Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: FvworzljTHCatU0boFuE5OcQhvFrHYtOfCNO1xKEJf0=
Subject key identifier: AD:A8:C2:21:57:DB:EE:89:F1:89:70:DB:BB:67:C4:9A:42:DD:3F:90
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 0460
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 0450
Signing time: Sat 23 Aug 2025 03:15:32 +0000
Manifest this update: Sat 23 Aug 2025 03:15:31 +0000
Manifest next update: Mon 25 Aug 2025 03:15:31 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: vT+OXwk2XsAu32Ee297b1N4TCmgIeGWIkSQnLHgqo/U=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1120 (0x460)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Aug 23 03:15:31 2025 GMT
Not After : Aug 25 03:15:31 2025 GMT
Subject: CN=68a93254-c4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:28:94:09:fa:44:ed:5a:85:4f:fb:19:53:
2d:24:f4:62:48:50:54:51:28:21:ae:c8:29:b9:49:
0b:af:95:bb:e8:ff:cd:6f:b3:d5:19:61:ae:2e:18:
6c:92:da:25:b9:37:ae:85:70:4a:33:28:df:1b:55:
5f:5e:1d:b5:a8:06:e1:42:9e:d2:04:4a:26:e4:1c:
61:53:16:cd:98:87:c3:14:c1:5d:e2:07:56:24:ec:
c8:c5:87:61:af:54:24:89:d8:fe:a8:2e:49:f0:63:
59:38:a4:4a:7a:e9:01:d3:6a:47:98:9e:be:24:90:
9f:18:9f:60:6c:66:1a:e9:d9:5a:0d:70:98:4e:5c:
ab:d6:02:ed:76:83:01:bc:48:04:53:1b:44:51:62:
3d:3f:41:af:58:2c:7e:8a:30:4f:d8:56:c0:8c:7c:
15:6f:bc:e9:bf:d8:b0:36:aa:bd:f6:9b:d0:d5:57:
c4:db:99:12:c7:c4:d1:f1:33:69:8a:86:5e:2e:47:
f7:4c:f4:9c:49:96:e7:46:77:8d:05:61:8a:1f:a3:
8b:b6:88:f3:40:61:04:2d:62:a2:e4:74:0d:41:ff:
f7:8c:99:c9:0e:db:0c:61:ea:80:19:25:7b:93:c2:
3c:6e:ae:ef:40:be:5e:34:0a:5d:60:b5:76:5e:ce:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A8:C2:21:57:DB:EE:89:F1:89:70:DB:BB:67:C4:9A:42:DD:3F:90
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
22:05:a7:f0:ca:2a:e1:c7:56:28:16:ae:75:7b:8e:15:1f:4c:
66:0f:38:9b:f7:fe:ad:75:9d:68:eb:c1:51:48:14:a6:78:6b:
18:16:5b:de:97:39:4b:f8:f2:b7:3c:64:9c:2c:5b:0d:3a:f3:
72:ad:62:cb:03:24:85:35:7b:28:4c:da:16:f5:ea:a7:0b:19:
cc:38:b4:93:11:c2:ad:1b:11:8f:63:b6:cd:5c:89:0d:d2:bf:
e4:97:3c:5f:1f:02:87:59:44:f9:97:23:31:d9:84:62:9d:ca:
91:3f:dc:0f:d1:a9:8f:8c:36:b4:c0:25:87:7f:60:cd:85:58:
11:c8:eb:2e:a5:9a:c9:3b:56:d1:4a:77:4a:1b:51:22:b6:da:
bf:05:10:f6:03:c6:88:8d:e4:e0:cf:b1:d3:5b:94:b1:14:72:
ba:a8:f9:59:3a:a4:3c:d4:37:1d:b1:5b:06:26:a7:71:a2:39:
c1:60:31:df:e7:c2:af:a2:58:4d:15:85:5b:80:2a:a6:3c:59:
3f:63:f9:bf:8b:4b:ac:e0:8b:1c:dd:50:a3:cf:40:0b:31:f1:
5f:20:ef:ed:6c:5a:2e:4e:14:d8:9f:17:4b:5b:c2:8e:e7:97:
6d:39:68:a4:81:e3:38:bc:af:7b:ed:14:c9:b0:0c:54:9c:fe:
73:c9:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:12 2025 by rpki-client