Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File: wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier: WmcK/rYUe658hja7+YmYd/GrlIqNkA4TlI3coZI+qGY=
Subject key identifier: F2:57:B9:D4:56:8F:76:BD:A6:E6:E7:B7:B9:A2:A6:77:0D:77:3E:55
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer: /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial: 016A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number: 0168
Signing time: Tue 01 Jul 2025 04:45:18 +0000
Manifest this update: Tue 01 Jul 2025 04:45:17 +0000
Manifest next update: Thu 03 Jul 2025 04:45:17 +0000
Files and hashes: 1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: C/OJdElnXjxT9XHPPnRMFfMKp8TFHiK/+waUa5fRCZA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 04:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650F65AF, serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Validity
Not Before: Jul 1 04:45:17 2025 GMT
Not After : Jul 3 04:45:17 2025 GMT
Subject: CN=686367de-f4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:a6:53:c5:b5:d8:4b:2d:47:16:a0:77:13:
fd:38:f4:a7:c8:a9:44:38:39:32:ba:64:09:12:0c:
00:e0:1d:57:33:1a:4b:52:2f:96:f3:28:85:b5:20:
76:36:4f:15:9b:c2:42:d5:6f:f6:ad:c2:0f:f9:ea:
4b:a0:90:e1:b0:83:72:10:40:c4:b3:7b:a5:f0:b9:
b3:b5:a3:b2:f1:02:13:b2:e6:0a:18:5e:6e:23:be:
31:c2:7d:b3:85:2e:b6:ba:aa:d3:6b:68:ee:95:31:
33:20:a8:44:3b:67:61:89:a5:a1:5f:da:74:48:19:
bc:d4:84:03:45:80:48:d7:90:d1:13:23:a9:bb:b3:
5c:73:72:37:4e:8b:5d:14:3a:aa:33:fa:4e:62:1a:
5d:a4:0d:3b:04:f9:14:0d:cc:3b:71:86:9d:bc:9b:
a1:c2:94:0a:3d:61:30:d7:7b:f2:c9:a9:81:57:65:
19:c1:f1:f2:d9:d7:c6:ef:f0:b6:82:a5:be:8b:01:
9d:05:70:88:b3:11:92:55:06:f4:8c:05:a5:94:1e:
cb:8e:39:3e:36:d8:aa:c1:f8:e2:43:10:28:f1:09:
85:1d:1a:8e:22:8b:93:9a:81:d2:e1:bc:d9:57:4f:
d9:64:6b:51:6e:6e:80:b7:1b:8f:9b:5f:83:32:ab:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:57:B9:D4:56:8F:76:BD:A6:E6:E7:B7:B9:A2:A6:77:0D:77:3E:55
X509v3 Authority Key Identifier:
keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:e0:1b:a9:a8:7d:e3:b1:83:c8:a2:bf:26:bd:11:9e:a1:74:
82:05:1f:15:9d:16:bb:73:dd:c9:71:b7:72:c1:c8:fa:44:39:
f4:50:03:c8:1c:34:53:18:83:8f:8f:69:c6:d9:0d:26:54:4e:
c9:dc:11:45:af:23:9c:84:53:7c:41:0e:10:0a:99:7a:bc:fa:
5a:00:03:c7:7c:58:26:d5:a6:61:4f:fe:e0:07:2d:10:c9:f0:
a0:91:97:2c:7b:40:f7:91:02:88:81:fd:d9:4e:cd:1d:57:6f:
ca:fa:8d:da:18:ba:51:a7:a3:b1:a9:f3:56:a7:d5:db:92:03:
a5:57:f9:3e:96:82:88:3d:d7:f8:6b:cc:07:9a:8f:c2:29:ba:
0b:98:52:a3:e8:33:04:f1:21:09:28:b5:cb:61:1f:2e:34:9a:
8d:0b:7f:1b:e2:23:95:26:1f:1b:cc:97:43:d0:27:1c:99:6a:
f1:d8:7e:8e:73:02:18:10:a3:26:1d:55:27:62:c6:96:88:4e:
1f:68:63:13:76:0b:13:0a:c7:be:ba:6b:4e:85:08:14:c9:dd:
51:8e:59:ab:b7:21:02:df:90:96:40:fa:22:09:3a:7f:55:65:
9e:99:a8:f6:11:cf:ad:79:4f:80:a8:48:36:a7:e7:b5:1e:61:
9e:c0:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:53:17 2025 by rpki-client