Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: Vg4hK6moHjSbhW5EFcw0PjlUHSpaTlsVI3Nfj/EiNeQ=
Subject key identifier: 4D:00:52:C6:01:E4:95:87:B2:3C:87:4B:D6:06:43:B1:C5:24:20:80
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 042D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 041D
Signing time: Thu 03 Jul 2025 03:17:13 +0000
Manifest this update: Thu 03 Jul 2025 03:17:12 +0000
Manifest next update: Sat 05 Jul 2025 03:17:12 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: 4s+1QwpMuWADVGzzFQh5uaZtds570+r0F+m0Og4MBrU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 03:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1069 (0x42d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Jul 3 03:17:12 2025 GMT
Not After : Jul 5 03:17:12 2025 GMT
Subject: CN=6865f639-72d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:c9:51:51:3d:a5:a1:18:c2:ad:c7:a7:12:
1b:6f:d5:6d:9f:af:f3:2c:df:2a:03:ad:1b:43:03:
a8:9e:62:0c:33:75:0f:9a:34:13:2d:57:44:01:75:
c9:cb:f7:00:59:a8:f1:2d:e9:fd:54:01:5a:5b:4c:
60:fd:f8:11:96:58:c1:4b:b7:b5:b8:2f:f9:a4:02:
bd:4d:cc:fc:1a:b9:94:74:21:34:33:4c:4f:ea:bb:
fb:0b:45:83:b7:54:12:04:69:c4:b2:29:1a:89:7f:
58:9a:99:4b:dc:1d:bd:e0:97:b5:73:41:f0:62:33:
9e:27:67:8d:e4:01:58:c2:02:15:72:40:12:f3:55:
d3:d2:99:63:6c:86:74:e7:e2:cc:5c:e4:d8:88:ae:
79:fc:bb:f5:5a:0a:1a:58:b3:ab:45:92:4f:d3:65:
d3:a8:d8:4e:34:8a:30:b1:da:9a:0c:fc:9f:aa:8e:
17:e7:e4:1a:b1:95:11:62:79:25:85:c2:31:1d:51:
e0:0a:db:92:50:01:c4:a2:ca:de:dc:fd:37:aa:23:
02:2a:ad:c4:55:78:93:1c:e4:9b:09:28:ea:96:57:
47:f7:3c:b5:7b:60:13:34:2e:e5:e4:b4:f9:be:28:
3c:74:ff:49:f4:04:e1:92:f8:3f:c6:7b:48:66:43:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:00:52:C6:01:E4:95:87:B2:3C:87:4B:D6:06:43:B1:C5:24:20:80
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7f:e5:a1:6b:ec:12:ea:ac:b6:52:93:5c:3f:db:26:cb:61:
93:15:f1:69:4d:fc:24:ec:09:ba:e5:0c:02:a6:a1:df:3b:92:
fb:64:9d:f2:d4:2f:22:a3:56:02:52:b0:e3:dd:37:77:ab:75:
ae:68:69:09:9d:ee:c2:0b:83:d8:ef:94:6b:b0:fa:dd:1f:41:
3e:83:9c:4d:00:0f:3c:59:c5:f7:ae:93:31:65:18:de:34:02:
76:01:84:12:42:b7:f8:bd:31:b3:76:27:93:68:0d:b1:0c:a9:
6f:e9:1f:d9:88:a2:e9:44:86:e9:e7:35:de:a7:d3:89:25:ef:
d6:4a:f8:39:76:1c:46:bf:93:39:c5:ba:0a:cc:4d:ed:2a:dd:
8b:dc:d0:8c:f2:33:3c:08:62:9d:73:a4:d0:d0:16:6f:ff:3d:
8e:09:d7:f2:09:56:c8:36:46:1f:94:53:fa:f5:f3:1d:9a:96:
6d:65:5b:f7:8f:50:95:4a:01:bd:c5:4c:c6:b1:8a:87:4c:46:
5d:58:c0:86:19:21:1d:c1:68:18:4c:a7:b8:28:a3:fb:d6:2e:
23:a7:bf:d7:bd:46:04:e9:1c:62:5f:3e:6f:88:43:a6:2c:5d:
52:88:8c:06:c7:3f:c9:59:23:d5:db:a8:91:ff:ee:c8:0d:4a:
69:57:8b:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDgxOUNBRjExMC8GA1UEBRMoQTI5NzRFNjczMDQzMjQzODhDODg4MDJFNzE3RDZC
OTI4MUE1MjYzMjAeFw0yNTA3MDMwMzE3MTJaFw0yNTA3MDUwMzE3MTJaMBgxFjAU
BgNVBAMTDTY4NjVmNjM5LTcyZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2+clRUT2loRjCrcenEhtv1W2fr/Ms3yoDrRtDA6ieYgwzdQ+aNBMtV0QB
dcnL9wBZqPEt6f1UAVpbTGD9+BGWWMFLt7W4L/mkAr1NzPwauZR0ITQzTE/qu/sL
RYO3VBIEacSyKRqJf1iamUvcHb3gl7VzQfBiM54nZ43kAVjCAhVyQBLzVdPSmWNs
hnTn4sxc5NiIrnn8u/VaChpYs6tFkk/TZdOo2E40ijCx2poM/J+qjhfn5BqxlRFi
eSWFwjEdUeAK25JQAcSiyt7c/TeqIwIqrcRVeJMc5JsJKOqWV0f3PLV7YBM0LuXk
tPm+KDx0/0n0BOGS+D/Ge0hmQ6h3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTQBS
xgHklYeyPIdL1gZDscUkIIAwHwYDVR0jBBgwFoAUopdOZzBDJDiMiIAucX1rkoGl
JjIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MTlDLzUxNUIwRjA0NEUwRDExRUQ4RkEyMDBBOUYxMjIyNDY4L29wZE9a
ekJESkRpTWlJQXVjWDFya29HbEpqSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29wZE9aekJESkRpTWlJQXVjWDFya29HbEpqSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDgxOUMvNTE1QjBGMDQ0RTBEMTFFRDhGQTIwMEE5RjEy
MjI0Njgvb3BkT1p6QkRKRGlNaUlBdWNYMXJrb0dsSmpJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxf+Wha+wS6qy2UpNcP9smy2GTFfFp
Tfwk7Am65QwCpqHfO5L7ZJ3y1C8io1YCUrDj3Td3q3WuaGkJne7CC4PY75RrsPrd
H0E+g5xNAA88WcX3rpMxZRjeNAJ2AYQSQrf4vTGzdieTaA2xDKlv6R/ZiKLpRIbp
5zXep9OJJe/WSvg5dhxGv5M5xboKzE3tKt2L3NCM8jM8CGKdc6TQ0BZv/z2OCdfy
CVbINkYflFP69fMdmpZtZVv3j1CVSgG9xUzGsYqHTEZdWMCGGSEdwWgYTKe4KKP7
1i4jp7/XvUYE6RxiXz5viEOmLF1SiIwGxz/JWSPV26iR/+7IDUppV4sz
-----END CERTIFICATE-----
Generated at Fri Jul 4 00:12:26 2025 by rpki-client