Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File: IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier: ErR/26lPRU6VFY/9cM8Z9EjyPQS68BC2hFFhaSf9z/I=
Subject key identifier: 3B:08:B2:4A:6B:B1:A6:C2:AD:22:72:A0:FF:8D:83:3A:16:02:F1:2A
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: 0124
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number: 0123
Signing time: Sat 23 Aug 2025 04:59:10 +0000
Manifest this update: Sat 23 Aug 2025 04:59:09 +0000
Manifest next update: Mon 25 Aug 2025 04:59:09 +0000
Files and hashes: 1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: 86NysxW+69hx95vRkEGApS7NFLdeviMFG6xtVcme2vg=)
2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 292 (0x124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: Aug 23 04:59:09 2025 GMT
Not After : Aug 25 04:59:09 2025 GMT
Subject: CN=68a94a9e-7865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:36:c8:91:80:95:1a:06:cf:1c:49:cb:0e:
94:35:06:3c:87:ca:89:6e:2b:10:da:06:c5:67:b5:
77:0e:31:ab:45:68:0d:75:09:e1:3f:a8:43:c6:f9:
fb:73:cd:57:bc:ec:f3:2a:ae:c4:20:39:e1:f4:4c:
d3:1d:48:d7:26:1f:94:24:d6:22:e0:59:fc:1b:55:
20:4b:c4:d5:0d:05:cb:43:46:7a:6d:c9:d1:e4:a8:
db:2a:de:94:0d:38:26:1e:e2:31:fc:33:72:b9:9d:
80:c2:ba:8e:bc:29:4a:e5:0c:bf:05:f1:ac:50:7d:
7a:c1:61:a3:7d:c4:0c:fb:36:b1:9d:2a:56:5f:91:
b4:db:9d:f0:7d:1c:95:a5:45:43:b9:d8:b1:02:d1:
04:dd:78:a0:60:49:12:f2:ae:70:5e:17:69:23:3c:
0c:7b:18:99:35:a6:d1:8b:17:dc:57:6a:57:7a:34:
2b:d7:e5:6e:9b:38:f9:b0:be:4f:c9:bf:bc:30:2f:
9f:5c:d3:7c:c0:a4:36:82:5c:92:0a:c5:40:28:9c:
f1:f4:77:cc:13:81:24:75:7e:9a:72:61:1a:21:af:
e1:47:57:fc:79:bb:8b:a1:ea:8f:2d:74:27:76:70:
cd:df:68:22:e5:c4:ba:7c:79:b5:71:0d:e6:e6:e6:
b1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:08:B2:4A:6B:B1:A6:C2:AD:22:72:A0:FF:8D:83:3A:16:02:F1:2A
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:97:49:da:d1:11:16:77:56:2d:fc:15:42:4d:00:00:1d:66:
fe:35:88:19:dd:d4:05:20:41:38:80:ee:f6:3f:2a:73:50:d9:
c3:9a:ed:6e:c2:9c:db:6a:06:b7:92:5f:c8:b3:b6:ca:18:48:
9d:dd:bb:e4:18:52:62:40:2c:62:aa:ac:a9:c5:64:09:78:e4:
98:04:79:46:ff:01:df:b7:34:38:85:86:9c:2d:ad:24:38:75:
74:8d:83:3e:aa:6f:8a:0f:60:cf:f0:c7:0f:dd:cd:0a:26:be:
26:31:a0:be:80:81:12:50:13:b2:c5:2a:44:fa:9c:2e:00:79:
98:41:fd:88:c3:d4:5d:76:13:58:10:c7:2b:34:86:6b:1f:2c:
2f:d7:a5:81:a9:33:bd:ce:7c:d3:c0:27:65:de:9d:80:2f:b7:
bf:be:b7:8e:15:97:a1:39:10:cf:96:65:c1:2d:8b:03:48:3e:
6f:54:78:fc:ce:3e:4f:db:b7:32:6a:ed:ec:bc:ea:a3:c1:3d:
b1:df:ef:5e:c3:5b:03:67:4b:62:ba:de:1a:92:40:9c:fc:fb:
81:0c:82:64:6f:92:73:81:71:cf:34:fc:3e:e2:eb:75:79:44:
97:78:19:5d:c5:e0:d3:31:5f:a7:3c:09:ff:2e:69:3d:6f:c2:
49:3c:a1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:11 2025 by rpki-client