Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: r5jlcAc6v7zQJsB/OW4hxmyvoM1bAE1m4cZ0shUxXSE=
Subject key identifier: D3:9F:02:15:34:18:10:CE:E8:32:34:C4:4C:04:C3:B8:39:D1:73:0A
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0DAA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D8A
Signing time: Mon 20 Oct 2025 01:03:39 +0000
Manifest this update: Mon 20 Oct 2025 01:03:38 +0000
Manifest next update: Wed 22 Oct 2025 01:03:38 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: XNMD05p40CoS6Ew7kj6YeHqVxtUW+yrOoF4IFyLSmzI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3498 (0xdaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Oct 20 01:03:38 2025 GMT
Not After : Oct 22 01:03:38 2025 GMT
Subject: CN=68f58a6b-ed28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:87:5d:22:59:86:fa:82:c8:d4:77:37:19:
26:8d:a4:8c:06:eb:e8:03:ba:14:a8:9c:99:61:27:
69:c8:06:ef:77:a1:ee:00:e8:87:87:b0:69:90:e6:
7d:5e:2f:52:8b:98:e7:1d:2e:0d:cd:01:05:23:b0:
6c:d0:b5:90:87:49:05:a0:d7:0f:d1:e0:46:42:5d:
10:e4:76:7d:11:8c:2a:d9:da:d0:08:2c:e5:17:85:
8c:39:cf:c6:a2:85:74:5b:bc:43:e2:79:46:c0:2a:
70:25:75:82:f2:22:3a:9e:4a:c2:4a:27:a1:7e:72:
85:8f:ac:22:b3:47:34:b6:65:cd:f0:54:9b:fc:1b:
7a:4f:99:27:2e:a9:b4:c8:9a:d0:1f:c5:cf:8b:49:
13:03:88:07:2f:4b:b8:75:cf:84:fe:ae:6c:75:5a:
5a:9e:cc:08:97:46:95:69:ee:2c:c5:0f:d6:bb:af:
cb:4a:3f:7c:e2:e7:5c:bb:c8:db:27:c3:87:a8:a9:
3d:48:70:d4:f4:54:6a:10:50:1c:88:cd:4c:aa:42:
c1:55:2f:b7:92:f0:56:bd:51:27:87:8d:65:3d:89:
0c:20:14:23:b5:9e:68:12:77:ea:cf:2d:52:d5:85:
ca:1d:25:7e:1e:76:b4:d2:c8:75:15:35:b1:85:bd:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:9F:02:15:34:18:10:CE:E8:32:34:C4:4C:04:C3:B8:39:D1:73:0A
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:4d:f8:39:1e:4b:f4:89:90:a2:5c:bd:c8:72:ba:0a:91:2b:
ac:10:94:af:11:d6:5b:d1:bb:ff:39:9a:44:fe:1c:b7:e6:31:
0f:be:31:bb:92:00:32:55:a5:7e:ac:4c:67:c0:b7:c2:eb:98:
aa:74:1a:dd:e4:10:50:c9:2e:03:07:b1:ca:f1:52:59:7d:a3:
2b:55:25:87:46:b7:96:f6:3d:60:1f:38:69:e6:f0:64:a9:dd:
78:d5:f1:71:55:fd:f9:04:ad:88:e0:29:30:13:59:b7:c6:f9:
7e:4d:af:e5:07:7d:f0:a8:fa:f0:51:bc:ee:af:f5:e4:95:8c:
38:f2:c2:08:3b:15:bb:f0:ab:21:e4:bf:13:da:ca:d3:f7:59:
45:1a:39:1e:5c:aa:3a:01:28:39:03:d5:0d:89:91:4b:66:39:
8a:22:8f:86:65:be:d7:65:53:ad:ce:e6:81:d2:1f:80:21:62:
94:53:70:0a:95:3c:6a:a7:f9:9b:32:fa:4d:82:98:71:1e:da:
57:04:b3:13:a6:dd:b7:56:15:aa:ec:b4:ff:ec:ea:f1:e0:c3:
00:48:f9:aa:ae:a0:83:bd:0b:27:17:bb:ea:ba:a3:92:39:99:
82:76:2f:af:8d:9d:6d:55:a8:72:8f:e4:77:77:30:f8:43:5e:
d6:64:4b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:56:04 2025 by rpki-client