Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: +VvaOP31blpQCqL29ViW2u3c+jUAp3R252eKcFwBNeA=
Subject key identifier: 70:2A:C9:8E:A0:6B:7B:19:80:72:AE:A8:48:79:85:16:04:AE:85:22
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 062F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 062F
Signing time: Sat 23 Aug 2025 02:19:54 +0000
Manifest this update: Sat 23 Aug 2025 02:19:53 +0000
Manifest next update: Mon 25 Aug 2025 02:19:53 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: Oc4qdEIoZBgiVGYKQQktQ/Blc+D99O3U/WGVTHiv0+Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1583 (0x62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Aug 23 02:19:53 2025 GMT
Not After : Aug 25 02:19:53 2025 GMT
Subject: CN=68a92549-da8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:e3:e1:b1:41:2d:50:6c:cb:e4:4b:1a:01:
d0:19:60:63:fa:fa:40:27:64:3b:85:44:04:9d:31:
9a:9e:50:0f:4e:62:17:d9:8d:63:64:bb:c5:f2:1c:
4b:af:0b:fd:1c:61:6e:5b:74:c4:81:d0:15:b1:f9:
d4:84:c4:55:c1:c8:6f:55:40:6b:be:1e:da:c6:1c:
e9:a3:32:5c:a0:71:b0:99:a5:5b:56:34:63:e5:68:
24:e5:a9:cb:43:48:54:af:35:16:9a:79:66:1c:6e:
c5:d9:a7:9c:61:40:c7:38:70:61:32:a1:ef:00:6f:
1a:38:5b:08:65:4b:62:d0:cf:e4:2e:ca:3d:7a:fa:
81:ea:8f:28:b8:58:9b:25:bb:16:2d:8c:99:11:7a:
01:ae:ae:36:d6:dc:34:8a:0d:e6:e2:ef:e6:63:ae:
ce:c3:20:04:9d:a4:e1:15:4b:22:45:58:45:39:58:
3b:e5:08:d8:ff:94:f9:5c:aa:0f:3e:19:fb:11:92:
2f:fc:a1:bb:5f:e3:b7:6a:40:6b:b3:1e:f4:3c:36:
e2:6f:dd:44:66:cd:c1:27:c6:e6:de:84:a3:67:46:
88:2c:d6:e2:e6:4e:da:89:e6:d6:56:c1:93:42:97:
3f:ec:89:c0:b0:50:a1:a1:77:fd:32:01:b4:f5:f4:
dc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:C9:8E:A0:6B:7B:19:80:72:AE:A8:48:79:85:16:04:AE:85:22
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
42:2f:1f:62:7d:1d:4f:0f:ea:9c:e7:33:cb:1b:4d:11:2c:1f:
4a:75:fc:77:7d:ae:17:87:e8:9c:46:e7:88:20:5c:41:e8:fb:
59:5b:78:c4:70:68:a6:1c:53:5b:5e:24:d6:7b:5d:d9:4a:32:
8c:df:94:9c:53:a7:14:de:61:0c:63:1b:c0:38:97:88:ef:21:
fd:7a:a9:6b:22:9a:38:d4:2b:f9:c9:52:68:8c:9b:a2:ea:34:
84:df:be:0b:57:47:2e:85:ea:19:28:3e:17:d2:72:98:4c:db:
17:ac:2e:15:6d:ee:54:3e:ef:26:d7:58:08:72:1c:78:6f:8b:
a2:93:4c:1f:7d:f7:b3:4f:ae:0a:8c:cd:9c:1a:0e:e3:e4:6d:
01:b3:71:80:e0:92:26:d8:57:fc:00:80:5a:79:7a:4d:72:84:
23:6a:59:cb:76:07:11:3e:34:91:f0:3c:d1:e6:ec:1c:8b:f6:
e8:f5:df:8a:5b:a7:fe:ae:62:09:74:fe:e1:5e:4b:e3:fb:7c:
48:49:04:f2:9e:63:07:5d:fe:fe:ac:f3:b9:b3:df:12:89:ae:
b2:1a:0e:4c:37:be:96:70:60:ad:0e:d0:6b:96:32:0e:be:a0:
92:80:6b:93:13:55:a3:83:e0:b5:1f:2b:be:49:ae:45:41:1a:
ff:f9:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:29 2025 by rpki-client