Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File: FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier: jNZFR/+jRsxgKFhYl80xqogVNTRYTAJuAv/PAmKMnwA=
Subject key identifier: E4:8E:22:9C:03:E8:ED:21:BE:26:41:C3:50:46:B6:0C:7B:C1:44:76
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer: /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial: 07AA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number: 07A8
Signing time: Thu 03 Jul 2025 01:51:05 +0000
Manifest this update: Thu 03 Jul 2025 01:51:05 +0000
Manifest next update: Sat 05 Jul 2025 01:51:05 +0000
Files and hashes: 1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: cIeoLJq5mKv6lMAm4ZZkEdxsBUgzvyCX+WitAV9jBvc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 01:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1962 (0x7aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3683ABDAF, serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Validity
Not Before: Jul 3 01:51:05 2025 GMT
Not After : Jul 5 01:51:05 2025 GMT
Subject: CN=6865e209-6fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:0d:eb:cc:28:43:b1:66:f8:64:08:77:33:
40:b2:09:5f:51:54:e8:45:77:46:39:9c:69:0e:80:
ef:36:45:69:5e:91:e4:b7:fa:21:f4:4c:b9:c0:a2:
33:76:b0:4a:a6:ec:07:e4:0d:ae:6e:d4:c4:1f:e1:
70:0f:a2:e5:80:1e:bc:25:fb:29:42:fa:d6:9c:bb:
8b:73:11:4d:da:8a:26:cf:35:6a:4f:e1:de:05:6a:
87:02:3a:40:bc:1b:12:b9:5b:3c:c7:ef:04:b8:d3:
4f:31:e7:6f:26:15:20:e6:f3:61:c0:51:e5:64:0c:
5b:c0:d9:18:09:48:96:0f:9c:b1:46:c9:6d:d5:0e:
67:7a:e2:90:d2:d6:8f:a9:47:ab:3b:e8:00:1a:5e:
09:ff:ed:8a:01:7a:a6:13:89:ae:9e:32:6a:64:f3:
a2:35:27:82:c1:6f:c4:49:31:58:f2:aa:74:c2:dd:
3d:96:42:3b:91:7e:ed:af:0c:16:01:34:79:e9:1e:
5e:e0:da:48:f7:44:26:99:21:61:c8:36:dc:b0:6f:
6c:f3:e6:6c:eb:6c:b3:cb:f2:96:8e:64:5a:3f:b5:
fe:a6:27:31:5e:a5:c1:55:f6:be:b3:c8:ad:74:24:
ff:43:08:37:98:95:c3:d7:53:b4:ed:04:b6:2e:dc:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8E:22:9C:03:E8:ED:21:BE:26:41:C3:50:46:B6:0C:7B:C1:44:76
X509v3 Authority Key Identifier:
keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3c:6d:1e:5d:fe:af:0e:74:e0:0f:57:70:31:52:09:31:3d:
64:08:05:ac:76:89:1e:a6:99:3f:33:e0:96:c2:83:89:84:a2:
fb:14:0f:99:c4:cc:0f:f8:47:76:ac:d3:08:62:ec:87:7a:f7:
8a:85:07:c6:f8:6b:fb:77:50:16:d5:b8:5d:e3:77:6f:16:26:
77:78:a1:d4:30:89:8d:8a:65:17:20:5d:42:e4:81:92:3a:ba:
1e:63:d8:0f:ef:07:b1:a4:f2:f0:a3:78:6c:20:46:ac:3d:19:
03:a9:51:7b:cf:0b:a7:fd:c6:19:ba:c0:9a:4e:55:a8:93:1f:
3d:c2:17:5f:e6:96:b7:83:f7:da:11:e6:71:49:88:12:32:db:
0a:8c:97:ab:12:d9:72:5e:a8:57:4e:f3:26:36:c6:66:ab:3d:
16:89:c1:97:fe:bc:f8:4d:98:23:f5:3e:32:df:b1:65:72:67:
89:ee:11:f5:26:31:62:e4:51:6f:e1:95:81:5e:93:54:34:0e:
40:7a:d0:8c:7e:0b:41:95:e8:4d:66:41:43:2a:fc:ca:39:c5:
a7:13:87:01:55:14:fa:3e:5b:2d:56:b4:c0:cf:24:e3:6f:1e:
86:d1:d7:d8:68:2b:d0:86:cc:0b:35:46:2a:4c:b2:ac:66:ab:
97:fa:44:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:23:26 2025 by rpki-client