
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File: 3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier: 6QRjtPAOGHjvKrzoEwlOiHYN/wZiT8SGGB48DjipKy0=
Subject key identifier: 5C:DF:8D:39:00:38:91:61:C0:86:9D:D7:2D:05:53:B4:61:F4:3A:20
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer: /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial: 049A
Authority info access: rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number: 0498
Signing time: Fri 04 Jul 2025 02:57:35 +0000
Manifest this update: Fri 04 Jul 2025 02:57:34 +0000
Manifest next update: Sun 06 Jul 2025 02:57:34 +0000
Files and hashes: 1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: TPXFh4gkyCTFkOrINZSCJGjnYO+1wEmeTgQKMUSeTAU=)
2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1178 (0x49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Validity
Not Before: Jul 4 02:57:34 2025 GMT
Not After : Jul 6 02:57:34 2025 GMT
Subject: CN=6867431f-e2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8e:b4:f6:45:a0:c3:c5:72:03:63:c1:ae:0e:
50:60:94:07:fd:9a:9f:26:9d:ee:13:42:c9:5b:e1:
c2:90:42:dc:c5:de:6c:fb:5b:d4:bf:94:bc:3a:0f:
ea:d2:b4:97:9a:d8:9e:6a:f6:56:99:b9:91:24:88:
12:b2:96:39:3f:5e:bd:fd:7e:a6:dd:ba:12:5b:d4:
e0:2b:a7:5a:69:75:ad:bd:11:24:0c:21:4e:e7:0e:
80:49:44:57:98:c1:0f:39:b3:46:83:07:2b:df:bc:
50:f6:b0:f3:bc:9e:ea:53:a7:6c:97:be:33:56:19:
35:46:6d:4e:fb:ee:de:57:52:c1:b2:68:db:21:ab:
e7:b7:5b:86:8e:4f:99:6e:13:28:00:84:53:66:5e:
77:4b:90:71:14:87:a5:e1:a3:ce:04:3a:3b:d0:9e:
55:a8:28:0c:b8:c5:bc:30:79:a9:18:b8:69:bf:9f:
59:b5:b9:db:c6:43:e7:3f:2c:93:ca:95:05:7f:63:
67:69:99:73:81:ed:03:b6:be:f4:2c:70:24:79:ee:
43:39:3c:c9:b2:42:7d:88:6c:97:fe:fa:ce:17:c9:
43:7f:43:3d:c1:5b:ee:63:59:e1:c9:c6:b8:a6:88:
6f:09:47:5a:ed:a9:50:23:b7:7d:25:df:36:40:9c:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:8D:39:00:38:91:61:C0:86:9D:D7:2D:05:53:B4:61:F4:3A:20
X509v3 Authority Key Identifier:
keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:df:f2:9b:61:14:b4:af:99:26:b8:35:aa:e7:b1:45:21:e2:
1f:3e:40:48:9d:4b:dc:88:fa:cd:31:8b:4f:cc:80:ce:c4:51:
39:cb:dc:e1:4d:8c:10:92:51:04:5f:b5:52:e7:e2:ac:79:ab:
d0:d9:b4:6b:c3:da:db:c2:72:10:98:a3:39:2d:2a:7f:95:f7:
a0:d6:1b:23:73:b3:a3:2d:19:20:8c:a5:cf:de:7a:ce:85:42:
20:28:f0:1f:7d:a2:f6:09:de:d0:e7:ee:d5:8f:8f:10:88:64:
82:f3:93:bb:47:f5:72:fa:f0:6f:cc:cb:a2:9e:17:78:1a:84:
55:dc:b7:e4:e8:84:f7:60:04:77:17:6f:33:97:2a:b0:d6:e3:
4a:aa:6c:3b:fe:27:67:4a:b4:e3:1e:35:4f:74:8b:0b:c2:71:
63:6d:b2:00:2d:dc:dc:c6:f4:c0:5b:f5:87:d4:0f:af:92:b4:
74:53:1b:c7:a2:32:22:cc:68:6c:90:af:fb:b1:61:9a:d5:e0:
99:35:9c:2e:fc:bc:64:38:e8:da:0e:33:6c:af:1e:38:32:3f:
fb:d9:b1:f3:c5:75:a5:21:68:fe:87:81:d3:6c:40:29:49:35:
42:3f:4a:39:f6:35:7d:6c:f3:a4:c1:f4:e7:c5:90:85:cc:e9:
59:1d:7b:ee
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwRUZBUjExMC8GA1UEBRMoREM4MjYzODVFRDQ4MUM3QzIzMzA4MDQ0REI4OUM0
NTM5OTJBREM0RjAeFw0yNTA3MDQwMjU3MzRaFw0yNTA3MDYwMjU3MzRaMBgxFjAU
BgNVBAMTDTY4Njc0MzFmLWUyYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOjrT2RaDDxXIDY8GuDlBglAf9mp8mne4TQslb4cKQQtzF3mz7W9S/lLw6
D+rStJea2J5q9laZuZEkiBKyljk/Xr39fqbduhJb1OArp1ppda29ESQMIU7nDoBJ
RFeYwQ85s0aDByvfvFD2sPO8nupTp2yXvjNWGTVGbU777t5XUsGyaNshq+e3W4aO
T5luEygAhFNmXndLkHEUh6Xho84EOjvQnlWoKAy4xbwweakYuGm/n1m1udvGQ+c/
LJPKlQV/Y2dpmXOB7QO2vvQscCR57kM5PMmyQn2IbJf++s4XyUN/Qz3BW+5jWeHJ
xrimiG8JR1rtqVAjt30l3zZAnMtVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXN+N
OQA4kWHAhp3XLQVTtGH0OiAwHwYDVR0jBBgwFoAU3IJjhe1IHHwjMIBE24nEU5kq
3E8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMEVGLzRBRkY5NEQ2REFBRTExRUM5OEI4RjBEM0YxMjIyNDY4LzNJSmpo
ZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNJSmpoZTFJSEh3ak1JQkUyNG5FVTVrcTNFOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUUwRUYvNEFGRjk0RDZEQUFFMTFFQzk4QjhGMEQzRjEyMjI0
NjgvM0lKamhlMUlISHdqTUlCRTI0bkVVNWtxM0U4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJ3/KbYRS0r5kmuDWq57FFIeIfPkBInUvc
iPrNMYtPzIDOxFE5y9zhTYwQklEEX7VS5+KseavQ2bRrw9rbwnIQmKM5LSp/lfeg
1hsjc7OjLRkgjKXP3nrOhUIgKPAffaL2Cd7Q5+7Vj48QiGSC85O7R/Vy+vBvzMui
nhd4GoRV3Lfk6IT3YAR3F28zlyqw1uNKqmw7/idnSrTjHjVPdIsLwnFjbbIALdzc
xvTAW/WH1A+vkrR0UxvHojIizGhskK/7sWGa1eCZNZwu/LxkOOjaDjNsrx44Mj/7
2bHzxXWlIWj+h4HTbEApSTVCP0o59jV9bPOkwfTnxZCFzOlZHXvu
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:48:48 2025 by rpki-client