Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File: ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier: mx6AlIERJti2CNvXLFcfZ6MjTqUMWKc6OPjwuLeW8l0=
Subject key identifier: 59:33:8B:5F:35:8C:5E:7A:1E:C4:15:33:7E:01:4B:D2:A2:C6:DC:98
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer: /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial: 049C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number: 049B
Signing time: Sat 23 Aug 2025 03:01:01 +0000
Manifest this update: Sat 23 Aug 2025 03:01:00 +0000
Manifest next update: Mon 25 Aug 2025 03:01:00 +0000
Files and hashes: 1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: IGX1LMtE+cGh6tewIk3d/9odhQKXNBs37x7KQ6HSJF8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1180 (0x49c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Validity
Not Before: Aug 23 03:01:00 2025 GMT
Not After : Aug 25 03:01:00 2025 GMT
Subject: CN=68a92eed-eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:76:4e:10:ce:73:e7:f2:b3:f9:88:44:2d:
df:7f:0c:72:48:71:4b:1b:ac:a1:b5:f4:a4:2c:63:
c6:a1:b9:25:bc:11:a3:a4:d8:cf:8b:e4:76:11:d3:
8b:99:c1:98:88:83:87:98:d0:d9:e2:6b:79:81:1e:
df:93:3b:dc:87:ba:bf:64:6b:b8:0f:0b:d0:f0:e4:
70:bf:78:8b:ee:70:de:1f:ea:c8:dd:a8:f5:24:da:
9c:7f:03:de:74:1a:e2:f1:5e:10:58:8b:83:a2:17:
bd:27:96:38:d1:6e:97:92:21:e5:84:7b:32:6b:a5:
ce:92:b4:58:10:48:92:aa:cc:2e:a0:18:68:e5:88:
7d:0c:2f:71:c6:a2:02:a1:d0:74:ac:43:dd:67:c2:
65:19:a1:0f:10:fd:9e:89:1f:d5:d3:d5:ae:77:85:
a5:db:b3:f7:68:75:0d:69:85:69:e8:d6:24:9e:da:
92:3d:7a:8e:39:1d:a2:61:1f:c4:27:71:01:63:c0:
98:b8:77:61:aa:62:7e:2b:2c:ae:8e:fa:0e:f6:7e:
e7:10:9d:8d:e6:d7:86:71:89:42:7e:f6:61:32:6e:
17:7c:11:30:08:cd:6f:c7:3e:e7:28:4d:41:94:7e:
10:24:b2:aa:0e:d0:a3:20:a3:c8:7d:31:4b:a1:c5:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:8B:5F:35:8C:5E:7A:1E:C4:15:33:7E:01:4B:D2:A2:C6:DC:98
X509v3 Authority Key Identifier:
keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:4e:dc:fa:0b:95:ad:3b:3b:8a:4e:bc:21:1d:52:a5:3b:dd:
47:4c:88:5c:ed:0a:c9:15:d4:f8:e8:9f:4c:6e:64:7c:2d:df:
c2:89:08:0e:f0:8f:19:32:d2:a9:4a:ca:64:ff:07:e7:3d:f4:
e3:28:d8:62:af:fb:0f:cb:b4:65:1f:1f:aa:f4:4c:4b:95:fa:
1a:9d:a1:bf:37:ba:e6:e1:58:bb:f0:61:35:ee:df:80:85:9d:
e7:d2:87:07:b1:cd:d6:f3:3c:73:57:5a:c7:6a:bd:03:f0:c0:
35:56:21:4b:07:ec:bc:d0:26:88:4d:7f:44:21:36:2c:11:54:
a8:d8:3a:e2:c1:d6:37:4c:f4:7d:b7:2e:fb:b9:be:ca:ca:35:
67:ef:93:21:7c:1e:0d:bb:f1:e5:7e:51:20:f5:69:21:59:7b:
27:1a:12:13:6e:c4:b9:43:c0:51:d4:4d:e8:6a:fb:3b:80:fb:
0e:29:ce:9c:fa:f3:ed:db:ae:61:0b:38:51:15:10:4e:99:1b:
20:18:25:1f:42:6a:f1:9a:e7:52:59:bf:6f:05:c6:fa:de:c3:
0f:c3:f2:45:51:c7:45:b0:88:d8:87:35:df:bb:50:a5:30:b5:
7d:14:3c:41:64:35:1b:ad:4e:b2:3a:d8:81:47:00:ee:73:19:
52:9d:37:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:01 2025 by rpki-client