Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: 05Dg7aiDCfzyTGAUO8uApNXZDpV2+BmzsPqIgiQAoQ4=
Subject key identifier: B5:41:F4:F8:F1:A3:3B:D1:83:9A:84:AB:69:D0:3E:03:63:FE:20:CC
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0D70
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D50
Signing time: Sat 23 Aug 2025 01:04:15 +0000
Manifest this update: Sat 23 Aug 2025 01:04:14 +0000
Manifest next update: Mon 25 Aug 2025 01:04:14 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: +3N/6/RcDOjVYCKJM6HKTQIMkjcZKzmlPFBaDP401uI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3440 (0xd70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Aug 23 01:04:14 2025 GMT
Not After : Aug 25 01:04:14 2025 GMT
Subject: CN=68a9138f-74c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:e5:77:a6:4a:65:8a:88:7e:24:a7:f9:40:
06:1f:75:f2:46:24:66:50:31:17:61:51:86:84:f0:
10:86:4e:8a:d8:5d:62:6f:8d:33:d4:f3:9b:83:98:
bf:79:05:ea:8c:c7:8c:fb:20:2a:74:50:12:50:91:
a0:80:c4:d5:ce:12:70:f8:f8:52:0f:b2:05:e4:91:
7d:53:66:ad:02:80:f8:f0:b9:11:f1:06:e8:88:2a:
5c:97:09:67:4c:43:de:f1:b3:be:23:8a:ad:d5:a5:
d1:e1:8a:3c:e1:2a:f3:7a:91:d6:73:b3:62:eb:28:
6f:30:da:87:8c:61:a4:db:41:15:b2:48:b4:3b:2a:
1c:70:19:cf:c2:11:77:c4:06:12:32:4c:5f:ac:ed:
2d:db:4a:83:9b:05:bf:9b:c1:61:48:2c:f0:3c:7f:
a1:88:c1:cf:7d:bd:2b:9c:a6:64:f6:2f:86:2f:62:
23:68:8e:20:5b:7c:ec:0f:fe:c3:4b:9f:fc:a5:ad:
9b:62:3e:e7:d6:73:44:2b:c3:d1:fc:82:44:71:d7:
6e:b4:ae:86:5e:f1:f5:24:0c:99:8b:9f:94:38:82:
0b:4f:05:8d:8a:c8:0a:bf:3a:c7:dd:67:10:d8:ab:
b7:fb:0f:e2:0e:23:45:9e:2a:3e:2d:b2:4f:d2:72:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:F4:F8:F1:A3:3B:D1:83:9A:84:AB:69:D0:3E:03:63:FE:20:CC
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:5c:dc:0d:c4:18:0d:d3:f1:b4:6b:51:b1:73:21:3b:73:
35:99:d3:c2:f7:98:33:87:6c:c4:c9:2a:5b:70:65:be:18:4d:
70:16:f3:a6:26:58:b6:9d:79:ba:ea:dd:6f:6a:ad:f1:4c:ad:
5e:29:82:1e:9b:08:a0:95:1d:3b:2a:fe:eb:1c:88:93:ab:bc:
28:fa:2a:08:f2:e3:07:65:23:23:6a:f3:85:e6:41:42:55:86:
93:7b:95:37:f3:f5:58:7f:fa:8a:82:2e:96:15:9b:f7:cf:15:
a7:6c:b3:bd:c7:82:35:10:09:c8:a5:10:6a:11:c1:89:4d:e0:
3e:aa:a0:c2:62:a7:92:1d:bb:49:f1:35:06:4c:19:f7:78:f5:
ec:5f:c6:01:43:4b:dd:13:4e:d1:25:9c:cf:0a:28:92:8e:5e:
50:94:31:74:b2:42:50:83:5d:6b:ae:34:20:b9:00:ef:d2:0f:
11:1f:ec:52:45:a1:87:12:84:f5:2f:5c:20:4f:fe:25:d1:21:
db:ec:0d:87:ea:89:4b:5d:27:69:30:09:c4:5a:d1:42:67:ad:
76:fc:c8:57:c6:1d:bf:c0:9c:bc:f1:b5:9a:7a:f3:00:53:af:
4f:c9:8a:72:7e:7c:d2:41:9b:44:ef:20:34:a1:8a:e2:3b:ae:
c8:6d:0e:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjgwMzdBRjExMC8GA1UEBRMoMzE0RkZDRTU0MjkxNEUxOTNDN0MxQTJBMDNDNzM1
NzQ2MkVBMTgxNjAeFw0yNTA4MjMwMTA0MTRaFw0yNTA4MjUwMTA0MTRaMBgxFjAU
BgNVBAMTDTY4YTkxMzhmLTc0YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOIuV3pkplioh+JKf5QAYfdfJGJGZQMRdhUYaE8BCGTorYXWJvjTPU85uD
mL95BeqMx4z7ICp0UBJQkaCAxNXOEnD4+FIPsgXkkX1TZq0CgPjwuRHxBuiIKlyX
CWdMQ97xs74jiq3VpdHhijzhKvN6kdZzs2LrKG8w2oeMYaTbQRWySLQ7KhxwGc/C
EXfEBhIyTF+s7S3bSoObBb+bwWFILPA8f6GIwc99vSucpmT2L4YvYiNojiBbfOwP
/sNLn/ylrZtiPufWc0Qrw9H8gkRx1260roZe8fUkDJmLn5Q4ggtPBY2KyAq/Osfd
ZxDYq7f7D+IOI0WeKj4tsk/ScgeJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtUH0
+PGjO9GDmoSradA+A2P+IMwwHwYDVR0jBBgwFoAUMU/85UKRThk8fBoqA8c1dGLq
GBYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4MDM3LzJBQjM5MEUyNkRDNzExRTY4MjY1MzYyREY4QUVBMjI4L01VXzg1
VUtSVGhrOGZCb3FBOGMxZEdMcUdCWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01VXzg1VUtSVGhrOGZCb3FBOGMxZEdMcUdCWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjgwMzcvMkFCMzkwRTI2REM3MTFFNjgyNjUzNjJERjhB
RUEyMjgvTVVfODVVS1JUaGs4ZkJvcUE4YzFkR0xxR0JZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWYlzcDcQYDdPxtGtRsXMhO3M1mdPC
95gzh2zEySpbcGW+GE1wFvOmJli2nXm66t1vaq3xTK1eKYIemwiglR07Kv7rHIiT
q7wo+ioI8uMHZSMjavOF5kFCVYaTe5U38/VYf/qKgi6WFZv3zxWnbLO9x4I1EAnI
pRBqEcGJTeA+qqDCYqeSHbtJ8TUGTBn3ePXsX8YBQ0vdE07RJZzPCiiSjl5QlDF0
skJQg11rrjQguQDv0g8RH+xSRaGHEoT1L1wgT/4l0SHb7A2H6olLXSdpMAnEWtFC
Z612/MhXxh2/wJy88bWaevMAU69PyYpyfnzSQZtE7yA0oYriO67IbQ4z
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:14 2025 by rpki-client