22:31:8E:09:60:46:61:86:4A:11:C6
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 01B2
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 01B2
Signing time: Sat 23 Aug 2025 04:35:38 +0000
Manifest this update: Sat 23 Aug 2025 04:35:38 +0000
Manifest next update: Mon 25 Aug 2025 04:35:38 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: 0HE7iefw/6iNa1ZjXF3jcNW2+cqKjE7rpkpxr5CQBLY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Aug 23 04:35:38 2025 GMT
Not After : Aug 25 04:35:38 2025 GMT
Subject: CN=68a9451a-1043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:bd:5c:5b:ec:21:7f:2c:60:c5:f6:22:da:
a3:07:5b:47:83:7f:58:65:23:46:96:66:db:80:1e:
e3:58:ce:19:5c:4c:91:41:49:3f:a6:95:ed:4b:73:
fe:9e:ad:70:d0:89:a0:90:7d:57:80:17:41:e2:e6:
73:38:70:35:5e:7e:e2:18:b7:f1:1a:e0:b3:1e:c5:
31:9e:48:b3:ec:22:32:4a:bb:cc:27:12:d0:32:ea:
43:b0:e8:13:4b:4e:d6:fd:65:ae:ac:b4:b8:71:b5:
2b:04:9a:44:2a:5b:13:77:99:39:c6:57:c6:cc:82:
f3:65:97:9e:83:3e:1f:8e:d3:33:08:71:36:e6:0f:
f8:4d:c7:68:28:9a:1f:f8:4a:65:20:29:76:3b:d3:
f2:38:b7:b0:3a:70:40:f2:5f:8a:82:09:f0:a7:bf:
27:b2:d8:66:6b:4e:ad:75:d4:bc:62:00:85:da:44:
76:cc:85:0c:d5:57:58:b1:7d:27:85:6d:f1:c2:ef:
5d:e2:1b:7f:11:1f:93:ec:d5:15:8d:ad:b4:f4:9e:
03:9e:4b:d0:19:e6:e8:7d:0f:9e:a2:22:af:d5:ed:
b9:cf:26:c2:5d:dc:d4:1d:46:cb:b7:c9:74:6a:15:
4b:62:23:28:d2:44:86:73:9e:16:ce:5f:d1:85:f9:
1e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A7:6D:8D:AB:E5:B4:87:1C:22:31:8E:09:60:46:61:86:4A:11:C6
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:2c:40:78:99:61:e6:a3:65:e0:ee:a9:65:a3:8a:8d:06:ae:
1a:5e:09:0a:43:b3:80:ea:e2:53:ae:fd:95:56:c0:29:b2:1a:
db:a5:5d:33:2e:6d:08:ac:0e:72:d2:5a:02:63:7d:41:07:7e:
82:8a:2b:c7:68:51:88:fd:ec:47:cc:07:5c:11:10:0a:63:c2:
ea:11:e5:13:f5:26:c5:37:e5:be:c0:cd:a4:5e:4d:54:25:7e:
ac:c9:bc:79:02:a9:06:e9:14:18:6a:dc:f9:7a:e2:70:ea:c7:
19:8a:cc:ee:5b:f7:66:90:47:f0:16:34:01:3c:f1:3b:67:e8:
dd:16:30:9d:a8:33:d3:39:5d:4f:e1:9e:ad:78:34:0c:70:3b:
f0:34:9d:67:76:ff:a4:6e:d4:18:81:2c:fb:79:b3:a0:7a:28:
60:13:0f:ab:fe:8e:fe:9f:39:59:5b:5c:e9:26:d2:fc:4f:e6:
95:61:41:80:2d:1f:0a:17:bd:89:c6:87:62:7e:4f:da:66:94:
96:d8:e4:79:60:7e:43:bd:bf:e5:4c:eb:16:13:9d:01:82:28:
7d:d5:7a:44:12:3c:8c:c1:bf:1f:80:36:9f:51:44:26:5a:33:
14:a5:2d:26:d5:a8:80:7d:01:0b:7a:7c:c6:b3:02:5d:b5:7b:
7a:fb:94:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:41 2025 by rpki-client