Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File: Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier: afgw9gRKu5jdoJJ9jZFjK4qnTavLLSYnVIAcf10iygs=
Subject key identifier: 54:7E:E3:74:89:AD:70:AB:8A:11:8B:9E:D0:7A:DA:98:6E:D5:89:B9
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer: /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial: 0396
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number: 0396
Signing time: Tue 01 Jul 2025 03:29:44 +0000
Manifest this update: Tue 01 Jul 2025 03:29:44 +0000
Manifest next update: Thu 03 Jul 2025 03:29:44 +0000
Files and hashes: 1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: WnmxI5voawzalLprEXBOHDtD59N2r1bQMw96J3J+kb4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 03:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 918 (0x396)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Validity
Not Before: Jul 1 03:29:44 2025 GMT
Not After : Jul 3 03:29:44 2025 GMT
Subject: CN=68635628-46a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:00:54:0c:32:19:1a:23:4d:e7:74:15:49:
9f:55:5f:46:fe:ee:43:09:1a:c6:22:ce:5e:a6:0a:
27:a8:8e:d0:6d:af:af:ea:4d:82:ad:30:11:65:92:
15:b1:a0:4c:90:3b:a4:a2:a5:94:6d:21:2c:90:8a:
40:d1:df:23:65:e1:e2:df:73:e0:c5:e8:e9:c4:17:
51:92:9f:e7:34:86:d1:9a:63:65:17:69:82:49:b7:
29:49:17:15:7d:8d:a5:83:b7:40:fa:1b:05:9c:e6:
60:82:e2:d6:59:cd:4b:df:63:96:a2:19:49:27:2a:
f7:37:d1:99:fb:06:9b:2a:fb:69:a4:f8:4a:be:fc:
65:62:47:e7:eb:58:4b:f5:5b:43:33:3f:32:83:e8:
dc:32:e3:65:77:bf:b0:d5:d1:47:6a:c0:f3:31:5b:
d1:28:09:14:c7:c1:f3:b0:fa:1d:6f:71:76:0d:82:
2a:37:df:d9:69:9c:3b:b3:8d:1f:1f:eb:3c:60:14:
cb:95:e6:50:36:b1:28:f6:31:ef:61:78:2e:b0:4e:
63:81:ab:52:d6:eb:76:72:24:63:ac:f2:13:9b:32:
7b:24:f8:40:45:12:8a:a6:87:a3:10:43:78:31:91:
e2:cd:ca:27:cf:70:ba:aa:1c:4c:39:77:9f:7d:e5:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7E:E3:74:89:AD:70:AB:8A:11:8B:9E:D0:7A:DA:98:6E:D5:89:B9
X509v3 Authority Key Identifier:
keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b8:ad:83:6c:c3:26:dc:31:54:08:85:66:1e:70:19:cb:c2:
78:e5:6e:6d:c5:bd:73:e2:b0:b8:1a:6b:ba:a6:90:df:73:e6:
21:6e:71:6b:ae:66:c9:5a:32:75:39:35:d7:ac:47:9d:60:cb:
ed:ee:81:00:59:20:74:27:23:11:48:4b:d2:3a:12:28:41:98:
49:bd:de:fc:b0:60:b2:7f:55:02:53:d6:1f:68:38:5d:f4:33:
f9:0d:85:37:7b:4d:bf:8e:f2:ce:74:8c:da:6e:36:a8:9f:0c:
d6:be:bc:5c:16:7a:39:c9:d5:55:57:8a:4e:46:1b:54:00:33:
47:22:aa:83:7a:b0:51:2d:f1:85:f4:23:85:39:c6:a5:72:f5:
20:23:ef:03:e2:57:f5:45:fa:ca:af:34:ec:9b:80:6b:0a:d7:
07:c1:c0:18:2f:1f:96:cd:e3:ca:01:a3:8f:38:ce:61:33:fd:
b0:81:6b:28:d6:d2:cc:17:9d:a3:f5:41:73:db:1c:08:72:93:
3c:0d:dd:fa:33:d2:96:05:b3:ad:8c:5a:d9:04:7e:31:17:ba:
02:ba:d7:2d:83:04:22:93:03:60:a3:5f:6c:af:74:49:dc:39:
5a:ef:85:e2:22:62:16:f1:6d:c5:bf:a0:c3:7e:00:78:32:c2:
6c:f9:41:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:41:00 2025 by rpki-client