Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: UxvmtBQ+sDp1Vjyg4qSTrTaUy/MJnJRV6RzDyDhi754=
Subject key identifier: 40:74:B3:BC:E2:2F:5C:7D:BE:43:51:AB:BC:60:7C:87:5B:40:60:44
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 08FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 08FE
Signing time: Sat 23 Aug 2025 01:34:44 +0000
Manifest this update: Sat 23 Aug 2025 01:34:44 +0000
Manifest next update: Mon 25 Aug 2025 01:34:44 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: hiyrfPoS0q9Ob40yOlvrRTZEMCdR/gGgjPruYHr7kUU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2302 (0x8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Aug 23 01:34:44 2025 GMT
Not After : Aug 25 01:34:44 2025 GMT
Subject: CN=68a91ab4-bafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:5e:f4:6c:02:db:34:14:d6:15:54:9b:05:
b6:7b:ae:6f:1f:e1:4e:c2:01:2d:81:87:ea:b8:f6:
f8:70:19:2b:40:48:92:a6:01:10:57:b6:69:dc:99:
c7:8c:13:9a:a0:83:5d:62:7c:a9:75:cf:c3:eb:17:
9d:2a:25:60:03:23:7c:f2:4f:9b:86:a9:07:3d:41:
0c:78:ee:82:07:86:6a:b7:f4:c0:1c:2e:9d:e8:77:
9e:d6:7f:b7:03:36:b1:82:d8:ad:5d:d5:d3:73:2d:
ca:c8:34:96:5b:5f:1f:c6:b9:ac:8a:0b:cb:51:d2:
26:be:82:c9:a5:d5:57:ea:ba:4f:af:b9:2d:c0:e6:
60:03:6c:02:da:2b:91:98:31:af:b9:3c:fc:9c:d5:
2f:32:aa:97:a1:5b:af:1b:09:6d:d6:1d:ed:58:2f:
20:b7:aa:72:cf:36:35:e2:de:57:5f:23:0b:74:a7:
f9:20:de:28:bf:35:b1:b1:e9:ad:9c:f6:dc:5f:89:
f3:6d:24:34:02:1c:0e:e4:bd:e7:06:3d:09:9c:3c:
c7:53:52:85:c1:9c:b2:51:94:aa:26:4a:61:af:d2:
69:50:bd:17:c8:62:d3:8f:18:7a:0d:96:47:42:ef:
bc:ef:b0:c0:1c:87:bb:c4:a2:a1:67:ec:fa:14:95:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:74:B3:BC:E2:2F:5C:7D:BE:43:51:AB:BC:60:7C:87:5B:40:60:44
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:30:48:eb:0f:68:fe:4b:a4:4a:3d:c5:2b:92:ab:2c:76:79:
34:ae:e1:df:4b:d5:0d:19:2d:96:2c:e7:a1:70:ea:e6:44:41:
4d:57:a0:b0:f8:1c:7d:55:5c:93:94:0b:2e:2e:a0:9d:db:31:
f3:0c:a8:30:85:d1:1f:25:8e:20:a5:42:cc:1c:b6:89:91:e9:
1e:4c:5e:3c:2a:24:44:fb:ca:07:ff:bc:01:2d:c3:5a:2f:75:
ee:78:20:00:c0:33:c9:c0:c5:bb:60:0e:c9:a9:f8:3c:2e:8e:
cf:8c:90:18:2c:6e:e6:5a:b6:b4:6a:5a:03:a6:15:ce:6d:8a:
91:bd:7e:85:7b:34:5b:47:b5:14:a5:c1:a4:ab:53:aa:13:0d:
70:a1:88:88:4a:49:27:1b:0a:49:0e:9f:29:8f:53:6a:b4:ea:
58:8e:13:61:91:8a:be:78:6b:98:8d:50:68:ae:85:02:09:12:
80:af:8a:f6:86:0b:8a:1c:bb:9c:6c:9c:9f:fb:dc:4b:ea:8b:
d8:92:85:85:24:40:8b:71:03:73:5f:78:3a:f6:3c:00:80:78:
09:38:db:a6:81:b1:a7:37:fe:04:1f:18:bf:f2:f4:89:06:9a:
c1:e3:c3:be:6b:9d:55:58:eb:30:07:2a:2d:a5:8a:1c:8e:91:
62:f0:dc:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjBDMTRBRjExMC8GA1UEBRMoQUUxNUU2MzU1QjA4NEE5M0VCQTIxQzRBOURENjFC
Q0RDMjU4QjU5RTAeFw0yNTA4MjMwMTM0NDRaFw0yNTA4MjUwMTM0NDRaMBgxFjAU
BgNVBAMTDTY4YTkxYWI0LWJhZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhC170bALbNBTWFVSbBbZ7rm8f4U7CAS2Bh+q49vhwGStASJKmARBXtmnc
mceME5qgg11ifKl1z8PrF50qJWADI3zyT5uGqQc9QQx47oIHhmq39MAcLp3od57W
f7cDNrGC2K1d1dNzLcrINJZbXx/GuayKC8tR0ia+gsml1Vfquk+vuS3A5mADbALa
K5GYMa+5PPyc1S8yqpehW68bCW3WHe1YLyC3qnLPNjXi3ldfIwt0p/kg3ii/NbGx
6a2c9txfifNtJDQCHA7kvecGPQmcPMdTUoXBnLJRlKomSmGv0mlQvRfIYtOPGHoN
lkdC77zvsMAch7vEoqFn7PoUlYMrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQHSz
vOIvXH2+Q1GrvGB8h1tAYEQwHwYDVR0jBBgwFoAUrhXmNVsISpProhxKndYbzcJY
tZ4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYwQzE0L0NBRDVGMzYyOUJGQTExRTlCMUJGQzE3OUY4QUVBMjI4L3JoWG1O
VnNJU3BQcm9oeEtuZFliemNKWXRaNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JoWG1OVnNJU3BQcm9oeEtuZFliemNKWXRaNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjBDMTQvQ0FENUYzNjI5QkZBMTFFOUIxQkZDMTc5RjhB
RUEyMjgvcmhYbU5Wc0lTcFByb2h4S25kWWJ6Y0pZdFo0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARMEjrD2j+S6RKPcUrkqssdnk0ruHf
S9UNGS2WLOehcOrmREFNV6Cw+Bx9VVyTlAsuLqCd2zHzDKgwhdEfJY4gpULMHLaJ
kekeTF48KiRE+8oH/7wBLcNaL3XueCAAwDPJwMW7YA7Jqfg8Lo7PjJAYLG7mWra0
aloDphXObYqRvX6FezRbR7UUpcGkq1OqEw1woYiISkknGwpJDp8pj1NqtOpYjhNh
kYq+eGuYjVBoroUCCRKAr4r2hguKHLucbJyf+9xL6ovYkoWFJECLcQNzX3g69jwA
gHgJONumgbGnN/4EHxi/8vSJBprB48O+a51VWOswByotpYocjpFi8Nxv
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:34 2025 by rpki-client