Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File: HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier: HyqQ+Yquq5N1JKaWo8jizHS8o2jObv5omGNHhouJntY=
Subject key identifier: 51:3C:8D:64:44:8A:21:F1:CD:6B:6A:5D:E5:7C:64:4D:2A:A0:F5:13
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: 03F8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number: 03F7
Signing time: Thu 03 Jul 2025 03:18:07 +0000
Manifest this update: Thu 03 Jul 2025 03:18:06 +0000
Manifest next update: Sat 05 Jul 2025 03:18:06 +0000
Files and hashes: 1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: /hW5w7mRt8i2+Rmbfra7ONur7L9EjaVxCAAKVuNOvMQ=)
2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 03:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1016 (0x3f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Jul 3 03:18:06 2025 GMT
Not After : Jul 5 03:18:06 2025 GMT
Subject: CN=6865f66e-5972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:83:c4:62:74:1b:d4:13:3d:1f:30:95:6a:
34:86:2a:25:55:4a:7f:db:1b:47:0f:51:2d:a7:b1:
c1:87:b2:9b:4b:f3:10:32:32:8a:8f:94:29:c9:d2:
df:c2:52:0a:d5:9e:39:bf:cc:46:df:30:a9:fa:08:
53:23:7e:68:a9:19:39:6d:d8:21:7d:03:17:a8:0c:
d6:ca:c2:bf:18:70:fb:a1:42:0a:34:43:57:13:8e:
6a:c2:2b:5e:b8:54:ef:1d:9d:0f:04:57:70:ad:4a:
1a:83:5e:a5:0e:4d:10:bc:63:c6:b2:78:60:7a:ad:
c6:98:6b:67:ec:7c:80:7d:fa:47:3d:44:bf:f1:70:
c3:f0:63:d3:a2:1b:aa:16:69:d5:c2:80:62:07:91:
b0:91:7a:0c:11:fb:55:90:3b:bf:af:5b:31:ad:c1:
f4:69:7e:73:79:aa:63:44:de:7a:af:89:90:ac:ca:
46:52:70:48:12:4f:00:c4:16:6d:1d:4b:a3:e5:0a:
1e:6a:7c:9d:7e:59:0b:1f:3c:f9:a3:72:3b:28:b4:
8d:f8:f2:db:d3:6c:88:09:79:be:42:5f:76:f6:62:
30:f4:40:1e:88:1b:39:74:51:68:e2:42:82:cd:67:
8c:54:4f:c4:56:7c:90:b6:52:d9:15:3c:42:b8:6b:
f6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3C:8D:64:44:8A:21:F1:CD:6B:6A:5D:E5:7C:64:4D:2A:A0:F5:13
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d4:b8:af:c1:24:c2:54:1a:8e:2c:85:0c:29:e3:05:20:f4:
9e:da:7e:f0:23:0f:53:78:a2:88:f4:0c:f4:35:f8:0b:f3:b9:
12:89:ee:2c:5a:e2:39:1b:01:c4:26:07:c3:78:e3:33:30:a2:
43:40:15:f4:ff:57:b6:c0:72:0f:ba:7d:5e:73:1c:6f:22:b8:
15:c7:3b:60:fa:27:4e:39:e3:4b:c7:dd:ee:22:91:ab:52:f4:
27:2a:32:08:a8:dc:64:b2:3e:5e:68:5c:73:06:82:dc:42:c4:
ef:7f:93:03:dc:ba:ed:5f:cc:0f:cd:79:ac:b9:6a:4b:89:52:
90:6a:fe:a5:9f:18:f2:08:21:49:8b:57:77:3e:f0:1c:6c:13:
4a:9d:5d:19:64:81:0a:02:47:1f:bf:6d:84:c4:7a:5c:90:db:
72:18:98:54:27:8a:a4:b3:13:97:96:ae:c3:46:0f:c2:7e:a5:
5f:dc:1d:92:dd:2d:6d:c6:02:02:93:84:c7:15:63:02:91:9b:
33:4f:5e:5e:d9:5a:f0:59:cd:02:fb:5a:6b:98:8a:00:8e:cc:
13:1b:22:24:ad:c9:8b:2a:e3:ed:41:e7:5b:a7:4d:f0:6c:17:
b3:df:19:a3:1f:64:c3:67:3f:a2:fa:72:c9:19:9d:3f:67:30:
9e:81:43:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:30:14 2025 by rpki-client