Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: 6FR3aSxY6yrBAJheLjn3pl6JoJCS7ZXXC9m9yDnAAXI=
Subject key identifier: DD:55:9D:35:AE:ED:26:67:E6:15:F0:92:6F:6D:CD:CA:C4:87:8F:24
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 091D
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 091C
Signing time: Sat 23 Aug 2025 01:28:27 +0000
Manifest this update: Sat 23 Aug 2025 01:28:26 +0000
Manifest next update: Mon 25 Aug 2025 01:28:26 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: pNbHpptjRYLz4Q+qwJLUh0g8KQ0v/Imt/LIVz5diBvU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2333 (0x91d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Aug 23 01:28:26 2025 GMT
Not After : Aug 25 01:28:26 2025 GMT
Subject: CN=68a9193b-1fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:60:4f:e6:6e:5a:f9:61:9c:b7:53:1a:71:
08:22:d1:9f:99:3e:c7:da:7c:08:8e:ec:4d:1d:26:
49:df:fe:4c:a7:44:a8:ce:dd:17:49:d4:8e:74:d2:
be:f2:d2:11:66:6d:7d:4f:84:64:ea:b3:40:59:cf:
c6:8b:59:e1:20:98:8b:68:8a:95:3f:ca:a5:48:e4:
f0:c1:b4:da:4b:6b:e1:99:48:a9:02:82:0d:a4:e7:
11:c1:e3:4b:90:09:fd:e3:89:7c:60:85:ad:86:25:
32:a5:ff:ac:ec:7e:66:c1:74:e2:4a:a8:19:3d:34:
5e:51:db:75:93:c0:e7:0e:b6:2a:81:7d:81:3a:28:
80:93:ef:14:18:df:b7:04:98:01:a2:02:d8:54:91:
ee:5b:06:95:ae:8d:44:fe:88:fd:19:d7:67:ee:a1:
ce:68:db:52:45:3d:46:f9:5e:a5:83:f1:6d:1f:3d:
3f:31:5b:6f:e8:be:3f:87:6b:36:1f:29:eb:24:b5:
22:34:7f:c4:d8:56:b8:77:40:c8:47:af:70:d7:22:
f1:98:d4:55:ac:5c:e9:46:6b:ca:8e:5c:2c:d3:41:
67:9b:76:f9:4a:30:75:64:5b:9a:b7:da:e9:36:66:
0e:0a:5b:72:1f:6e:80:b4:ef:6b:19:63:c9:a8:c3:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:9D:35:AE:ED:26:67:E6:15:F0:92:6F:6D:CD:CA:C4:87:8F:24
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3b:f9:4e:81:75:a0:58:b6:d7:e2:f3:b4:71:41:36:02:5f:
ec:23:a5:87:f6:a5:ac:fe:64:ad:cb:c5:19:31:d2:88:41:2d:
bb:bc:af:e3:93:ce:7b:13:4c:6b:fa:73:9e:c8:c0:0e:97:5d:
25:5a:68:4e:b5:1d:46:05:1e:68:3e:a5:84:4f:bc:00:0f:73:
0c:69:03:a3:51:83:df:ed:c9:6f:cf:30:98:69:2c:23:74:54:
6c:8f:b8:89:43:b0:1f:f1:1a:2c:0a:47:70:99:91:5e:6e:43:
a1:91:72:2c:0d:ad:24:c0:e5:4d:d4:85:9b:03:8c:25:63:9a:
9b:35:84:a3:9a:bc:09:20:ed:48:73:5f:61:ed:38:02:95:07:
34:4e:3f:56:13:68:7f:ba:3e:1e:da:79:96:d1:bf:1a:18:2e:
4a:27:73:80:e2:59:86:32:9f:69:ca:65:02:b8:86:b2:4d:00:
0d:5e:39:a5:ac:d4:2d:ef:2d:01:4b:fd:76:db:a3:a2:4f:6c:
d9:70:6f:b6:96:f4:2d:95:96:07:42:c9:e5:2b:0e:28:b0:d4:
8a:af:1f:01:80:bd:9b:0a:38:f2:88:d0:bd:bc:83:c4:ca:30:
f1:26:da:f7:ba:0c:b9:19:ec:04:a2:99:99:cb:96:8b:91:36:
0f:44:af:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:12 2025 by rpki-client