Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: cWLyb3FR+lU62s7ZTZHxFY2xkseLk4Ps5z746IWsSx4=
Subject key identifier: E0:AD:38:21:59:B1:48:07:D5:F3:41:71:83:7F:93:FC:B2:26:ED:FC
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0957
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0956
Signing time: Mon 20 Oct 2025 01:25:51 +0000
Manifest this update: Mon 20 Oct 2025 01:25:50 +0000
Manifest next update: Wed 22 Oct 2025 01:25:50 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: hiAmZmo8mwEsmivY5++Au3Ud/+eYLZ4jgFQswC2LdhY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2391 (0x957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Oct 20 01:25:50 2025 GMT
Not After : Oct 22 01:25:50 2025 GMT
Subject: CN=68f58f9f-ee8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:7d:67:28:03:76:88:fd:d9:65:fb:6c:4f:
56:dc:ed:bd:16:c2:4c:9c:fb:a7:1b:31:01:5b:bd:
cd:47:b2:b0:ce:f5:77:1d:98:4e:07:a2:76:28:40:
7a:6d:d0:24:8c:16:26:7f:6a:94:48:50:35:cf:67:
36:0c:20:81:f2:67:dc:c6:da:10:0b:bc:a4:60:c9:
13:cb:72:4a:27:95:c7:3c:1e:fc:b9:c5:52:20:87:
a6:27:88:63:b0:7b:bb:b1:de:ad:d0:f5:07:96:92:
08:41:6c:ef:d0:96:a5:03:29:5c:ad:9d:ef:b1:f8:
e9:eb:23:29:a3:0a:68:bf:6f:dc:cc:d4:74:c8:c4:
92:bb:5d:01:7b:fb:70:3b:87:54:ae:e0:34:69:45:
ba:74:32:51:ab:09:e2:2a:24:8b:39:bb:09:cc:90:
d9:a3:16:b0:de:3e:e1:08:f8:90:21:61:bd:93:ec:
e0:20:bc:06:b1:2c:ec:00:3d:e5:23:f1:a5:05:bc:
11:66:f0:90:99:d5:7a:35:19:ef:21:3a:4d:1b:20:
b8:04:27:25:af:3d:8d:76:e2:87:75:58:3b:ae:92:
8c:11:d2:da:5c:35:7b:6f:b5:8c:1f:c4:cf:a1:35:
5f:34:fd:57:6c:1b:8d:5d:02:e8:aa:2a:fe:b7:ba:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AD:38:21:59:B1:48:07:D5:F3:41:71:83:7F:93:FC:B2:26:ED:FC
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bd:f7:11:9e:52:08:f8:6a:cb:b8:15:e6:5a:4d:7b:60:46:73:
7d:f2:e2:40:82:f0:bf:b8:10:3f:ed:a7:7c:5f:56:5c:cb:9c:
08:24:bf:45:fd:4e:fb:16:63:b9:48:2b:79:0d:3e:cd:68:77:
af:4c:53:31:3b:0a:8a:60:70:fb:73:bd:2b:ea:5c:8f:31:12:
0c:66:5a:94:48:5a:77:c2:d1:af:cf:dd:19:35:f1:89:9d:ce:
f4:01:90:91:2f:f3:1e:0e:ea:8f:5e:8e:df:a6:f2:21:23:17:
5c:be:cc:f8:3a:05:a5:a8:37:de:c1:56:20:09:74:fd:23:cb:
90:f8:b7:e7:42:c7:2c:53:05:e6:78:43:ed:e7:ac:55:86:5c:
81:59:93:0d:75:46:cd:62:51:a6:d2:96:34:27:87:5d:39:ea:
d6:6c:93:7e:8b:0f:9b:db:73:7a:94:6a:09:93:64:48:7a:6e:
70:8b:e0:00:41:83:7e:ae:f6:e2:db:f1:2d:29:e3:23:0f:b2:
d2:20:04:57:a4:94:dc:dd:9b:41:26:01:5f:82:24:24:5b:aa:
e1:cf:95:9c:6f:ab:2a:63:74:87:c2:b9:61:36:90:72:9e:5a:
50:11:01:ad:4c:8e:c4:77:d8:a5:31:6a:3e:5f:47:4c:2d:e0:
55:20:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:23 2025 by rpki-client