Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File: dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier: Olo5SsQ3v0R0R5NO097jMSq9ecflKsNcki0XkcfM4i4=
Subject key identifier: D9:43:6D:50:CB:07:7F:7F:E2:8D:79:7F:5C:CA:15:38:8E:FD:C5:10
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer: /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial: 0339
Authority info access: rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number: 0338
Signing time: Sat 23 Aug 2025 03:45:43 +0000
Manifest this update: Sat 23 Aug 2025 03:45:42 +0000
Manifest next update: Mon 25 Aug 2025 03:45:42 +0000
Files and hashes: 1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: naxfyLGbp3lrPvSlTA4waymMuY/mhMo6TrKB2xKP2as=)
2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 825 (0x339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Validity
Not Before: Aug 23 03:45:42 2025 GMT
Not After : Aug 25 03:45:42 2025 GMT
Subject: CN=68a93967-3417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5f:d3:e1:de:0a:a0:80:a6:e6:0f:3d:2e:eb:
97:d4:0e:76:50:b7:97:15:d5:98:17:22:05:40:37:
82:ea:05:20:69:03:e7:94:7b:27:16:1e:61:20:07:
74:a6:e4:c1:d6:04:dd:2c:85:f9:14:b0:89:41:5e:
25:1a:90:fa:9b:bc:94:9a:62:fe:16:bf:d1:10:7c:
96:31:68:12:3e:b6:b3:2c:43:f2:c3:5a:10:c9:9f:
94:2d:26:c7:14:08:ef:2b:96:cf:80:72:37:3f:e6:
6e:1d:f3:79:f0:a4:1f:cb:24:27:4d:aa:fa:52:18:
25:10:8c:38:c5:8e:04:ca:44:cd:12:81:a3:0d:2d:
61:25:cd:16:b9:4f:70:7d:5c:10:4c:5f:c4:a6:0f:
9a:e4:5e:7b:6e:77:e1:bc:62:42:ac:12:32:8b:7a:
3b:9d:e1:ca:59:96:ba:53:8b:39:30:75:22:35:c0:
ef:be:17:b2:72:e1:b7:da:8a:07:cc:5f:9f:17:ea:
bf:0e:af:4f:63:15:46:37:14:d5:1a:07:4a:24:b1:
03:4f:6f:55:1f:61:60:8b:13:aa:80:5c:b1:34:f9:
73:5b:97:00:62:3f:9e:17:6a:a2:7a:59:31:ad:e2:
b4:cf:6b:3f:7a:79:5f:52:dc:5f:b0:ff:2a:04:c9:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:43:6D:50:CB:07:7F:7F:E2:8D:79:7F:5C:CA:15:38:8E:FD:C5:10
X509v3 Authority Key Identifier:
keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:90:71:4d:a7:d6:37:3b:9a:b2:61:b4:6d:41:d1:91:58:83:
3a:e5:fa:67:c8:4d:21:a7:5e:f6:17:36:16:0c:4f:0f:e7:54:
38:0c:aa:53:d2:e8:54:56:dc:6e:f1:04:ac:ee:82:a1:7a:d1:
2e:76:4d:ca:22:6d:52:82:c1:9f:da:82:f0:9e:95:51:02:74:
8f:c3:8a:11:ac:98:ca:6d:d3:d3:67:89:9b:9c:67:12:6b:21:
f4:f2:a7:e3:ba:03:ff:9f:e6:11:9c:ce:d9:f3:9f:8d:d7:32:
ba:7a:60:92:68:9e:8b:58:99:8b:ba:67:d1:d7:c5:bb:ce:04:
67:50:78:70:f8:0a:cc:1b:be:3c:a8:b8:a3:6c:cf:26:33:b6:
6e:6b:04:9f:ea:e8:44:8f:44:53:f1:64:be:17:06:ae:8d:50:
1d:f6:68:25:95:71:58:de:37:3d:81:14:84:58:69:1f:cf:f8:
42:a5:79:77:0c:d1:35:2f:34:2f:69:1f:e5:2f:7c:1b:a3:6e:
b0:e1:89:4d:0c:38:59:13:b4:be:b0:51:d9:f2:9b:1b:01:37:
d6:12:bf:b3:ff:a8:95:5c:ff:b4:0a:d6:96:ba:da:0d:17:c3:
de:ae:71:a6:2a:a0:d6:a5:40:88:8f:82:6a:1a:1d:80:c2:59:
f7:6f:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:33 2025 by rpki-client