
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
File: DfSP5wXc0B45e4-chO8Xkcls-9g.mft (raw, json)
Hash identifier: 9hp2Bpv+R9pwEq3IT1fjGm+wfKzCAV5Xyg0PURVACks=
Subject key identifier: D6:9D:F7:92:79:8D:85:7F:21:C9:59:E4:D5:32:81:12:FD:13:02:DC
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Certificate issuer: /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial: 068D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
Manifest number: 068A
Signing time: Sun 29 Jun 2025 02:06:46 +0000
Manifest this update: Sun 29 Jun 2025 02:06:45 +0000
Manifest next update: Tue 01 Jul 2025 02:06:45 +0000
Files and hashes: 1: DfSP5wXc0B45e4-chO8Xkcls-9g.crl (hash: S8sGIPxB36Fds8kAj7/d4fhTDK/SaVYKEWhZQil5T6E=)
2: 23040FFA339B11EFAA1E5754762E951A.roa (hash: X4ZAQ6gAg0uApdYdcGPSN7HGXQ1rd2UvdvLUe5VreL8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1677 (0x68d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4AD7AF, serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Validity
Not Before: Jun 29 02:06:45 2025 GMT
Not After : Jul 1 02:06:45 2025 GMT
Subject: CN=68609fb6-1cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:fa:5f:6d:16:8b:2a:f3:66:3b:60:df:dc:
34:f1:b7:64:b1:de:fd:48:f9:8b:e9:3a:b3:9c:33:
65:b5:e5:1d:9b:ce:c6:3e:f3:a7:85:bc:a5:d3:70:
49:92:9d:9a:67:fd:88:5d:1a:b1:db:6a:f4:20:f8:
95:67:e2:6e:b8:9c:92:61:57:38:98:0a:42:45:1e:
78:5e:a3:fd:c9:99:1f:16:1d:9e:3f:28:86:45:60:
74:61:2f:3d:2b:47:3d:db:e5:aa:9b:26:78:0c:8f:
e1:e1:05:97:db:77:44:f1:1c:cb:1f:3f:5b:56:ee:
00:97:3f:5f:e6:13:81:81:50:bb:f2:d1:6b:f8:cc:
bb:f8:8f:0b:4f:ea:22:d1:ec:60:a2:df:7d:a1:02:
b4:27:c4:b3:93:b3:98:5b:d2:4b:34:40:3e:c0:40:
09:f0:fa:1f:4a:89:fa:7e:f3:36:1c:be:3e:df:90:
7f:3c:98:09:d5:54:b9:7c:c1:2a:94:fb:b2:4a:c7:
8e:96:fc:1e:1f:17:a1:6b:6a:88:65:72:bf:b6:60:
d1:21:22:bf:75:91:78:24:ca:8d:16:f7:cd:d8:3f:
a9:e4:9a:9a:24:92:05:3a:24:a1:6b:51:e9:74:cc:
37:07:6e:91:f9:0b:62:ae:18:3b:61:91:58:4e:64:
16:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9D:F7:92:79:8D:85:7F:21:C9:59:E4:D5:32:81:12:FD:13:02:DC
X509v3 Authority Key Identifier:
keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:34:d6:bd:65:63:54:6c:7c:08:e3:a5:ba:33:bb:b6:63:
f1:0f:42:1f:ca:a0:e8:3a:95:6a:62:0b:06:6f:c9:57:c7:b8:
4f:bf:c4:21:02:a4:0b:8b:04:b3:ba:27:94:ba:3c:bb:a8:22:
03:71:1b:3b:cd:65:20:f0:1b:e9:7d:6c:e0:f8:6d:6c:83:e0:
7e:71:77:8a:3f:cd:d5:cd:98:ad:61:1f:19:e3:79:27:73:2a:
3c:9f:9f:9b:59:73:0f:ba:a4:5f:f9:ce:f5:9d:ae:f0:03:86:
94:9f:68:fe:88:3d:09:14:5f:19:be:de:ec:5b:ee:a0:33:68:
0c:c9:29:ed:37:29:4e:57:c1:a0:f1:c4:f9:57:e3:ec:f9:69:
4f:42:f6:f2:fb:71:21:0f:56:05:cb:22:c9:08:75:e3:fc:7c:
cd:eb:ae:27:84:fa:d2:e3:b9:63:8d:2f:1e:6f:90:92:e9:cb:
9c:31:2f:e3:ac:5c:45:6b:87:8f:8c:7e:76:1d:a8:18:8b:e3:
a0:81:98:7d:8f:75:76:95:6e:d8:91:72:20:ee:20:eb:38:c8:
d4:d1:df:28:bb:02:26:c3:1c:15:e4:41:c8:a1:7b:b8:6b:22:
5c:e7:c6:58:67:44:44:cc:a1:8b:f2:5b:8c:9e:73:80:bf:2c:
bb:f9:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:40:22 2025 by rpki-client