Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: OjWlznTzqrjPcP/Ygy8tfQcV0pO462GIAX9EYZpyF18=
Subject key identifier: 88:10:71:8E:8C:98:50:20:30:17:9E:31:B3:2B:5C:D9:E0:30:FB:B8
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 02BE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 02B8
Signing time: Sat 23 Aug 2025 04:04:08 +0000
Manifest this update: Sat 23 Aug 2025 04:04:07 +0000
Manifest next update: Mon 25 Aug 2025 04:04:07 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: fRMD7JT8njj/oxTALyQ0ssJlTzgyHxop0snCAM5kuI8=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Aug 23 04:04:07 2025 GMT
Not After : Aug 25 04:04:07 2025 GMT
Subject: CN=68a93db7-1aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:78:0a:ea:c6:7e:61:b2:41:85:04:2b:53:e9:
05:dd:63:85:30:25:f3:97:9b:ab:5c:1e:4b:24:84:
0b:35:13:2d:bb:e4:8b:03:89:d0:7f:15:5d:77:f6:
33:6e:9f:ab:55:81:71:6f:ec:16:36:47:bd:e8:45:
58:6e:df:88:01:74:73:61:bb:8d:70:69:49:07:a7:
05:85:2b:12:9e:c9:57:9b:ed:68:d3:bf:16:ae:97:
7a:63:c8:e8:65:fb:e2:6d:e1:ce:77:a0:bb:86:49:
73:7e:15:e6:99:c3:96:d2:da:7d:f2:80:e0:47:64:
60:31:33:d4:a3:34:f8:59:3b:f6:b9:77:d5:9f:08:
4c:69:65:d6:d5:a4:3f:c5:33:bd:ac:e0:58:75:d6:
8f:9d:22:57:88:31:e9:dd:3a:c4:20:3d:80:a7:9f:
09:56:10:e3:13:f4:27:26:5a:4c:46:5a:eb:e6:9c:
11:a7:04:ce:b3:66:b6:93:c8:c1:c4:4f:45:28:d1:
e6:4c:c9:fd:09:51:3b:2f:65:ff:8e:3d:1d:b1:0d:
14:08:3e:bc:30:98:97:fe:87:63:70:a5:2e:8e:81:
d7:65:fb:25:92:14:c9:09:c3:d4:b1:09:44:7e:b9:
e9:fe:83:be:9c:0f:ac:60:ea:22:4d:8c:79:43:3f:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:10:71:8E:8C:98:50:20:30:17:9E:31:B3:2B:5C:D9:E0:30:FB:B8
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:67:ab:ef:2a:22:cf:85:bd:b3:5c:47:f5:e6:a7:d5:08:74:
d9:67:da:12:09:76:f9:5d:50:5b:e0:8d:2f:2d:3e:f7:23:8d:
ba:39:39:a0:cf:6d:c4:e7:71:d2:34:4e:d1:9d:09:61:67:25:
ab:dd:e2:53:ba:da:1d:b9:d0:e4:21:2b:3d:ee:76:13:29:4d:
8c:fc:78:10:0c:9a:fe:2d:76:34:97:07:6e:a7:1b:f2:85:19:
4d:fb:c6:20:b1:72:8b:27:e4:d7:09:fc:22:bf:e1:90:99:01:
7c:44:d9:fe:84:27:da:56:00:18:eb:e5:9b:25:6d:80:17:89:
62:18:de:cb:10:08:15:3c:3d:80:fb:c1:b7:ca:93:40:3b:06:
b4:96:df:15:31:eb:1b:a3:e7:cf:20:ad:a0:f5:a2:f3:ba:df:
12:fb:c3:6a:1e:d3:86:a5:5c:bb:3f:ea:83:d8:e4:83:6a:d9:
99:a7:19:b6:c1:3d:eb:98:be:81:5a:b5:8b:02:cc:ea:9a:75:
78:38:6c:50:01:0b:48:6d:b6:60:e2:04:c2:a7:a3:40:19:ab:
49:c0:e5:38:fd:f5:a6:99:a0:2a:09:e3:db:88:7a:af:2f:46:
aa:f3:05:a5:af:9f:36:e1:bd:6e:41:70:65:96:84:7a:0d:f0:
13:17:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:09 2025 by rpki-client