Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: hmu+tK3z6GJpT1LO+CtwBaJ3MfaeOAWT0UCdBN03Zpc=
Subject key identifier: 93:E5:F5:35:43:89:A2:F5:EC:34:B3:72:A8:1F:7D:BC:5F:AC:22:43
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0E5B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0E5B
Signing time: Sat 23 Aug 2025 00:58:32 +0000
Manifest this update: Sat 23 Aug 2025 00:58:31 +0000
Manifest next update: Mon 25 Aug 2025 00:58:31 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: 9+AaMMS11eUEDmYOy2cgSjgeaa193cO8t4iTle3alqE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3675 (0xe5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Validity
Not Before: Aug 23 00:58:31 2025 GMT
Not After : Aug 25 00:58:31 2025 GMT
Subject: CN=68a91238-b703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:6b:2a:2d:ff:57:7f:7d:e4:0c:95:79:a9:
d5:f3:91:3a:a7:b2:66:48:b7:63:df:02:2e:46:bc:
59:cf:78:28:35:08:01:a9:9b:8d:80:30:b0:5a:e8:
b3:fb:b0:ce:f5:75:94:de:f5:b6:e7:94:2f:db:95:
18:d1:9c:26:04:0a:db:1b:5b:dc:c0:a3:dd:84:b9:
98:8e:66:c7:75:f5:47:c7:6e:b4:ea:55:15:61:cf:
f1:d2:b4:ab:00:2b:e4:5a:f7:f9:c3:9d:24:19:7b:
f7:14:33:45:ca:f7:34:c7:30:57:2b:e3:dc:07:4a:
1b:e6:5d:77:73:6e:42:1a:b1:21:ea:f6:c3:3b:4e:
f6:d3:96:a5:51:d4:a1:16:42:4b:b3:32:2c:9c:62:
3a:08:0d:16:d2:80:08:96:eb:c5:d2:6f:dd:65:5f:
23:6f:5b:6b:9a:7f:0c:3b:94:07:37:ea:78:51:da:
31:eb:0e:e8:75:16:5f:d1:02:9e:f3:ab:ce:34:77:
b6:9f:de:5b:01:c5:0e:57:23:71:bd:ff:f4:a4:dd:
e0:c0:17:4b:e4:12:35:17:f6:1b:34:39:1d:06:c8:
d7:31:c1:31:1e:a5:14:51:63:c5:d3:e8:0f:d4:f2:
10:4a:3a:82:73:03:72:56:05:a2:73:57:c7:20:63:
f5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E5:F5:35:43:89:A2:F5:EC:34:B3:72:A8:1F:7D:BC:5F:AC:22:43
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:85:b1:5a:02:6c:a7:e0:b2:87:b3:56:5d:00:da:6c:71:02:
91:89:c1:da:f5:fc:21:7f:25:e4:b0:81:7e:51:15:0f:a0:ef:
bc:33:44:8d:cd:40:ca:08:41:1d:56:d2:49:06:4f:22:f7:9c:
e8:de:32:47:f4:49:d9:cb:01:76:33:5b:82:3a:84:74:53:04:
ae:a8:8c:fd:ef:b4:d2:26:48:e6:d0:62:1d:42:ca:46:5a:71:
87:60:d9:ca:8f:70:a7:f5:b2:bb:1d:30:c3:95:3e:47:5f:1c:
2e:01:08:97:ea:88:c7:c9:2d:13:eb:ef:96:46:5c:2f:ed:aa:
a5:0b:f0:57:af:6f:05:f0:4a:20:93:65:9a:04:03:3b:9e:71:
cf:30:14:51:3b:7d:d8:06:09:31:c9:1a:cb:b6:08:61:bf:29:
66:4a:6d:2a:8c:df:bd:3a:7d:b3:65:d5:9c:19:d0:da:29:ef:
b5:d8:1e:40:5d:6f:62:3d:3e:f0:b5:f2:ca:0c:ab:15:cd:6d:
55:16:06:3c:fc:a9:f9:92:ef:24:53:3c:fa:aa:45:19:9e:53:
82:e2:c2:c7:7b:a4:9f:15:ac:8f:7f:97:7a:a1:f9:27:13:cf:
fc:72:d7:18:b5:8c:0a:e7:38:88:72:47:45:9a:b4:18:bc:a8:
f2:69:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:19:39 2025 by rpki-client