Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: mTXewJSZ13BC3V4FjaklOdCv84b2n53RNIvBGjySy58=
Subject key identifier: 9A:37:91:71:DB:20:4E:4F:D3:13:CB:E4:5D:FA:FC:25:D4:EE:60:80
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 022F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 022C
Signing time: Thu 03 Jul 2025 04:15:49 +0000
Manifest this update: Thu 03 Jul 2025 04:15:48 +0000
Manifest next update: Sat 05 Jul 2025 04:15:48 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: 9kkR/su62OzyfkVRiTBj4bTzCZxfbUqEQQpMOqvxZ+Q=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 559 (0x22f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Jul 3 04:15:48 2025 GMT
Not After : Jul 5 04:15:48 2025 GMT
Subject: CN=686603f5-2bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:c6:7a:dd:3d:90:ee:ee:42:8d:cd:ba:f8:
e7:b7:ff:47:36:a8:b0:ee:55:5f:e7:4c:f4:db:70:
b3:8a:6b:f6:49:59:fb:00:b2:a9:98:90:5f:b3:de:
a3:02:db:e8:88:c5:9c:5b:45:05:50:7f:e7:81:73:
a0:93:35:3a:49:d7:08:00:bc:47:b1:8e:1b:bc:ab:
34:0f:d0:26:60:ac:ad:3c:22:a3:81:c6:54:28:3a:
24:5e:a1:7c:29:95:79:90:d3:41:e7:3c:1d:55:9f:
c2:61:68:36:80:f4:2d:76:20:5e:a3:cf:73:0d:48:
a4:4c:dd:09:fe:36:19:12:fe:64:e0:23:9d:d4:4c:
98:fe:c9:ae:b7:49:3b:5c:60:a8:01:0e:37:fa:6d:
ef:56:c5:3d:fc:ea:22:27:40:61:04:bf:eb:40:bb:
74:18:1e:93:e4:e7:25:92:43:90:8a:d1:7a:41:0c:
e0:f6:96:c3:07:3d:29:0c:8a:eb:cb:10:d0:37:9a:
9f:8a:11:51:be:16:83:b2:b3:80:85:7a:37:9e:a9:
f0:7d:97:5f:e8:60:dc:a7:31:27:7c:7a:39:e1:7e:
c7:cb:d9:ad:69:a8:fc:29:e6:b2:f3:ff:f9:b7:74:
24:68:bc:e8:4b:08:b2:d3:46:5d:53:58:f1:a8:d6:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:91:71:DB:20:4E:4F:D3:13:CB:E4:5D:FA:FC:25:D4:EE:60:80
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6a:07:47:70:76:3b:88:ef:ca:4c:24:e2:42:3f:41:06:3a:
68:a2:62:ab:4b:30:c4:d6:38:6c:fc:31:42:8c:67:71:f2:61:
5c:ca:d8:72:2a:0e:3f:4b:13:6c:d5:69:e7:fb:cc:39:bb:36:
22:93:7d:41:9f:b1:f1:d6:fc:61:06:23:2f:02:3c:6a:91:c4:
43:8b:b2:45:57:83:92:6b:70:84:0a:c7:26:b1:5a:2f:92:32:
72:eb:21:3d:25:65:39:c1:a6:13:9f:9a:8f:19:3b:df:6c:e2:
93:19:8f:02:f8:45:af:5f:f6:18:cb:b3:5a:7b:dc:5b:6d:76:
27:87:b4:5e:f9:11:02:2d:ee:e1:9a:a4:b3:80:de:a2:b8:da:
ee:64:ab:a2:be:84:70:21:3f:49:77:e8:74:ae:8c:6d:01:6e:
c1:93:d2:2f:b2:4b:f1:c5:dd:07:a0:99:20:9b:ac:a6:f5:67:
31:5b:a9:24:f1:d7:f8:e8:f7:a7:e0:b6:a7:24:63:e7:18:ab:
5d:da:9f:2d:f9:b4:b7:9a:ff:3a:d6:da:f2:08:5b:95:1d:fc:
a2:52:95:41:a7:d3:ee:27:59:cd:b1:8d:1f:c2:92:5a:3f:6b:
2e:9c:48:03:2d:e9:3f:57:e8:68:3e:d0:d9:35:14:1d:f8:9c:
f3:eb:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:49:53 2025 by rpki-client