Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File: rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier: ZH7YYRFmd+8wFTcScAKGlZLvoqnPT8jGR1g/Rdw2Hws=
Subject key identifier: CF:03:35:92:26:1C:30:BB:10:8A:2A:7D:9C:AB:B2:F5:EC:19:25:7B
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer: /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial: 035C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number: 035C
Signing time: Thu 03 Jul 2025 03:35:35 +0000
Manifest this update: Thu 03 Jul 2025 03:35:34 +0000
Manifest next update: Sat 05 Jul 2025 03:35:34 +0000
Files and hashes: 1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 8tR4Vls8SAsCGH3y2GdOewclHzWEXD5yHeMLHgwaqg4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 03:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 860 (0x35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Validity
Not Before: Jul 3 03:35:34 2025 GMT
Not After : Jul 5 03:35:34 2025 GMT
Subject: CN=6865fa87-b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:5b:98:8e:b0:7e:94:79:90:68:b5:a8:cf:
3f:73:68:d1:f0:de:ee:e5:96:44:a3:d2:66:92:98:
8e:b2:42:63:e4:94:3e:a8:82:a3:e0:55:5a:ac:4a:
87:4d:59:cc:55:e7:eb:ca:71:5f:4e:4e:8d:f7:29:
4c:fe:11:28:76:03:cb:82:8b:f7:5e:d1:0d:df:af:
df:9d:e9:25:31:91:9f:f6:55:7a:9b:2f:4a:fe:84:
13:d7:58:44:0d:61:eb:8d:65:7a:c5:bb:03:7e:5d:
f0:9d:4d:d7:ae:0a:bf:88:f4:80:b5:4b:c7:00:ca:
01:70:49:f4:5b:d0:62:cd:61:ca:c9:c0:2a:c9:0b:
8f:57:2c:e8:80:f2:bf:9e:fd:16:06:b4:8b:29:9b:
b4:2c:03:bd:81:ba:f8:71:1e:f0:07:e9:de:22:25:
08:4e:5c:ab:db:e9:1b:7d:21:21:a5:2e:35:18:40:
0a:04:79:75:de:31:1c:2f:8d:5c:97:90:d0:f7:3d:
9e:d3:d9:9d:1a:ca:07:0e:6d:b8:b8:a7:17:1c:fc:
8f:1b:1c:63:cc:4f:5e:fa:72:64:00:8d:08:ad:03:
2d:82:f9:cd:e5:f4:d2:17:b5:9e:4d:be:52:32:59:
75:45:cf:71:1b:f5:58:dc:cf:44:e4:8e:d6:80:f1:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:03:35:92:26:1C:30:BB:10:8A:2A:7D:9C:AB:B2:F5:EC:19:25:7B
X509v3 Authority Key Identifier:
keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:9a:c8:ae:ba:29:45:d5:34:15:d5:3f:8f:2b:4d:00:f6:
82:97:55:7e:5d:53:ba:36:8c:88:77:49:d6:c9:1a:68:37:89:
f9:c1:1e:45:cc:50:38:1f:e8:a7:54:a6:8c:ca:92:1e:36:cc:
47:6c:04:2c:f9:32:f7:84:0b:8f:a6:0d:17:1d:91:63:cb:16:
ff:1b:1c:fd:26:78:2e:ee:fb:a0:74:c0:85:8e:ae:19:87:2e:
4e:c0:a5:53:a3:ac:1f:f9:e9:75:11:12:8c:ad:f2:df:fd:4e:
a7:7a:eb:41:8a:5b:80:86:96:8e:5c:aa:2d:b0:76:24:03:cb:
d5:b1:3f:26:78:10:6a:b7:74:28:cd:ef:6a:ea:99:a3:80:66:
7f:87:1a:e4:38:67:2d:cc:ee:a7:ab:51:7d:f4:52:9e:46:9e:
af:43:81:72:5c:3e:55:86:76:9c:25:a3:8a:b0:23:7f:cc:3c:
d8:a6:21:f0:c4:e4:60:5a:e9:bd:1e:02:91:90:10:be:f3:27:
8c:b1:43:bf:46:c5:61:53:2c:d5:b6:9b:fc:e7:fa:9f:a5:8b:
8d:37:f4:b2:ea:5d:6c:31:5f:c3:8b:10:f4:57:9a:42:11:78:
00:ae:19:6e:12:8c:e6:cf:be:2c:08:c7:0c:4b:9c:bd:42:c4:
95:8b:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:25:41 2025 by rpki-client