Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: +l7MU5sHsgl4nTBhhvbQ8P6V36Cj2PF76L7JbSTxm7Q=
Subject key identifier: 1F:96:8E:5C:14:B9:9F:23:B3:21:88:B5:B0:19:97:F5:A3:22:A3:4F
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 02CD
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 02CC
Signing time: Sat 05 Jul 2025 03:57:02 +0000
Manifest this update: Sat 05 Jul 2025 03:57:01 +0000
Manifest next update: Mon 07 Jul 2025 03:57:01 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: BpxGSatgo0wVb3c9zWWs5VYS2GS0H1fVcSFr70msOps=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: Jul 5 03:57:01 2025 GMT
Not After : Jul 7 03:57:01 2025 GMT
Subject: CN=6868a28e-1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:51:1a:77:71:b9:33:83:c5:17:9e:33:7e:
a5:b3:26:65:16:a7:de:f3:fe:bd:b5:50:2d:f5:f6:
15:d3:7c:4f:06:75:2c:62:cc:d0:ec:1e:c3:b6:c5:
ca:68:84:b6:bf:ce:e2:b9:c1:8d:1c:26:53:4a:cf:
c1:d1:6a:5e:d9:9c:bd:00:2d:0f:bb:61:65:50:f1:
29:e7:93:ec:51:ed:7e:14:3a:07:2b:e9:0c:c4:5b:
e4:5d:a5:2a:e1:8d:54:45:ec:45:3c:3d:3e:92:6d:
9f:14:8c:73:62:65:80:ea:17:c3:db:83:ca:3e:c1:
ab:49:85:cc:f0:ac:b0:45:24:da:58:0c:45:0d:2a:
9e:cf:65:25:50:0d:70:5d:e2:52:6a:76:f9:ba:18:
23:84:d8:48:8a:f7:fc:e6:0a:51:9a:1e:c6:1b:e3:
fa:e9:7b:16:29:c3:51:50:93:46:b7:e3:03:4d:b2:
f7:8f:b2:78:63:12:53:69:e1:3a:2b:c2:46:9b:6f:
a3:ad:16:02:7a:9a:67:9f:0a:42:d9:b9:b0:6f:94:
db:04:8f:82:3c:65:0b:b8:b6:33:c6:df:f9:0d:bc:
d0:da:1a:96:b3:d4:2f:ff:7c:c0:23:2c:d6:9b:26:
58:3d:38:2c:3e:98:bf:5d:3b:0f:b7:ed:b0:53:ca:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:96:8E:5C:14:B9:9F:23:B3:21:88:B5:B0:19:97:F5:A3:22:A3:4F
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bf:80:cc:40:90:bd:db:73:72:8e:08:d4:15:58:be:25:f6:a5:
d9:60:22:31:86:27:76:e4:f2:40:31:4c:99:77:90:2f:45:7a:
57:d4:cd:ef:a7:97:33:0f:7f:7d:fd:73:da:fd:56:e3:51:ba:
3c:4a:c1:44:1d:22:f0:66:23:d1:91:c6:ea:47:0e:7c:af:9e:
da:42:5f:a8:71:83:46:43:e3:65:59:81:49:e6:27:b5:d6:4c:
57:3a:f6:5e:80:e5:9f:6b:ae:2c:6b:47:15:73:c9:e4:10:d1:
6d:0e:56:c7:ab:3b:dd:68:d7:8c:69:8a:aa:46:59:09:67:bd:
79:14:82:d4:2f:6d:d4:52:2e:9d:43:33:55:9d:4c:cf:f3:22:
01:29:78:d6:d3:18:19:53:a3:d5:98:15:c2:a5:bd:53:6c:3a:
c5:5e:2e:2a:c4:28:37:6b:20:d5:e9:f3:26:ad:29:55:32:a0:
90:0f:38:1b:31:26:5c:d8:b0:50:0a:0f:f1:cf:e5:e7:d1:e8:
d1:ea:90:5f:c3:9e:18:b9:4e:09:ef:f9:d0:a4:17:8b:61:6b:
5f:44:45:a6:77:7e:eb:bb:4d:8e:3e:11:41:73:29:dd:bb:ca:
46:47:f3:16:aa:b1:65:d0:dd:c9:1f:4d:46:d2:a8:a2:d3:3c:
2a:dd:81:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 21:43:54 2025 by rpki-client