Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File: SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier: 3WcsceGchWXn5X654iNZD8UzFxGuyaTGAggIvpTUsbU=
Subject key identifier: 65:7F:E5:DD:68:08:75:F4:D7:68:5E:27:86:3F:EA:4C:89:DB:25:54
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer: /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial: 041F
Authority info access: rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number: 041D
Signing time: Mon 20 Oct 2025 03:12:45 +0000
Manifest this update: Mon 20 Oct 2025 03:12:45 +0000
Manifest next update: Wed 22 Oct 2025 03:12:45 +0000
Files and hashes: 1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: mw2NR5LPdUpeLf1Z/Ti6PLqN8HqJ4kncXwUgreD/SPE=)
2: D17F6EEC902411ED9E7767D2F1222468.roa (hash: JO/7laMxt+UsHBnYsLId8OjP3XjZJzj6vEh7zTGEoAg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1055 (0x41f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Validity
Not Before: Oct 20 03:12:45 2025 GMT
Not After : Oct 22 03:12:45 2025 GMT
Subject: CN=68f5a8ad-52fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:ae:86:03:3c:e4:b5:a5:20:7e:99:1c:49:
7a:4c:54:48:c6:37:bf:15:8c:aa:d3:ba:87:a6:d6:
0c:a6:43:e3:14:8e:94:7e:06:37:9c:b9:62:69:c6:
62:fd:c1:d4:7d:e7:29:14:b9:03:95:ff:5a:5d:90:
0c:7f:3f:58:0a:e5:b4:83:bc:01:7b:ae:b7:7a:b6:
99:2c:f7:dd:40:d5:ce:7c:ab:31:ab:25:e5:25:c8:
0e:96:83:7f:96:17:c1:30:bf:b1:e8:bd:67:53:41:
d7:be:b0:dd:78:f5:ed:49:d4:3b:14:7c:fa:cb:1d:
2a:c5:b8:e8:46:54:43:3b:2e:64:c5:8b:f7:e9:36:
48:43:4e:ff:90:8b:33:b8:81:f8:62:08:29:fc:1f:
17:f5:53:d1:65:9e:62:e1:79:3d:ff:0f:56:75:52:
61:41:1a:81:99:bd:ac:ec:85:09:81:0d:ca:fd:32:
b8:c5:34:46:57:6a:c2:c8:2a:14:45:78:a1:88:35:
3f:1f:45:a1:63:bb:65:63:2a:dc:c8:fa:b5:4c:17:
3a:81:d8:a3:c6:df:89:3c:fe:4d:48:64:c0:af:be:
5a:c8:e0:98:b7:7a:0e:ca:d0:5a:7c:b9:25:ea:f1:
d2:a1:d1:bd:5f:d8:b8:a3:9e:a0:0e:7d:83:d0:84:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:E5:DD:68:08:75:F4:D7:68:5E:27:86:3F:EA:4C:89:DB:25:54
X509v3 Authority Key Identifier:
keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:ef:87:06:33:fb:8e:81:9e:36:09:97:83:07:c1:c4:ac:25:
9c:62:79:f0:52:60:d2:81:4b:a8:6a:ed:13:28:3c:c7:85:dc:
cf:97:83:6d:c5:9d:4f:a0:16:1d:a7:cb:cc:07:ed:58:f6:11:
fb:1f:9a:9a:ec:f3:69:2e:2c:62:22:32:0a:ac:8f:89:3f:fd:
e0:bc:c7:35:57:87:12:86:67:e8:49:55:ab:ca:1e:f0:fb:f8:
37:d5:9d:93:2e:db:a8:12:ef:28:22:18:3f:4e:c7:50:7d:a9:
bb:9d:56:96:c2:b4:82:e4:09:1c:95:c4:9d:84:3f:a6:a3:ca:
bd:54:29:a6:e6:01:7c:41:a0:76:17:1f:90:5e:f2:1e:9b:cd:
d2:ee:9a:e5:78:42:86:1d:ad:15:4c:44:52:a2:19:e6:bf:be:
02:91:02:18:14:15:8f:14:9d:b6:43:71:91:52:62:64:fc:08:
e6:09:78:6b:7d:72:fc:ef:0d:d5:8a:a3:cf:e4:9b:09:6f:ac:
d2:73:46:93:48:96:e8:84:38:de:b1:e3:26:62:58:b2:5f:d5:
c3:45:ff:b7:14:8c:1b:92:b0:dd:6c:f6:82:25:a4:24:e1:37:
08:bf:e6:3e:79:ff:32:04:77:47:5e:e0:eb:24:7c:63:3a:78:
58:a7:62:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:29 2025 by rpki-client