Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File: sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier: cIwEVo4cfkQHq0h8k815YoPkY944K+oZ19eKGxrsw/8=
Subject key identifier: 48:C7:6A:E1:AA:38:EE:B4:AF:AC:CF:B5:99:8D:02:AE:F1:B1:CB:A8
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer: /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial: 4A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number: 4A
Signing time: Sat 23 Aug 2025 05:18:41 +0000
Manifest this update: Sat 23 Aug 2025 05:18:40 +0000
Manifest next update: Mon 25 Aug 2025 05:18:40 +0000
Files and hashes: 1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: sJT4goAmCuo1A8IsN35mSwqvKM7BC3wKWLimxdrM5r4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Validity
Not Before: Aug 23 05:18:40 2025 GMT
Not After : Aug 25 05:18:40 2025 GMT
Subject: CN=68a94f31-292a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:72:22:30:45:45:1c:f3:2a:df:a7:92:fa:78:
16:e0:58:ff:98:a9:ef:20:02:15:d8:d7:af:7b:e7:
c3:1b:57:7b:c9:fd:75:9c:b3:44:03:5e:56:7f:c8:
8a:9f:1e:76:bb:ee:8d:17:4e:67:8a:3b:a5:3b:33:
e8:79:5b:d4:e0:00:05:d8:b5:2d:9b:56:11:c4:19:
b2:45:36:58:1e:3b:3b:0c:7c:0e:94:31:ad:c7:05:
43:02:03:45:6f:cb:a3:9d:e4:49:a0:02:7a:3e:a7:
2a:9d:1c:45:ae:bc:34:6f:98:f2:8e:36:6e:b2:cf:
0c:da:eb:9f:4b:55:e7:ba:6a:76:4c:1e:b0:5f:63:
7f:74:c0:8c:3d:34:9d:73:98:a6:ee:56:89:e4:6a:
bc:a5:14:3d:d0:7a:7a:9a:d2:7e:14:25:66:79:85:
f7:b6:03:74:b4:ab:f1:d0:dc:58:2b:2e:c3:71:1f:
89:d0:8f:9a:09:21:ba:14:83:dc:c3:5d:fe:13:99:
20:78:78:ed:7b:5b:45:2b:02:9a:c6:eb:07:00:fa:
db:21:ca:9e:15:d9:79:d2:4d:97:c6:19:0c:b8:af:
2c:91:07:ff:d0:b1:ef:b9:29:88:b1:ec:cb:37:a2:
a0:be:6f:6e:37:8c:ab:e5:34:54:3f:71:05:a2:80:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C7:6A:E1:AA:38:EE:B4:AF:AC:CF:B5:99:8D:02:AE:F1:B1:CB:A8
X509v3 Authority Key Identifier:
keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:57:c7:14:cb:53:b8:22:5a:58:3f:9a:f6:5c:c2:ae:0a:bd:
da:2c:c4:43:be:6f:5e:27:e8:17:c4:60:a7:18:ae:2e:03:c1:
3c:4a:15:63:c9:c2:21:de:07:08:11:67:7e:80:58:45:72:f7:
4c:84:77:4a:4d:1d:0d:67:ba:b3:ca:03:9e:77:ab:8d:91:9d:
f4:9a:a9:e7:39:31:76:12:11:96:66:2f:da:6c:c3:ce:70:00:
21:10:0d:e5:d4:07:b4:d5:62:af:a8:c6:25:f9:61:0a:72:91:
d8:84:63:da:fb:14:72:54:cc:8c:2e:53:a5:54:e5:d1:79:11:
5f:cd:81:b7:21:a2:37:34:a2:9f:70:82:b4:ca:9c:84:1d:c0:
85:b0:b6:27:52:14:f3:4a:a1:eb:f3:ff:0a:09:d3:3d:85:e0:
db:ad:dc:f6:ea:87:a6:29:43:2f:8a:e7:cc:93:92:db:46:d6:
34:66:18:2d:f1:1a:7f:01:3d:50:16:fb:99:6c:c6:a8:c3:37:
35:cf:e1:a7:15:90:f6:15:0e:1f:71:fe:4e:d3:2d:ee:83:9b:
f9:22:82:10:1c:59:3e:81:91:0b:58:7d:12:2a:b5:7b:50:72:
ed:ea:bb:71:0c:b6:cf:b1:ee:d3:54:f9:c3:1c:84:aa:7f:e7:
72:1c:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:04:17 2025 by rpki-client