Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File: UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier: zavtP0MMszfIapzCLo5BQnaYQVX7aO5+OZ/jiL/UbBw=
Subject key identifier: AC:9A:7A:68:A7:D1:F2:7E:28:C8:2B:20:A4:3F:22:46:42:22:0F:51
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer: /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial: 038F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number: 038F
Signing time: Sat 23 Aug 2025 03:34:32 +0000
Manifest this update: Sat 23 Aug 2025 03:34:31 +0000
Manifest next update: Mon 25 Aug 2025 03:34:31 +0000
Files and hashes: 1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: /76VX3Rus/UOoGyaXFtXpyJgEyn0MgGZzN2Q6lcQbNM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Validity
Not Before: Aug 23 03:34:31 2025 GMT
Not After : Aug 25 03:34:31 2025 GMT
Subject: CN=68a936c8-c4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:13:6d:4c:05:2e:bb:9f:a3:84:14:67:8d:
cb:82:29:92:f1:e5:83:7a:e0:08:3b:6e:04:b0:8d:
0a:fc:95:13:ec:b4:6d:65:70:90:5a:3e:26:73:ad:
05:61:b5:c8:e6:4e:cb:42:d7:42:4f:ac:18:f8:fb:
ca:aa:40:e5:89:7a:26:8e:17:e3:ff:17:0a:62:7c:
48:71:e8:1d:bf:81:ad:88:c8:ab:9b:d4:e7:22:6f:
fa:35:12:47:52:eb:20:33:d7:c3:fa:0f:e7:82:13:
d1:91:30:6f:1b:9c:8e:e8:60:66:8b:d7:98:56:97:
15:94:28:6a:b5:62:0f:05:f2:db:64:d9:3e:e7:87:
0a:1e:07:87:ed:a8:ba:f2:7f:48:23:68:81:59:3c:
7b:15:b9:eb:87:ff:d2:3e:35:2c:b3:a5:d6:8c:e5:
e6:73:f8:92:8d:10:f7:f8:2a:ea:77:0a:4e:ac:09:
63:de:81:5e:f4:a3:56:2e:83:4b:9a:32:02:44:ec:
d6:17:32:ba:cf:bd:b3:8e:0a:c3:91:49:6e:11:d3:
0c:97:c0:a9:bd:3b:83:a1:a0:3d:04:d7:28:b9:20:
bb:ce:6d:3f:89:ab:01:fc:83:6e:b6:37:7c:ae:b5:
2a:63:93:0f:0c:32:89:27:21:a4:95:52:67:f0:35:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9A:7A:68:A7:D1:F2:7E:28:C8:2B:20:A4:3F:22:46:42:22:0F:51
X509v3 Authority Key Identifier:
keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b6:12:f3:2d:e8:3e:b5:df:38:c2:cf:b4:82:6d:04:e4:7e:00:
9b:42:7c:24:58:0f:81:3b:7b:63:bd:1b:59:ce:4e:5f:98:26:
b6:14:82:a2:33:a2:86:4c:3f:5b:fc:52:fd:f8:6d:61:d7:ef:
8d:04:e4:c9:5d:ee:44:9b:1a:78:18:9f:9a:dd:71:99:78:f4:
d1:c7:4e:de:eb:76:37:c6:3b:da:f7:e8:40:63:b4:ca:47:f3:
53:a4:c3:ce:a7:18:62:aa:48:b3:e2:26:22:84:8b:b0:7d:f3:
ef:66:13:b5:be:49:ad:e0:1d:69:7a:0a:b5:f3:74:cb:22:f9:
6a:29:51:a4:17:2d:aa:d9:5e:29:da:ee:17:04:f0:95:ac:d4:
12:c1:f2:88:9d:d3:c9:d7:37:0f:4e:78:de:c2:10:09:56:3c:
58:cc:77:1f:38:21:53:e7:53:f4:52:11:9e:ca:06:7c:4c:28:
65:20:07:ac:ee:09:dc:16:b9:ee:a5:0f:c4:51:c1:6f:a5:3b:
1f:96:20:f5:41:b4:d9:56:b3:f3:fe:bc:9b:ea:3d:cf:8e:77:
f5:2f:45:6a:a6:89:0c:2b:31:0d:e5:39:3b:b7:d3:86:cd:7d:
08:17:2f:db:98:ef:fa:dd:7c:c8:b6:98:ab:98:f7:09:e4:9f:
29:1e:d7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:43:54 2025 by rpki-client