Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: e5RkGTCOuKdc1tpDDC/R6ST0qdCWrrr2pg9Tph3fni0=
Subject key identifier: F3:AD:EA:9A:EF:4A:1D:63:AC:E8:C3:EC:66:54:42:5B:E4:E7:D5:64
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 049A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 048A
Signing time: Mon 20 Oct 2025 03:07:57 +0000
Manifest this update: Mon 20 Oct 2025 03:07:56 +0000
Manifest next update: Wed 22 Oct 2025 03:07:56 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: Zhy0v8LKIU5o+01zO/FyZnuOsa3nBaHKCK2hGrRBcf4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Oct 20 03:07:56 2025 GMT
Not After : Oct 22 03:07:56 2025 GMT
Subject: CN=68f5a78d-b79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:79:ac:1a:75:29:3b:18:d3:a7:df:70:f3:d6:
39:9d:24:8a:31:a6:24:cf:2b:8d:eb:80:1f:cf:5d:
cf:a0:5b:a9:e1:f6:c8:b6:63:47:18:5e:b3:56:bd:
6e:bd:e0:85:07:38:fc:74:e3:0d:99:fd:33:aa:c4:
78:1c:72:99:26:ca:fc:df:dc:93:62:fe:ab:94:9c:
77:ad:bb:d8:da:6d:50:57:30:48:17:8a:42:74:42:
dd:31:df:d9:dc:2b:d4:51:41:3e:20:5b:8c:0c:b1:
f9:09:05:62:83:00:f8:b0:0d:6c:c1:5b:3a:3b:1f:
f2:47:a6:4e:ea:fd:cf:ec:b0:58:5b:47:9f:f5:b9:
47:34:57:24:67:3d:a2:07:fc:07:73:12:3d:e0:d4:
9e:54:7b:e7:b6:43:e7:a3:08:9d:f8:6f:17:54:ea:
38:62:c3:d7:d0:3e:27:61:e0:9a:76:2d:14:e0:5a:
c0:a9:bf:92:cb:9c:3e:38:f1:e1:fc:cd:7b:9c:2f:
da:ca:26:ef:49:5a:0e:ac:25:6c:f6:3b:65:9e:53:
08:b9:05:54:2a:ef:6c:3f:5c:8f:9f:54:21:12:c1:
26:9f:92:6b:21:91:ca:90:1f:c2:e6:72:6a:6f:15:
2e:99:5f:e7:6e:fe:35:25:70:fc:69:57:59:2d:85:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:EA:9A:EF:4A:1D:63:AC:E8:C3:EC:66:54:42:5B:E4:E7:D5:64
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:b2:51:4d:c1:71:ce:6e:b0:87:d4:d9:ba:15:10:a7:d5:bd:
b9:b0:98:8a:7e:eb:ad:36:11:6b:91:f8:e9:33:50:bf:be:86:
31:86:65:9e:2e:de:5a:0d:27:55:41:0d:6d:78:6d:5f:7a:74:
17:dc:8a:67:a2:6b:d1:19:62:2f:44:1e:54:32:8a:bf:1d:a3:
a5:16:11:38:f2:0f:4f:1f:29:ea:ed:16:40:ff:86:c5:be:2f:
b5:c4:4b:2b:81:e4:00:0a:34:79:c0:9d:40:03:0d:3e:88:0e:
28:1a:3a:d4:63:00:2c:82:9d:18:d8:22:42:15:18:30:de:18:
f3:3b:bd:52:81:71:b9:d0:8a:3a:2f:d7:11:e6:4f:e4:cf:a9:
cb:de:ce:04:e3:d0:51:d2:ec:2b:69:16:b5:12:04:1b:12:1b:
29:e3:87:34:97:77:43:59:8c:20:f6:b6:05:09:f4:58:39:99:
74:4e:51:c2:8d:43:6b:cb:4d:f8:e5:e8:96:a3:94:6b:09:80:
f5:ff:96:4c:cd:51:99:a6:cd:a5:0f:ba:18:e1:6b:7f:ff:a3:
47:a1:82:eb:e7:f5:f1:63:7a:9b:2b:f4:bc:8c:e7:55:99:2d:
70:7d:c8:e6:7e:94:40:ef:7c:ae:1f:5d:4e:db:64:36:2b:8a:
0a:c2:05:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:36:08 2025 by rpki-client