Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
File: nZEfOSNannHK5JlXppouUkKg3TU.mft (raw, json)
Hash identifier: 3E5nH8NmwILeFT4jaM6/GrXXiBycQvEmhqpv9zlY/EA=
Subject key identifier: 86:56:18:09:3C:66:B4:79:62:C5:B5:F1:3C:3D:B8:D5:37:F1:39:47
Authority key identifier: 9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
Certificate issuer: /CN=F36B4CC8AF/serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Certificate serial: 0249
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
Manifest number: 0247
Signing time: Thu 03 Jul 2025 04:13:24 +0000
Manifest this update: Thu 03 Jul 2025 04:13:23 +0000
Manifest next update: Sat 05 Jul 2025 04:13:23 +0000
Files and hashes: 1: nZEfOSNannHK5JlXppouUkKg3TU.crl (hash: kdHNs/8hB1ALmI7lJYIpgszspiMyPPa1D00WAIedTNg=)
2: 6B19BD749DA711EE8B40AC5ED25BE465.roa (hash: NgzSPsDLZHTS8GcIuQL4M+RUtb2W4HialOJ/KKr08S4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 585 (0x249)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B4CC8AF, serialNumber=9D911F39235A9E71CAE49957A69A2E5242A0DD35
Validity
Not Before: Jul 3 04:13:23 2025 GMT
Not After : Jul 5 04:13:23 2025 GMT
Subject: CN=68660364-23c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:65:47:40:80:cb:9b:2e:87:2f:15:7b:3d:
bd:0a:bf:58:36:c5:3f:39:57:30:f1:85:6a:38:d9:
0f:98:e9:c8:16:37:63:75:3f:89:38:d6:bd:57:4b:
51:71:91:c1:44:4d:2e:d5:70:12:10:58:cd:f8:37:
e3:46:94:b0:e1:01:94:bf:6a:1a:32:10:5e:58:d5:
ff:9a:ce:56:18:9f:a9:da:51:89:50:44:9c:17:07:
3b:10:87:8e:ab:3e:7d:87:af:5c:94:6f:9b:0d:a5:
01:2d:1d:0f:0e:44:a4:b3:4e:4d:75:7c:46:18:0a:
41:8d:40:fa:36:2c:f4:d2:06:95:9a:01:66:af:ff:
3c:32:ac:c3:83:43:c2:ce:71:fc:9d:33:fe:a7:9a:
7f:af:4b:93:0a:3f:61:dc:bc:e0:ec:2a:00:14:d7:
05:77:fa:70:4b:c9:3a:40:e7:36:bd:ba:0c:d1:79:
84:26:65:db:ab:ea:8b:c5:3f:88:7b:bb:97:e8:ce:
0a:8c:87:38:54:ff:9f:6c:4b:89:e5:b6:f6:98:7c:
a7:88:a2:23:93:5b:41:8c:99:28:d7:d3:e4:ca:ec:
86:b7:fd:36:ca:59:13:57:57:b0:66:70:37:76:22:
12:4f:95:32:bd:3f:26:cb:c0:df:43:80:c1:38:61:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:18:09:3C:66:B4:79:62:C5:B5:F1:3C:3D:B8:D5:37:F1:39:47
X509v3 Authority Key Identifier:
keyid:9D:91:1F:39:23:5A:9E:71:CA:E4:99:57:A6:9A:2E:52:42:A0:DD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nZEfOSNannHK5JlXppouUkKg3TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4CC8/2BD7A67C9DA611EE9420865CD25BE465/nZEfOSNannHK5JlXppouUkKg3TU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:07:c8:79:dc:0e:ae:ea:91:82:87:15:8c:a1:b1:f7:14:51:
0e:d8:1c:1c:4d:de:d5:d4:fe:eb:12:9a:07:70:3f:b5:79:0a:
60:e4:43:00:32:91:a8:6a:b4:c2:f6:8c:75:da:e8:2e:19:41:
a8:5b:ae:5b:85:44:20:4e:1c:c6:3f:d9:7f:1a:46:cb:0e:72:
90:d6:f0:1a:b8:06:c0:cd:ee:e3:2d:c6:41:99:a6:0e:b6:91:
84:7f:4e:ad:50:1d:19:5f:ed:1d:7c:41:03:9f:25:42:cb:89:
cc:14:f7:15:11:0f:81:54:61:fc:70:e7:ce:aa:e9:22:2b:c6:
dc:47:51:cb:54:b5:51:df:e5:5a:6d:20:40:98:e9:ab:d2:64:
e6:16:18:65:37:64:98:5f:a2:33:dd:9a:e7:8d:f7:34:0b:a5:
4b:60:dc:11:de:a5:72:34:62:8e:18:64:3c:ef:0b:0e:f4:66:
85:b0:ef:40:8b:75:74:fb:2b:2c:07:27:2c:2f:14:82:8f:a6:
a1:fc:26:5d:2f:6a:8b:90:5d:c9:4e:d3:3c:92:0a:06:d4:72:
17:96:b9:93:19:f8:36:85:01:aa:c8:b7:d0:74:c3:28:38:10:
d1:fc:13:97:65:3f:b4:2e:1f:f6:dd:c4:55:c6:a6:86:a5:95:
1f:cd:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:19:58 2025 by rpki-client