Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: hgggLCstEyjSrpk2KHY7gFWMIl6Vnzk9qtHma0TMNGE=
Subject key identifier: 69:79:E6:16:32:8E:76:71:16:E2:59:46:AF:9E:64:22:45:73:CF:2E
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 08ED
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 08EC
Signing time: Sun 06 Jul 2025 01:29:23 +0000
Manifest this update: Sun 06 Jul 2025 01:29:22 +0000
Manifest next update: Tue 08 Jul 2025 01:29:22 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: WNff9BysMwNuWH0+FTwrNnApDiRvS8YSOGi9nuQO/Mc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285 (0x8ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Jul 6 01:29:22 2025 GMT
Not After : Jul 8 01:29:22 2025 GMT
Subject: CN=6869d173-653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:a7:7b:dc:ac:80:5a:c8:a8:a3:20:91:36:
3a:ee:da:1a:db:8b:b6:64:e5:8e:e0:c7:02:e1:20:
f9:ce:2c:17:37:34:7b:1d:b8:3c:97:35:99:5b:4c:
fb:e2:bd:ed:89:bb:2e:47:92:07:2a:39:0d:72:ef:
14:c2:16:a5:67:af:02:b2:e0:53:63:f7:ea:09:d7:
47:ff:b7:7d:04:1d:b6:a1:75:91:91:91:ff:b8:77:
d5:f7:3c:31:1b:16:65:3d:7b:ed:34:96:8c:a7:a7:
a3:21:7f:0a:f9:48:e9:4f:da:26:ae:29:7a:0a:a8:
35:45:38:46:84:16:cb:41:aa:6a:58:53:5c:c6:de:
d9:8b:52:fa:cf:05:a1:db:7a:d8:c0:78:5a:17:dc:
fc:19:44:98:da:c2:ea:8c:9d:ba:59:77:d8:01:76:
67:4f:06:80:79:bb:9d:e9:3e:00:8b:83:0a:42:7d:
91:27:4a:1d:31:8b:a0:01:0d:6a:a2:42:79:5c:4d:
f0:4b:10:e0:6d:d9:b9:94:ea:ab:4e:0b:c3:f6:4a:
62:96:93:2b:e3:a5:41:9b:d1:b6:a7:66:fd:0e:3c:
d4:b0:ca:2e:73:f8:e0:0d:bd:84:d3:45:85:0c:c1:
80:dc:95:c5:6e:1b:0e:b1:d5:de:d9:84:e8:49:80:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:79:E6:16:32:8E:76:71:16:E2:59:46:AF:9E:64:22:45:73:CF:2E
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c9:d5:8f:bf:47:54:c3:1f:a8:03:02:68:a7:3a:8a:10:44:
a0:c8:e4:57:fd:9a:ec:3a:c5:77:b4:5e:aa:7e:61:a0:cc:0f:
10:9f:1b:0f:38:d1:9a:09:c2:c9:e0:80:ae:9d:49:62:36:d9:
d7:51:f6:5c:5c:b3:09:85:fb:83:b3:b7:8c:a5:4b:1e:57:78:
e7:c4:9a:8b:99:c2:fa:65:b2:49:1b:f4:52:11:3f:6b:98:28:
d8:40:50:32:79:92:a6:15:a5:93:aa:71:14:e1:4b:8e:44:7d:
8b:aa:8d:6f:67:54:48:22:d4:08:eb:8d:95:ea:51:69:26:34:
70:28:07:22:25:b0:83:32:f5:9e:b3:a7:32:78:ba:10:19:b3:
05:16:72:d6:ff:76:ad:c7:f3:ee:ec:68:63:15:7a:34:df:a3:
53:3d:47:49:1b:d9:b9:c1:90:e4:52:1e:01:6f:4a:c2:c0:bb:
f6:23:5f:7a:d0:38:30:77:bd:98:c8:52:79:25:7c:07:31:dd:
55:35:36:d2:52:8e:37:ff:5f:11:20:b5:a4:77:d9:05:bd:3e:
84:cc:09:0d:17:41:73:28:0c:43:e3:c3:7f:65:e6:5c:dd:72:
b1:a1:97:67:3d:ef:18:19:5f:09:84:76:69:ab:07:7d:20:a4:
1d:22:8a:64
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCO0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzBDNDBBUjExMC8GA1UEBRMoQjQ3MTZGM0JDN0JEMURCNDQ3Q0M3MzBGRUU3QTJC
QjYzMkFCMTkwMzAeFw0yNTA3MDYwMTI5MjJaFw0yNTA3MDgwMTI5MjJaMBgxFjAU
BgNVBAMTDTY4NjlkMTczLTY1M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzeqd73KyAWsiooyCRNjru2hrbi7Zk5Y7gxwLhIPnOLBc3NHsduDyXNZlb
TPvive2Juy5HkgcqOQ1y7xTCFqVnrwKy4FNj9+oJ10f/t30EHbahdZGRkf+4d9X3
PDEbFmU9e+00loynp6Mhfwr5SOlP2iauKXoKqDVFOEaEFstBqmpYU1zG3tmLUvrP
BaHbetjAeFoX3PwZRJjawuqMnbpZd9gBdmdPBoB5u53pPgCLgwpCfZEnSh0xi6AB
DWqiQnlcTfBLEOBt2bmU6qtOC8P2SmKWkyvjpUGb0banZv0OPNSwyi5z+OANvYTT
RYUMwYDclcVuGw6x1d7ZhOhJgPTpAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUaXnm
FjKOdnEW4llGr55kIkVzzy4wHwYDVR0jBBgwFoAUtHFvO8e9HbRHzHMP7nortjKr
GQMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwQzQwL0UwN0YxMTEwODY0NDExRTk4OUNFRkI1NkY4QUVBMjI4L3RIRnZP
OGU5SGJSSHpITVA3bm9ydGpLckdRTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3RIRnZPOGU5SGJSSHpITVA3bm9ydGpLckdRTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzBDNDAvRTA3RjExMTA4NjQ0MTFFOTg5Q0VGQjU2RjhBRUEy
MjgvdEhGdk84ZTlIYlJIekhNUDdub3J0aktyR1FNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMydWPv0dUwx+oAwJopzqKEESgyORX/Zrs
OsV3tF6qfmGgzA8QnxsPONGaCcLJ4ICunUliNtnXUfZcXLMJhfuDs7eMpUseV3jn
xJqLmcL6ZbJJG/RSET9rmCjYQFAyeZKmFaWTqnEU4UuORH2Lqo1vZ1RIItQI642V
6lFpJjRwKAciJbCDMvWes6cyeLoQGbMFFnLW/3atx/Pu7GhjFXo036NTPUdJG9m5
wZDkUh4Bb0rCwLv2I1960Dgwd72YyFJ5JXwHMd1VNTbSUo43/18RILWkd9kFvT6E
zAkNF0FzKAxD48N/ZeZc3XKxoZdnPe8YGV8JhHZpqwd9IKQdIopk
-----END CERTIFICATE-----
Generated at Sun Jul 6 13:47:41 2025 by rpki-client