Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File: HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier: BWtoNTVz6uJ/EQI8R/gkr+XULBa0NnGcJnuSfpL1prs=
Subject key identifier: 3A:28:0E:FD:D3:06:0C:30:BC:0A:A2:1C:D5:6C:53:3A:F0:5D:12:5A
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: 042B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number: 042A
Signing time: Sat 23 Aug 2025 03:16:26 +0000
Manifest this update: Sat 23 Aug 2025 03:16:24 +0000
Manifest next update: Mon 25 Aug 2025 03:16:24 +0000
Files and hashes: 1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: hoyd2r5pUMnw3W2LgeNvRB7ZVd0HDhV8z0Pl6JbZMJQ=)
2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1067 (0x42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Aug 23 03:16:24 2025 GMT
Not After : Aug 25 03:16:24 2025 GMT
Subject: CN=68a9328a-b25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:63:3d:f5:8c:9d:69:e7:96:1f:09:90:57:
9a:d9:ee:51:49:10:be:c0:0a:06:e7:b4:12:6e:5a:
d8:b9:e8:81:17:b2:2b:a7:e0:a8:af:b3:c7:d8:0f:
96:dd:6e:1f:f7:80:bb:f1:00:b2:cd:8d:4a:10:77:
49:d9:af:66:be:fa:08:1e:3b:ad:28:f5:7c:bd:ce:
81:e2:a5:11:58:19:3a:d9:7e:29:e7:a3:be:d7:9b:
c4:c8:41:5f:a0:62:11:23:bd:38:9d:20:99:b1:26:
2e:17:a4:b5:8f:82:1a:a0:96:00:b9:ae:fd:98:ee:
c0:67:cb:c3:2f:81:16:59:9b:3b:eb:14:32:ab:ac:
9d:db:bb:25:21:d4:a1:e0:7b:3a:ce:be:dd:b2:34:
f1:6a:80:d9:db:f4:48:bf:b7:d1:7e:f7:01:02:9e:
3b:0b:51:b2:3b:0c:1d:19:e2:f1:e2:35:ed:c3:4a:
fb:92:72:f1:80:f0:66:18:dd:ed:2a:a7:88:33:7d:
60:b3:0b:7c:57:8c:95:c4:4e:3d:c3:b3:2e:73:0d:
e0:76:cc:d4:b4:89:41:35:a3:ee:a1:7b:cc:bc:2c:
5c:ab:8a:60:c2:11:65:0e:71:dd:d0:62:7b:0b:b2:
c2:97:00:18:d6:4b:4c:8e:cc:8f:d9:b2:5b:4e:2d:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:28:0E:FD:D3:06:0C:30:BC:0A:A2:1C:D5:6C:53:3A:F0:5D:12:5A
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:97:8c:9d:47:0e:0f:d9:9d:ef:f5:af:27:80:bf:b3:71:9e:
28:21:8e:11:97:14:36:cd:f4:20:a9:ba:c2:5f:3f:77:08:07:
ff:e3:96:2d:ff:c6:57:0a:eb:2c:5b:53:70:b5:2a:43:26:ac:
2a:ba:d1:55:fe:cd:be:2a:d3:7d:03:9d:12:02:07:1f:4c:9b:
0c:52:0d:61:92:33:c3:09:37:0f:9c:70:9b:cc:2e:98:45:bf:
4f:9f:16:13:74:9d:f4:59:2e:b0:d9:7d:e5:5d:93:5e:1d:f3:
fa:ca:08:8b:ef:e6:46:97:6a:9d:0a:8e:86:ee:93:20:e7:ee:
fd:b0:33:d0:78:ce:f2:59:57:b4:b5:02:01:6b:dc:67:69:3c:
47:fe:82:39:7d:6a:aa:00:d8:1b:c0:9e:c4:e4:3c:3b:cb:c1:
2c:94:8a:36:de:33:61:35:f7:54:24:a6:f0:41:8a:04:b9:2e:
f3:a7:ae:b7:5f:ec:a3:b2:f3:6a:50:9a:9b:bf:3a:6b:7a:5a:
2c:d5:8c:3b:35:a3:fc:03:66:cb:46:6d:59:17:08:c4:b4:cc:
d4:35:b2:d9:6c:b2:41:78:c4:a6:11:57:91:66:f6:fd:35:c8:
3f:a8:e9:ed:75:33:58:9a:1b:4b:c8:6b:b6:53:27:8c:d4:af:
33:09:c0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:25 2025 by rpki-client