
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File: 3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier: azgyX2RSp8OIg+aXxqgvGhUz+sQAllbV07zhnP4e9dY=
Subject key identifier: A7:6E:2F:E2:5A:BA:AD:0C:4A:30:38:91:1E:48:A6:54:52:C1:86:2C
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer: /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial: 04CC
Authority info access: rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number: 04CA
Signing time: Sat 23 Aug 2025 02:54:25 +0000
Manifest this update: Sat 23 Aug 2025 02:54:24 +0000
Manifest next update: Mon 25 Aug 2025 02:54:24 +0000
Files and hashes: 1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: lsR9ji/EK+MgSChGq8kaKldMogRFQs/RoLmDbLA2Ifs=)
2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1228 (0x4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Validity
Not Before: Aug 23 02:54:24 2025 GMT
Not After : Aug 25 02:54:24 2025 GMT
Subject: CN=68a92d61-f94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:08:4f:4c:96:a9:aa:fe:fd:cc:87:ac:68:
8f:b6:d2:8f:6d:f8:ca:82:76:e3:66:43:85:82:ed:
88:0f:15:ae:03:cd:d2:c5:24:ed:53:76:f7:22:ae:
6c:7e:7a:e2:10:c9:dd:87:dc:bd:63:04:0b:c8:72:
91:06:fb:cc:4e:98:43:77:8f:2a:40:3b:d3:8c:87:
31:f4:39:93:bd:25:c8:e2:97:81:2c:bc:15:b4:63:
30:59:81:c1:9c:14:6a:5d:73:8f:e0:27:f0:83:de:
33:4c:d4:8f:ef:0e:52:b9:4e:b9:c1:ec:61:e3:e3:
89:b0:16:b8:16:97:1d:d3:c1:49:99:48:9f:d5:d2:
40:cc:26:d3:f8:be:2c:bd:65:62:dd:db:de:63:67:
c3:3a:d9:74:88:3d:2c:09:41:3f:2d:bb:bd:a3:88:
7f:6b:ad:69:43:51:ce:70:df:b7:20:e6:c8:bf:01:
07:d5:15:29:56:f2:94:b8:2f:8f:3a:d6:d6:bc:f0:
c7:11:08:06:27:d5:f1:d1:3a:df:9f:f2:a7:8d:a8:
36:92:31:67:53:86:ae:26:02:bc:11:53:b1:ea:89:
32:37:bb:df:54:6e:b2:38:ef:65:c1:11:22:59:2d:
93:a0:34:13:66:b4:51:93:2d:e4:cd:e1:27:17:5f:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6E:2F:E2:5A:BA:AD:0C:4A:30:38:91:1E:48:A6:54:52:C1:86:2C
X509v3 Authority Key Identifier:
keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1b:5d:eb:01:86:48:0a:ae:84:60:36:fd:e9:83:8c:8e:fb:
60:59:dd:b1:8f:f8:f9:87:b6:68:6f:46:5d:6f:74:9f:c8:40:
f8:e5:f4:c4:0b:43:c1:61:2e:1b:d4:1c:10:23:db:27:0a:a6:
2b:0f:2b:cd:f9:29:33:fe:a5:96:27:5a:22:74:f0:4e:bc:0c:
75:17:d9:e1:39:01:db:fd:c9:cf:5b:38:3f:21:50:08:9a:25:
49:54:5b:9c:18:5f:49:b3:ec:e2:f6:53:3f:02:91:a5:e0:2e:
e7:a6:2e:b4:09:e2:56:34:c4:f8:62:67:2a:e9:87:a7:47:19:
c5:79:17:1e:51:4e:03:99:81:88:af:56:c2:9f:e7:17:27:0c:
35:d9:d7:93:f7:a3:9c:2c:d5:83:9b:e0:30:23:0a:10:f7:63:
39:38:7b:c6:79:ec:32:e1:ff:d3:3a:0b:3f:5c:18:fe:73:ed:
27:9f:59:44:60:d4:7c:c1:63:45:fc:f9:24:65:7c:c2:8e:9b:
05:0b:66:c7:0f:c1:26:40:ac:7d:ce:f1:f8:bb:fe:ae:35:49:
6c:e6:9d:c9:54:94:39:05:5d:24:ba:4e:9a:ff:81:a9:4c:a5:
40:f7:93:5c:ff:85:65:c2:b8:3e:17:a7:b8:ed:06:d2:9f:68:
d5:89:18:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:16 2025 by rpki-client