Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File: Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier: oscnfZFg/ssB7Cn7e4bNz/JUntzdYw8QWrFuzmZIbbw=
Subject key identifier: 77:F7:C1:10:1D:AC:B7:0F:5B:98:B9:A3:45:68:F6:C0:14:9B:BE:0A
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer: /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial: 03DA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number: 03D8
Signing time: Sat 23 Aug 2025 03:23:17 +0000
Manifest this update: Sat 23 Aug 2025 03:23:17 +0000
Manifest next update: Mon 25 Aug 2025 03:23:17 +0000
Files and hashes: 1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: Z6DnH044EARZXbu/brdCNuc0BlbflqZD0XTGu6VlGsQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 986 (0x3da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Validity
Not Before: Aug 23 03:23:17 2025 GMT
Not After : Aug 25 03:23:17 2025 GMT
Subject: CN=68a93425-ef10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:ca:00:1b:6c:e7:af:51:c0:6f:72:65:dd:
bc:12:0f:ef:76:db:f4:71:1f:44:55:db:e0:46:04:
03:43:e9:d7:f9:9f:25:89:04:26:92:81:22:50:ea:
f9:74:16:e5:33:82:94:54:e5:6a:d1:05:78:4f:07:
5f:8b:ca:4d:33:05:c5:24:31:6b:87:12:5e:59:aa:
00:a9:08:43:d8:bb:1a:72:bb:88:6f:e8:b4:30:ea:
b7:24:e5:bc:d7:ba:da:36:93:af:2d:a5:06:53:78:
4b:48:e8:52:02:27:5b:5b:69:87:04:be:18:03:f2:
a2:eb:94:63:1f:59:f7:d5:80:2a:94:07:f9:8c:ec:
99:da:cd:58:7f:df:f7:f3:37:45:1a:05:4b:0d:a1:
71:53:d7:ca:48:ae:30:02:bd:d7:bf:16:f9:8b:b6:
ce:15:51:3c:1a:de:19:3c:2b:49:c5:8c:51:0e:47:
73:a4:4a:ad:d1:d4:1e:43:f3:fc:db:c4:97:6f:7e:
6f:24:d1:59:65:89:eb:a9:1a:3d:91:da:0e:b1:a6:
79:40:8e:75:e7:7c:78:2c:90:83:51:14:d1:f2:44:
50:49:9c:26:aa:5e:b5:78:2d:91:c2:18:1e:98:fb:
75:2a:b7:f7:99:36:bf:4c:06:47:ec:a2:3b:62:99:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F7:C1:10:1D:AC:B7:0F:5B:98:B9:A3:45:68:F6:C0:14:9B:BE:0A
X509v3 Authority Key Identifier:
keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:16:b9:5f:01:67:e6:56:52:66:97:cf:77:65:37:21:c6:a1:
cb:d6:d1:a2:f5:48:d1:c8:13:d5:c1:04:6a:6b:e1:4c:4b:bc:
89:10:c2:4d:89:03:ee:0d:d8:46:20:1b:c5:70:96:62:28:ef:
ca:55:3c:73:30:e1:b8:ec:a2:b6:4f:3e:a5:20:8f:ec:d3:ab:
6e:01:91:55:85:d2:ce:9b:54:e7:47:d0:21:6e:ae:be:f1:e7:
f7:1d:e5:2b:01:3a:55:db:77:61:94:a8:ca:ac:2d:6c:26:e6:
9b:51:df:d7:e0:22:9a:63:b3:ab:27:f6:0b:9b:f8:26:33:14:
33:94:4e:01:29:71:bb:22:ce:14:40:dc:e1:b1:1c:fc:7c:e7:
d3:d1:be:36:87:17:d8:d9:9c:7e:30:35:b4:24:22:19:55:9d:
d1:e4:a9:49:39:94:85:63:fd:ec:52:67:4f:8c:26:71:11:a0:
2f:11:39:60:87:f9:1b:a7:e5:f7:9a:3f:06:f1:35:67:a9:cb:
71:9c:4e:32:3c:94:43:a8:39:3d:2c:46:da:32:59:bf:98:48:
e0:a0:1d:96:d9:bc:ae:83:c1:32:37:e9:c5:cd:95:0f:dd:00:
08:74:b2:8a:74:af:8b:03:3d:f6:ef:09:50:fc:21:b2:8d:c1:
10:c5:d2:a4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYzMUJBRjExMC8GA1UEBRMoM0YyRTI1ODczRjkzMEEzRTJGNzVBNUMyQzYxNTYy
QjAyMjBERTY1QjAeFw0yNTA4MjMwMzIzMTdaFw0yNTA4MjUwMzIzMTdaMBgxFjAU
BgNVBAMTDTY4YTkzNDI1LWVmMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHT8oAG2znr1HAb3Jl3bwSD+922/RxH0RV2+BGBAND6df5nyWJBCaSgSJQ
6vl0FuUzgpRU5WrRBXhPB1+Lyk0zBcUkMWuHEl5ZqgCpCEPYuxpyu4hv6LQw6rck
5bzXuto2k68tpQZTeEtI6FICJ1tbaYcEvhgD8qLrlGMfWffVgCqUB/mM7JnazVh/
3/fzN0UaBUsNoXFT18pIrjACvde/FvmLts4VUTwa3hk8K0nFjFEOR3OkSq3R1B5D
8/zbxJdvfm8k0VllieupGj2R2g6xpnlAjnXnfHgskINRFNHyRFBJnCaqXrV4LZHC
GB6Y+3Uqt/eZNr9MBkfsojtimWM3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUd/fB
EB2stw9bmLmjRWj2wBSbvgowHwYDVR0jBBgwFoAUPy4lhz+TCj4vdaXCxhVisCIN
5lswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMzFCL0Q1MkMxODRBOTczMzExRURCNDIzNDQ4REYxMjIyNDY4L1B5NGxo
ei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B5NGxoei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUYzMUIvRDUyQzE4NEE5NzMzMTFFREI0MjM0NDhERjEy
MjI0NjgvUHk0bGh6LVRDajR2ZGFYQ3hoVmlzQ0lONWxzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOFrlfAWfmVlJml893ZTchxqHL1tGi
9UjRyBPVwQRqa+FMS7yJEMJNiQPuDdhGIBvFcJZiKO/KVTxzMOG47KK2Tz6lII/s
06tuAZFVhdLOm1TnR9Ahbq6+8ef3HeUrATpV23dhlKjKrC1sJuabUd/X4CKaY7Or
J/YLm/gmMxQzlE4BKXG7Is4UQNzhsRz8fOfT0b42hxfY2Zx+MDW0JCIZVZ3R5KlJ
OZSFY/3sUmdPjCZxEaAvETlgh/kbp+X3mj8G8TVnqctxnE4yPJRDqDk9LEbaMlm/
mEjgoB2W2byug8EyN+nFzZUP3QAIdLKKdK+LAz327wlQ/CGyjcEQxdKk
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:54:06 2025 by rpki-client