
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: hXZQ4VjOCJQjNcSVyaub/AmsMaTh7lT5iK8kc4CNbEE=
Subject key identifier: FC:41:13:9C:88:EE:89:63:70:DF:D7:EC:A6:2D:0F:30:1A:67:88:C5
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 08CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 08CB
Signing time: Thu 03 Jul 2025 01:35:17 +0000
Manifest this update: Thu 03 Jul 2025 01:35:16 +0000
Manifest next update: Sat 05 Jul 2025 01:35:16 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: MEQPdVyEG0upkwW+VnGoj8Dr8U7ee91EqsAimFV25O0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 01:35:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Jul 3 01:35:16 2025 GMT
Not After : Jul 5 01:35:16 2025 GMT
Subject: CN=6865de55-90f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:f0:f9:89:ad:3e:6b:35:c3:27:9b:b7:40:
b0:10:6b:6a:ab:48:39:5a:32:9f:e8:75:1c:64:01:
76:2c:ea:c9:1d:07:ab:63:9e:e7:b2:3a:e3:bb:e9:
cf:a8:73:a3:17:29:cf:1c:e3:eb:d6:3b:79:6b:18:
22:09:71:b1:7f:71:38:e0:99:e4:6a:ae:1f:ba:eb:
5e:64:f6:81:06:a2:76:70:14:ad:5e:38:75:74:bf:
8f:7f:7f:bd:b3:18:88:19:05:8d:69:61:90:bd:46:
69:33:ab:44:16:87:0c:fa:8f:95:5b:79:6f:60:c6:
f4:8b:9f:8d:99:62:08:26:10:c0:fd:a2:71:86:cf:
f9:a4:81:0b:3e:86:05:ec:17:50:f0:44:c7:0c:9f:
0b:fe:d7:60:d7:ba:7b:1d:1f:42:3d:41:50:69:ce:
6f:87:a9:cc:27:4e:d2:85:3e:2a:3e:7f:a0:38:aa:
9e:41:56:f1:23:fc:b6:0c:f4:60:ef:33:e7:bb:b1:
6c:15:2e:25:b7:ec:10:b3:41:f7:e1:ff:8b:db:a5:
99:d3:28:ae:13:23:7b:f2:e6:ed:a6:0c:e5:ca:13:
e3:db:3d:91:9d:35:3e:1d:9d:8c:9e:87:aa:47:c8:
56:f0:07:74:9b:00:c2:23:23:a8:f0:68:c0:0f:7d:
30:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:13:9C:88:EE:89:63:70:DF:D7:EC:A6:2D:0F:30:1A:67:88:C5
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:eb:8b:6f:28:3f:8c:1b:18:3f:3e:19:68:7d:7e:93:f6:11:
e2:54:d5:56:3b:16:91:ab:6a:44:31:c7:63:16:54:9b:2a:57:
ca:6a:a3:0a:23:22:86:2c:01:e2:8a:3e:76:b0:33:b2:97:80:
7d:bf:92:ce:f1:24:70:e6:fb:fe:95:ad:fd:e5:34:3e:3b:91:
f9:0c:41:bb:3b:f5:52:1f:f7:a8:be:93:6d:65:07:e3:9d:aa:
9d:84:40:c4:b6:31:e9:cd:11:f3:be:a5:de:2b:aa:08:e3:e2:
90:60:f8:9d:ac:10:65:ca:3f:9d:5e:f2:59:01:d8:5e:00:52:
c9:71:ef:c5:95:2e:f8:69:a0:78:83:f8:e3:18:f9:87:ec:73:
c1:69:3f:3e:49:a1:3f:26:7d:14:6d:57:55:73:a9:6c:55:2d:
ba:f6:47:55:2c:09:c1:bb:b4:67:ae:97:8f:ae:98:89:54:ad:
e1:0a:54:43:ad:45:10:c9:65:5c:3d:2a:45:1c:2a:51:f4:3d:
e5:c9:02:5d:f1:4d:43:42:1e:9e:28:5f:b6:4b:a7:28:15:df:
da:a9:df:6f:58:3d:58:0f:5c:f1:c2:91:f0:51:2b:c5:b9:4f:
fd:46:64:9b:87:f1:a0:7c:db:18:48:7c:d2:0c:73:4f:19:62:
20:03:b8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 21:41:58 2025 by rpki-client