
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier: VggVHWYEMCYwzT6KwbddGl/P3em3kjOMg3jai6bP9z8=
Subject key identifier: 00:98:B1:B5:AB:64:C7:71:DB:23:78:33:5B:DC:15:76:20:EF:E7:A0
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer: /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial: 045C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number: 045B
Signing time: Sat 23 Aug 2025 03:09:19 +0000
Manifest this update: Sat 23 Aug 2025 03:09:19 +0000
Manifest next update: Mon 25 Aug 2025 03:09:19 +0000
Files and hashes: 1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: ogm0j258l76mpeg91B5gCplp7XAYK7z5fKxuqgblG10=)
2: E3F54648303711ED9A084DD9F1222468.roa (hash: gFeaumPVCdd6tZ5UsCnpNw/LwtGf891vKHW1FGcYpBY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1116 (0x45c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Validity
Not Before: Aug 23 03:09:19 2025 GMT
Not After : Aug 25 03:09:19 2025 GMT
Subject: CN=68a930df-727f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:8a:1b:c5:8b:04:56:08:0a:03:93:84:0b:
35:54:3b:2d:17:6d:96:71:aa:39:75:8e:e9:55:e2:
ac:d6:51:19:84:59:c0:9c:36:7e:8e:c5:2e:5a:96:
69:34:06:ff:83:01:5d:bf:ae:b8:9b:07:fc:41:be:
ad:a7:da:bb:db:95:db:0f:6f:a9:66:10:18:5e:39:
db:2b:50:74:2b:ec:08:e9:28:5d:93:05:88:ff:a5:
99:08:ce:0a:e1:af:ea:59:92:74:68:c4:88:f0:39:
e5:32:9b:9f:a6:12:bf:b6:c2:96:b5:74:f7:06:18:
86:09:2c:3d:c7:76:60:ca:90:65:8f:e2:47:3c:b7:
17:ee:c3:54:8a:77:13:cc:ff:78:a8:68:58:e9:6e:
79:22:40:4b:c3:53:2c:ec:bd:62:14:62:16:8f:89:
f2:77:15:63:b1:59:ab:e5:61:05:b2:6c:23:bc:bb:
63:16:30:0d:38:bb:23:bd:11:64:9e:0c:8e:36:41:
e8:c7:1f:60:12:e8:01:9e:18:3f:f6:7d:22:c4:a8:
b9:bb:7a:5f:0a:03:d1:64:20:fb:ac:fa:4f:64:53:
89:3c:ed:65:60:31:7d:b4:d5:8a:35:09:00:d8:7f:
62:95:97:ac:c6:5c:2d:42:6e:3f:70:d6:47:d3:e8:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:B1:B5:AB:64:C7:71:DB:23:78:33:5B:DC:15:76:20:EF:E7:A0
X509v3 Authority Key Identifier:
keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:e5:5f:be:80:0a:36:26:c3:2a:15:25:68:20:76:e9:2d:
3e:04:7e:19:92:f8:6b:f6:6e:eb:27:e8:be:5e:77:d8:58:3c:
b8:a6:4f:bc:f7:4e:29:3b:d6:cd:86:de:33:17:e5:cc:9f:1e:
77:9f:65:5b:8b:1b:2d:65:31:6e:85:55:82:9c:7d:ac:5f:02:
b2:be:7f:8f:71:97:86:93:14:58:5e:22:5e:45:62:f7:d2:df:
37:bc:7a:de:c9:9c:3e:19:a0:8a:d4:1e:c4:72:14:94:ed:ed:
69:94:1d:39:d2:72:29:4e:5f:fc:48:b3:ff:b7:86:6d:35:67:
f4:f0:a6:2c:8a:2d:42:06:8a:0b:28:c8:45:0b:77:3b:32:78:
49:ce:7d:68:ca:a4:3e:39:ad:00:16:ec:d7:bb:1b:db:20:3c:
4b:13:12:40:8f:61:b2:3d:04:69:2e:03:71:97:8e:d7:29:53:
ce:95:c4:04:5b:a0:7b:89:f6:c9:c6:15:c0:b1:f0:da:df:d9:
96:5e:01:df:27:29:2a:70:5c:57:24:33:02:8f:db:fc:7f:8f:
1b:b1:ea:ed:6b:cf:37:a3:4e:9d:b7:f0:51:40:5b:a0:4a:52:
08:73:8f:ca:c8:da:fd:3c:69:c0:05:54:75:fa:c8:5a:16:97:
21:29:d3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:30:49 2025 by rpki-client