Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File: a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier: cLPRtj/Ex6ZNjluCCwGcS0Tk2RRSrn0mWwR2akqUyzk=
Subject key identifier: C9:21:07:5D:E2:3C:DC:99:56:9C:2B:11:AB:B0:7C:6E:53:4C:30:9F
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer: /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial: 0AA3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number: 0A9C
Signing time: Sat 23 Aug 2025 01:12:42 +0000
Manifest this update: Sat 23 Aug 2025 01:12:41 +0000
Manifest next update: Mon 25 Aug 2025 01:12:41 +0000
Files and hashes: 1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: 3EVkWVAOFdzgsm0hN9oBBWrIa4Bu0duxAWvy0EdYaxY=)
2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Validity
Not Before: Aug 23 01:12:41 2025 GMT
Not After : Aug 25 01:12:41 2025 GMT
Subject: CN=68a9158a-3b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:e2:be:3f:9d:3a:3b:95:be:31:18:10:51:
7d:0c:6b:5c:87:6b:08:2f:a3:e7:4f:30:48:7f:59:
9a:68:87:7b:79:f9:08:1e:d0:d4:9e:9c:c6:49:07:
f0:25:5d:e8:6a:76:9b:d0:35:36:4f:27:e6:80:12:
34:3c:55:e0:70:a6:b7:19:1d:f1:e8:eb:27:d0:df:
1c:f9:37:a1:30:53:1b:99:42:c0:74:e5:92:92:c6:
1e:6e:af:e1:4d:ba:69:e0:9d:20:df:ef:af:0b:ee:
ed:3b:27:a3:c2:e5:4f:20:27:34:84:a0:79:83:0d:
02:b4:40:1d:e4:cc:6e:16:62:47:0c:ef:21:0a:09:
6c:ed:90:a1:b8:67:00:0f:6c:c9:f9:7d:10:be:a1:
bb:a2:c2:dc:36:05:fb:d4:6a:c9:ce:2f:1c:97:65:
81:5f:33:13:44:e7:9e:fc:a8:62:58:2d:23:ca:9b:
10:be:8f:c6:85:7b:0e:f5:04:c2:4d:92:74:60:7a:
6d:cb:74:f1:16:54:7c:df:79:d0:2e:ea:15:77:b3:
65:5d:5b:a4:b9:14:c6:5d:09:30:ac:e9:86:10:70:
24:b8:c0:57:5e:d5:ec:ad:16:48:89:c6:97:ae:4c:
20:0d:db:09:3a:8a:9e:b4:8d:88:81:ff:5d:6e:a1:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:07:5D:E2:3C:DC:99:56:9C:2B:11:AB:B0:7C:6E:53:4C:30:9F
X509v3 Authority Key Identifier:
keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:70:52:95:23:0f:9d:c3:6c:48:85:d8:ed:63:ce:10:f8:
c7:18:cc:fe:23:19:1a:fe:5d:07:0c:7f:5c:1f:01:f7:bd:62:
16:5e:b4:e4:34:f1:8c:91:70:d6:ce:6f:b9:1f:97:d8:82:d9:
51:7a:e2:48:71:8c:7f:cb:4c:a2:db:8d:7a:cf:f2:62:34:34:
1c:9d:61:18:b1:9c:4a:bf:f0:31:6d:04:e2:d0:22:b6:3f:cb:
53:9f:83:90:e7:66:dd:fe:7e:94:fa:a9:7e:18:b7:c5:cb:1d:
f6:41:01:3d:54:38:ec:21:aa:c9:da:5c:11:83:56:ca:66:64:
0c:b5:98:ed:52:3f:9e:86:17:7b:39:d2:f2:02:8d:1f:da:e9:
77:9d:81:5c:3b:2e:11:3c:81:f5:a1:9b:e3:fa:4a:56:36:40:
11:4a:c3:6c:58:91:14:f0:01:21:83:73:bf:ed:9f:a7:99:f5:
ac:a6:67:8d:d0:07:f8:0a:9a:a3:a3:ab:93:50:6e:78:44:c1:
28:e1:4a:22:22:c8:0d:6e:05:d0:9c:1c:d5:4f:e4:42:9c:08:
4e:dd:fb:f8:60:2e:2c:7c:e4:e7:38:03:39:1f:e6:58:20:83:
c2:8c:a0:ba:a2:ab:ba:a0:0c:46:c5:4b:7d:e0:09:40:9c:66:
7c:ae:1a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:41 2025 by rpki-client