Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
File: 8hDREntBqAZ-iuVwf0PSLggdxmU.mft (raw, json)
Hash identifier: xJK6dsSUd6R3tDwfxAtcqVXkJqJMNqcBifhyIyhXKag=
Subject key identifier: 10:60:AB:D0:1C:C5:62:4C:9E:22:20:74:41:EB:7C:F6:79:1C:44:54
Authority key identifier: F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
Certificate issuer: /CN=F36828EEAF/serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Certificate serial: 0158
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
Manifest number: 0157
Signing time: Tue 01 Jul 2025 04:47:46 +0000
Manifest this update: Tue 01 Jul 2025 04:47:45 +0000
Manifest next update: Thu 03 Jul 2025 04:47:45 +0000
Files and hashes: 1: 8hDREntBqAZ-iuVwf0PSLggdxmU.crl (hash: /w8dykBuCCKLGaK4UE+bkCkikx4NhKOweb+l+NpucSw=)
2: 43556232564A11EF9942095B762E951A.roa (hash: k0gU6QmfsEjV/HHlrAtYyJc8G8bTw7CikYjZpypK4Wk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 04:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 344 (0x158)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36828EEAF, serialNumber=F210D1127B41A8067E8AE5707F43D22E081DC665
Validity
Not Before: Jul 1 04:47:45 2025 GMT
Not After : Jul 3 04:47:45 2025 GMT
Subject: CN=68636872-2a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:85:be:b9:1b:27:1c:c2:ae:fe:3a:d0:0a:
4d:c6:18:ea:e7:62:2d:85:4e:8d:b9:e6:d3:91:35:
8c:a6:a6:54:03:23:b8:85:6e:85:4a:57:e7:33:4f:
1d:05:19:df:b6:10:65:4f:90:97:86:87:ff:39:b4:
db:32:07:73:92:01:01:1f:48:f7:08:49:9e:7e:a0:
65:ee:b5:6b:3d:51:71:9a:e0:16:2d:59:f8:ca:4d:
c3:2e:12:0a:8a:61:2c:79:1f:5a:ba:7b:06:c4:e8:
b2:03:94:0d:66:79:9f:b5:62:af:fd:b6:02:aa:5f:
84:77:75:9d:f1:bc:fb:19:a9:6a:0e:ab:7c:cf:ef:
c8:7c:29:56:48:a8:47:d6:26:60:65:c1:52:54:79:
61:7a:52:50:e5:87:4e:c7:64:f2:f2:6b:92:d2:88:
51:02:60:2f:84:8a:43:83:a7:de:56:56:75:b6:95:
d4:40:67:b9:db:cf:64:99:84:a1:e3:ec:ea:1f:22:
01:38:7b:fc:62:49:5c:7d:d0:47:3c:4b:c0:26:62:
fe:22:56:76:27:52:f9:b0:08:a8:bb:4a:17:75:e1:
8a:03:44:24:84:60:ee:96:b2:95:15:a0:40:d8:25:
bd:24:11:b5:e8:a6:91:67:99:6e:d7:ee:71:cf:93:
cc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:AB:D0:1C:C5:62:4C:9E:22:20:74:41:EB:7C:F6:79:1C:44:54
X509v3 Authority Key Identifier:
keyid:F2:10:D1:12:7B:41:A8:06:7E:8A:E5:70:7F:43:D2:2E:08:1D:C6:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8hDREntBqAZ-iuVwf0PSLggdxmU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36828EE/939823AA53F311EF8EE58446762E951A/8hDREntBqAZ-iuVwf0PSLggdxmU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e1:ce:9e:83:f6:c6:8a:37:33:2b:37:72:fe:dc:fc:f2:69:
02:79:c9:27:14:36:96:3e:b6:d6:a6:b4:1e:fd:c9:1e:40:fe:
01:51:a4:6b:71:0c:59:3e:63:71:38:3f:3c:e9:1f:f0:3c:36:
73:4f:ba:cf:06:d5:68:9f:9f:b8:f5:fd:a9:5f:2d:52:0b:11:
a9:0e:fe:4a:82:b9:70:5b:78:01:89:e0:f3:40:51:b5:e1:ba:
91:99:d8:bb:39:7a:f3:63:98:87:33:35:71:6b:5f:88:77:16:
e6:fd:ba:c8:f2:2a:85:6a:75:5f:31:13:94:fb:98:ff:d8:0e:
c4:79:0a:49:dd:43:69:ea:2a:fc:e9:fa:9d:30:c3:aa:62:02:
fc:c8:c3:30:da:91:6c:af:bf:d6:03:56:c1:ca:20:de:a0:d6:
e3:40:b7:bf:a0:86:5e:34:7d:93:b1:59:7b:8e:09:08:0b:fb:
44:ab:e1:80:be:ad:f6:75:5a:78:f1:15:d5:a2:15:df:c3:93:
fa:41:71:c7:b6:c5:5e:7b:2a:dc:6f:a8:0e:ef:7d:60:9f:fa:
b6:ed:2d:8d:09:b2:2a:39:d3:20:70:bf:b2:15:ff:ca:ae:91:
7b:3e:41:de:54:4f:6b:6d:69:d2:a0:c9:fb:0a:2f:61:b0:51:
f0:67:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:13:16 2025 by rpki-client