Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: y3NFhvNmVqWvnLaskJIHrmGxBWb+dBniAsnWJZjCCGg=
Subject key identifier: 0F:23:65:68:C8:ED:0B:A8:50:AD:82:4A:DF:FB:1F:B5:8F:3C:85:2F
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 01F5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 01F5
Signing time: Sat 23 Aug 2025 04:27:28 +0000
Manifest this update: Sat 23 Aug 2025 04:27:28 +0000
Manifest next update: Mon 25 Aug 2025 04:27:28 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: sYoAWq+n6NHQA5nhz8b9815UJBdrBL5lbZus7U60hZs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Aug 23 04:27:28 2025 GMT
Not After : Aug 25 04:27:28 2025 GMT
Subject: CN=68a94330-da4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:84:16:10:3f:cc:a9:62:17:b6:c9:1c:08:
2e:65:24:d5:5e:03:3f:a7:e0:9e:3d:6b:51:e0:38:
85:ee:69:58:b1:c8:e4:41:d2:9d:2d:89:11:b8:84:
3b:78:eb:e6:46:7b:79:ff:be:29:ef:6d:ec:76:91:
39:58:4f:bf:a1:ea:de:5a:7a:f5:e7:54:2a:d2:8a:
de:5e:8c:60:8f:e2:db:f9:06:0c:8b:c9:0b:b2:0c:
97:17:22:15:7b:83:d8:1e:01:02:03:7e:6c:dc:6c:
8e:a1:a5:82:f8:5d:5a:58:42:5a:fa:cb:8d:b6:66:
1a:4a:f5:f3:a2:dc:ac:8f:15:83:b9:7d:41:b8:0c:
64:01:52:9f:9f:21:d0:3d:0d:a4:39:7b:ef:e0:74:
a0:c3:f1:fb:ec:ae:4c:c4:bf:6c:ce:5a:e3:9b:2d:
d3:83:f2:f1:5e:de:f8:e3:cc:03:93:53:55:c9:63:
c9:52:5d:b9:30:0b:8d:28:d1:19:f2:90:53:18:6d:
5b:94:44:71:a4:de:5c:74:8b:ee:8e:86:31:9f:cb:
eb:2c:55:2a:6a:7a:39:5f:5a:59:80:0e:57:7d:26:
29:4e:00:f5:b9:bb:c0:8a:2d:ee:2f:0e:12:ec:20:
82:3b:2c:2c:70:a0:69:4c:6d:83:bc:b7:3e:ac:47:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:65:68:C8:ED:0B:A8:50:AD:82:4A:DF:FB:1F:B5:8F:3C:85:2F
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:56:28:4b:ac:3e:65:fc:0b:32:c2:66:c1:18:43:bf:d8:12:
db:ca:c6:b1:21:2f:f1:3f:17:89:83:77:de:18:8d:da:10:5f:
0e:c1:82:91:44:52:cd:58:2d:b1:13:99:20:34:58:68:ff:75:
cb:0d:8b:c7:f2:8f:c7:97:53:d2:eb:34:ab:9d:6e:dd:3a:65:
03:8d:b6:50:43:99:c1:8f:ce:8a:97:05:55:3a:fe:8e:d7:01:
02:31:b5:d1:ac:7a:14:26:b4:9e:ed:c8:6e:e1:16:ac:02:fd:
1c:4d:65:23:1c:68:2c:bb:6d:0f:a6:8b:90:3e:83:04:a7:49:
6f:a9:d5:0a:12:11:c7:8d:58:ed:90:14:a4:e9:f9:94:50:48:
58:17:a0:f1:23:51:b9:f7:89:6e:0a:f6:38:b0:a9:46:91:ea:
71:9f:d4:db:12:53:f9:d0:81:14:85:dc:63:64:fe:1c:ba:b9:
60:e7:11:33:f3:38:f8:27:50:c4:f1:cf:7b:cb:a5:77:89:36:
f0:86:c7:32:1b:36:ab:74:af:c5:d7:4a:bd:3d:97:78:5a:a1:
30:0c:c0:06:42:38:8b:57:a7:77:ad:48:ab:d9:14:c6:8c:88:
9b:9a:09:57:55:fa:93:19:aa:55:b7:37:76:1a:29:96:c3:4b:
85:dd:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:15:01 2025 by rpki-client