Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File: lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier: YUKwQ8QRmpW0ozan897duUtMnUUcdykCw9UIPujzj1g=
Subject key identifier: 4B:69:62:2F:73:E2:80:2E:84:14:B1:58:34:34:E8:1C:FD:F7:5C:F9
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer: /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial: 08DF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number: 08DB
Signing time: Tue 01 Jul 2025 01:35:12 +0000
Manifest this update: Tue 01 Jul 2025 01:35:11 +0000
Manifest next update: Thu 03 Jul 2025 01:35:11 +0000
Files and hashes: 1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: soqAN5S0up2tdtLyTRB/uUPiQrIaAwp1vNjdLbK6X9E=)
2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271 (0x8df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Validity
Not Before: Jul 1 01:35:11 2025 GMT
Not After : Jul 3 01:35:11 2025 GMT
Subject: CN=68633b50-f9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:76:51:01:73:66:fd:08:4c:9f:8a:55:af:
d1:28:aa:56:fc:61:15:80:40:e7:0a:1b:58:09:e7:
cc:31:0a:77:70:52:1b:b4:de:8f:6a:9d:80:d3:69:
61:1c:fa:a1:44:25:21:14:8f:eb:56:45:2e:6c:11:
b8:be:f4:46:3c:97:4f:47:2d:2d:e7:40:78:70:34:
7d:2c:82:f1:be:6a:f5:80:35:02:45:04:94:7d:37:
31:39:16:d3:ac:1b:43:c9:06:02:66:26:7d:53:05:
7c:49:77:e8:3e:bd:e0:30:6d:21:1b:26:18:8a:28:
47:38:ed:05:5b:62:9d:0e:c3:d7:c6:9d:ea:43:61:
b2:51:60:43:ba:cc:80:af:b6:1f:bc:e9:32:e1:34:
2f:d8:5b:df:66:d6:d7:11:5c:95:94:cb:d9:bb:e3:
1d:43:b9:ce:fa:cb:50:ad:84:d8:f7:1e:7e:4a:be:
da:1d:54:49:64:89:8c:49:96:37:74:d2:41:98:08:
fb:78:83:d1:57:f7:ee:d7:ee:69:54:f2:01:22:8b:
a6:7a:b7:3b:2b:99:34:44:a9:c5:57:ed:8f:36:56:
70:58:54:35:77:9d:d5:0c:54:35:58:cf:1c:d8:18:
8b:0b:6c:9f:34:0f:df:9d:60:47:77:77:8b:fa:dd:
e7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:69:62:2F:73:E2:80:2E:84:14:B1:58:34:34:E8:1C:FD:F7:5C:F9
X509v3 Authority Key Identifier:
keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4c:61:3e:8c:1d:e3:db:31:bc:53:d2:dd:29:33:7b:a6:7c:
4a:7a:71:49:ad:ab:9c:5f:dc:b1:bd:18:bd:66:a9:13:bf:f7:
9a:1a:1a:40:0d:55:18:71:6e:f9:d0:8e:88:5b:c8:43:d0:ae:
ab:f2:61:c4:bb:4e:77:62:91:90:b2:36:f0:ca:dc:33:1a:87:
6d:75:8b:37:96:95:cf:e6:16:19:ba:5f:98:3f:a2:a7:36:50:
85:a0:cf:96:57:57:fd:1b:cf:c4:3e:92:b7:60:24:08:f8:45:
6b:1c:65:f3:89:f0:99:5f:ee:7b:25:0b:fe:07:8a:b1:91:b2:
cc:86:1b:32:35:22:1b:cf:ad:c9:42:5a:4b:ae:4e:cd:78:be:
8c:ea:bd:ef:3b:90:dd:63:e1:c4:22:e8:e7:39:70:7e:be:22:
86:eb:cc:5d:90:d8:87:13:c7:8e:9d:25:35:0e:9b:3f:bb:41:
72:37:a5:dd:37:30:c7:64:7a:29:5f:b6:1d:c8:51:1e:fa:a5:
cf:57:a3:2e:68:ea:19:78:ca:47:67:20:54:3d:3f:bd:e0:be:
8a:de:66:81:7b:4e:65:27:0d:58:aa:0a:7c:59:2b:30:a7:6e:
87:00:99:ae:3b:29:16:36:00:82:03:65:84:3f:6d:ea:5a:59:
bf:66:bd:e4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCN8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBRjExMC8GA1UEBRMoOTU0QUI4OEFFNDk0OEE5Qjc1MTc3REVFNjU3RkFC
NEU2RTBDNTc4QTAeFw0yNTA3MDEwMTM1MTFaFw0yNTA3MDMwMTM1MTFaMBgxFjAU
BgNVBAMTDTY4NjMzYjUwLWY5ZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9OnZRAXNm/QhMn4pVr9Eoqlb8YRWAQOcKG1gJ58wxCndwUhu03o9qnYDT
aWEc+qFEJSEUj+tWRS5sEbi+9EY8l09HLS3nQHhwNH0sgvG+avWANQJFBJR9NzE5
FtOsG0PJBgJmJn1TBXxJd+g+veAwbSEbJhiKKEc47QVbYp0Ow9fGnepDYbJRYEO6
zICvth+86TLhNC/YW99m1tcRXJWUy9m74x1Duc76y1CthNj3Hn5KvtodVElkiYxJ
ljd00kGYCPt4g9FX9+7X7mlU8gEii6Z6tzsrmTREqcVX7Y82VnBYVDV3ndUMVDVY
zxzYGIsLbJ80D9+dYEd3d4v63efLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUS2li
L3PigC6EFLFYNDToHP33XPkwHwYDVR0jBBgwFoAUlUq4iuSUipt1F33uZX+rTm4M
V4owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4QUVBMjI4L2xVcTRp
dVNVaXB0MUYzM3VaWC1yVG00TVY0by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xVcTRpdVNVaXB0MUYzM3VaWC1yVG00TVY0by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk1QzQvRDYwMzk5MDQ5MUVEMTFFOTg0MUQ1QTdERjhB
RUEyMjgvbFVxNGl1U1VpcHQxRjMzdVpYLXJUbTRNVjRvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkTGE+jB3j2zG8U9LdKTN7pnxKenFJ
raucX9yxvRi9ZqkTv/eaGhpADVUYcW750I6IW8hD0K6r8mHEu053YpGQsjbwytwz
GodtdYs3lpXP5hYZul+YP6KnNlCFoM+WV1f9G8/EPpK3YCQI+EVrHGXzifCZX+57
JQv+B4qxkbLMhhsyNSIbz63JQlpLrk7NeL6M6r3vO5DdY+HEIujnOXB+viKG68xd
kNiHE8eOnSU1Dps/u0FyN6XdNzDHZHopX7YdyFEe+qXPV6MuaOoZeMpHZyBUPT+9
4L6K3maBe05lJw1Yqgp8WSswp26HAJmuOykWNgCCA2WEP23qWlm/Zr3k
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:02:59 2025 by rpki-client