Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: D7vDMcTWOwoxUdcMlG8+FL/581cYg+7TeW9E+USl9B8=
Subject key identifier: CD:E2:76:FF:F7:54:17:0F:8F:96:A7:AE:D3:7E:B2:61:EB:6D:E2:61
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 0400
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 0400
Signing time: Sat 23 Aug 2025 03:19:05 +0000
Manifest this update: Sat 23 Aug 2025 03:19:04 +0000
Manifest next update: Mon 25 Aug 2025 03:19:04 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: Hhe1EUAGlj5IjOghwQ4WwZSmU0dYS9+a7Zm+pC+mqc4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1024 (0x400)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Aug 23 03:19:04 2025 GMT
Not After : Aug 25 03:19:04 2025 GMT
Subject: CN=68a93329-fcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:78:f5:42:f0:20:e7:99:e8:47:e6:8f:d7:a3:
ea:73:19:f1:98:05:ba:2e:55:14:47:c5:4f:3c:ed:
2d:91:23:0e:d6:e4:05:3a:1f:65:9d:90:75:52:0a:
47:ef:d3:e3:63:d0:2f:4e:69:44:cd:39:aa:2d:e6:
02:b2:34:dc:76:03:c0:4e:b8:21:23:4d:d3:a8:46:
d2:6d:60:f1:6c:51:00:9b:97:1a:22:52:05:30:96:
83:4c:3d:54:37:44:f0:fb:43:e6:3e:39:87:3e:49:
70:cc:b3:ab:12:1c:ae:fd:78:3b:66:80:d9:4a:24:
f6:a3:25:e8:28:72:d4:f0:1f:82:67:e6:15:64:d8:
91:76:7b:a4:50:3a:49:47:6f:cd:65:3a:6a:da:4a:
58:a7:fe:93:9f:58:cf:82:e5:29:24:fc:d1:b8:77:
49:ee:02:ef:4f:f5:a7:48:51:05:4b:64:9a:14:d8:
62:b5:33:e3:08:d4:3a:e0:d2:d1:a7:34:57:8f:ce:
fc:91:7b:81:43:1f:b9:75:50:b2:4f:95:3d:e2:57:
b1:1b:b3:a0:4d:3e:5e:31:40:a2:8d:63:ea:9f:6e:
76:2b:60:8e:fc:86:d6:0f:03:8a:63:91:38:75:c9:
a1:0a:d8:f2:b5:d9:11:e0:ac:b5:57:a0:8d:2f:ae:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:76:FF:F7:54:17:0F:8F:96:A7:AE:D3:7E:B2:61:EB:6D:E2:61
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e9:8c:39:24:a8:d0:76:68:69:af:85:24:7b:24:2d:78:97:
c2:9f:41:fd:80:f7:a6:5e:57:e7:c2:e5:57:02:11:df:75:21:
88:52:ec:7c:9d:62:01:f1:9a:cc:0f:11:fc:c7:8d:4a:8d:7e:
b3:6f:78:f1:1f:46:fa:47:47:47:de:6f:f3:af:a8:63:31:2c:
f7:27:e0:bc:05:64:0e:42:5e:3f:ae:60:d0:d4:e3:be:1d:aa:
22:32:03:79:a4:47:3b:6b:5a:3d:82:dc:35:23:d0:6c:53:d5:
b0:f3:3f:63:9c:10:1d:8a:4c:91:1e:31:21:d9:8f:14:c1:aa:
38:ed:8e:72:54:60:13:53:9e:7c:e7:02:e9:18:83:7d:9f:ac:
89:43:7d:62:8b:9d:6f:f3:42:ae:c3:c5:2c:9f:d0:ca:bf:03:
dc:ec:d1:80:15:ed:1f:25:5a:1c:a0:d6:6a:e1:1d:86:a9:14:
34:a6:1e:aa:61:f4:94:61:75:ca:39:9a:5a:34:39:fb:b3:04:
b3:4d:fb:cf:a0:2b:a7:65:aa:8b:58:18:81:39:e9:a2:7d:be:
8f:ec:42:7d:93:5b:3c:74:76:7e:93:a6:fa:f2:44:b4:d7:4a:
8d:46:ac:8b:1c:08:26:cb:22:e3:61:3c:e8:1f:40:f4:01:6b:
81:21:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:57 2025 by rpki-client