
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: 9GENE/COqZwauvOafHCLOfOH0TV8xVTSdCyhGvCTUs0=
Subject key identifier: 01:AB:50:11:13:88:FE:FF:81:2A:9A:B7:EF:F6:5B:E0:75:6E:75:B9
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 01B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 01B1
Signing time: Wed 02 Jul 2025 04:33:26 +0000
Manifest this update: Wed 02 Jul 2025 04:33:25 +0000
Manifest next update: Fri 04 Jul 2025 04:33:25 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: V/US5ZB7IMJ9sj+FzECFhPQxJ87doiWI60RRTHx6sP0=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 04:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Validity
Not Before: Jul 2 04:33:25 2025 GMT
Not After : Jul 4 04:33:25 2025 GMT
Subject: CN=6864b696-14b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:41:85:c7:e4:a1:6b:b7:63:ed:28:04:70:06:
6d:56:ee:b0:e3:c0:26:13:eb:b2:ba:c5:60:13:9c:
08:60:66:46:44:70:41:4c:80:56:4c:78:ce:8a:81:
b2:c0:4c:62:34:5b:1f:9f:46:24:b4:a0:9a:a4:66:
1a:86:67:e3:cc:e8:e9:d8:3b:f1:58:79:4e:b9:bc:
a5:cd:5f:13:0a:c2:7b:9d:10:71:14:16:70:45:f4:
40:e3:1e:e5:27:bd:b8:88:c4:de:58:17:c5:25:63:
44:d4:1a:03:90:b2:b8:1b:4c:30:e2:c2:05:a0:c5:
4a:81:1f:c2:aa:60:56:c4:b2:88:7d:52:af:7a:0b:
b5:54:aa:33:f0:91:2b:1c:94:99:eb:68:6e:09:d6:
05:ee:95:57:e6:94:e9:b5:b1:90:f2:e8:97:5d:15:
d3:99:fd:0a:ca:58:52:20:24:a5:2e:cf:20:44:6c:
7e:bc:ce:e1:76:33:ba:f4:22:e3:ad:a3:96:9f:dd:
72:23:e1:0a:14:65:96:e4:c0:cc:7e:76:7a:30:7f:
61:ec:ad:d3:0b:0c:b5:03:ea:1b:20:e5:04:9b:2e:
95:e1:73:cb:f8:27:ab:07:31:8d:4a:96:f5:2b:a2:
10:d6:41:fe:13:74:55:cf:5c:ad:e7:27:85:a3:ab:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:AB:50:11:13:88:FE:FF:81:2A:9A:B7:EF:F6:5B:E0:75:6E:75:B9
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:1f:8e:16:cc:6d:23:62:7d:0f:2f:79:6e:8d:72:e7:82:
b7:a4:38:f7:68:3f:40:c4:9b:6c:87:54:82:5b:df:aa:e8:63:
62:0a:db:fa:58:2e:14:78:12:71:98:98:cf:8d:f6:e0:5f:96:
e2:2c:00:e0:e7:a2:08:57:6a:21:4c:7d:27:d6:cf:17:21:bd:
0d:c0:31:bd:ba:a4:82:17:a6:e5:54:59:5e:7a:e7:1b:c7:41:
ea:a9:bb:0e:91:48:b1:07:54:25:fe:77:ba:06:be:a1:95:cb:
3e:e7:2f:5b:9e:5a:9b:b1:19:30:e1:26:c1:5a:16:eb:ad:5a:
c5:5c:a3:df:37:70:e6:bd:10:e9:3d:76:ae:7f:c3:66:90:51:
b0:45:6d:f2:e9:f2:f2:5e:51:4d:3f:f8:e6:e0:e0:64:af:73:
93:2e:3e:39:a8:f0:e0:3e:8a:5e:c4:0f:e6:c1:b6:fe:24:c9:
1f:a1:e1:50:25:75:19:2a:25:f8:9b:a7:bc:8d:e6:4b:a0:e7:
7c:0a:40:90:66:7e:65:61:d8:18:15:21:a8:e6:3e:5f:4c:b0:
b8:d3:81:7a:82:3e:e9:71:bf:f7:16:9a:bb:61:c8:ce:d6:97:
90:a1:9c:9a:71:e9:8b:57:66:d7:c3:21:5b:df:48:ac:7a:c8:
59:e7:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:35:29 2025 by rpki-client