Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: 2iu1XYZo/iVC43dvoTBg/NvLZRTauBjCqB8Tm0yYagI=
Subject key identifier: 05:C4:B1:E5:99:DD:A6:E1:E1:56:EC:3E:64:E3:44:C0:BC:84:B6:24
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 038F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 038F
Signing time: Sat 23 Aug 2025 03:34:45 +0000
Manifest this update: Sat 23 Aug 2025 03:34:44 +0000
Manifest next update: Mon 25 Aug 2025 03:34:44 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 2GhkgK2F0joxemTXWNkvSmxirtxzEKUEF+KCpYOvom0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Aug 23 03:34:44 2025 GMT
Not After : Aug 25 03:34:44 2025 GMT
Subject: CN=68a936d5-7e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:59:4f:f7:d7:95:71:4c:da:76:d2:62:d9:
14:21:77:b5:a8:47:f2:45:0c:2f:11:87:60:54:41:
8a:18:5d:f4:04:c2:ce:e4:ee:9f:86:c7:ef:7b:dc:
d3:7d:d9:e9:02:11:b6:73:d5:bd:39:38:36:9f:36:
7a:d1:44:62:21:5d:1b:b7:c3:8b:c1:64:53:d8:be:
6f:40:e7:ae:22:e8:41:8c:2f:c2:11:56:9f:66:44:
36:f2:f7:f1:84:65:f2:e8:3a:0b:61:f6:ee:ef:fc:
02:46:b0:6a:2b:13:92:7c:80:ea:45:51:29:27:37:
e9:76:72:6a:68:8d:d2:43:c6:2c:c2:de:64:b0:a0:
de:af:5c:96:35:38:b3:48:21:8e:1e:93:a1:f4:7c:
a1:42:79:e0:68:26:b5:f8:73:84:1b:96:15:4e:d2:
2e:4d:d7:e5:91:91:f7:12:3f:44:8f:a5:a1:43:55:
53:2e:63:24:81:18:aa:84:8f:da:86:34:ea:f6:38:
21:d0:04:e3:be:0f:80:63:f5:e7:49:4a:97:d2:6d:
bb:c1:71:3e:a5:23:2c:fd:81:3a:c3:08:3a:a9:d4:
a8:e8:47:e9:19:a3:9c:ca:0d:dc:44:08:e9:a1:e6:
77:b4:7f:29:65:e8:db:cb:8c:f0:94:a4:d2:3d:65:
df:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C4:B1:E5:99:DD:A6:E1:E1:56:EC:3E:64:E3:44:C0:BC:84:B6:24
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:05:54:fd:4d:71:43:19:6b:fe:4f:97:c3:ec:44:cc:ec:
d3:91:fe:99:f6:00:39:2d:0b:db:e1:d9:ad:93:2e:2b:bc:c6:
3b:c5:31:53:b8:e7:2d:3a:97:cd:4d:e2:74:dc:f4:00:38:85:
8c:7c:8b:34:18:bb:bc:e8:3c:31:38:a3:e4:2d:78:af:45:46:
48:80:86:b5:9a:e3:25:47:9f:33:00:83:71:46:9b:00:7c:a5:
24:25:72:87:ba:d9:c2:d9:8e:50:25:12:dd:6d:fa:50:24:fb:
61:ea:13:58:01:27:46:8c:24:63:5d:e0:93:dd:68:a7:f7:df:
4b:d4:81:01:2a:1f:5f:59:2c:63:73:d9:0a:d8:71:6f:19:70:
a9:16:14:d1:2c:ce:66:ba:ba:ed:03:a8:72:24:ce:b4:98:28:
6f:a6:f9:17:61:bd:70:de:65:8d:8f:1e:eb:fb:ca:79:e1:a0:
16:3f:b5:86:1a:30:fc:a1:95:40:2b:5b:a3:59:48:19:ee:d2:
63:b5:af:e7:87:c8:02:a2:3b:1e:d6:36:50:bf:5b:4c:d4:e8:
8b:95:9d:30:70:aa:6e:a9:2d:3f:80:3b:4a:1e:e6:df:6a:49:
fc:2c:80:ba:b5:68:d4:fe:32:d6:26:34:89:aa:71:27:19:f0:
be:bd:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:46 2025 by rpki-client