Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
File: tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft (raw, json)
Hash identifier: ewY8gMv90lNf0dNOHnIz74k3WNGm7Mnh9Q97DEVcncM=
Subject key identifier: 75:91:4B:9C:A6:31:17:6D:5C:45:36:8C:BA:7C:41:A3:4B:78:72:AD
Authority key identifier: B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
Certificate issuer: /CN=F36D26A1AF/serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Certificate serial: 01A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
Manifest number: 01A4
Signing time: Sat 23 Aug 2025 04:37:23 +0000
Manifest this update: Sat 23 Aug 2025 04:37:22 +0000
Manifest next update: Mon 25 Aug 2025 04:37:22 +0000
Files and hashes: 1: tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl (hash: UwYEAmUhbbDP6lgJZDbRma69IHg7VxfxhIjvn9BHyyM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 420 (0x1a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D26A1AF, serialNumber=B4C01C4D61E8059005DAEA4C677A16E4447D552C
Validity
Not Before: Aug 23 04:37:22 2025 GMT
Not After : Aug 25 04:37:22 2025 GMT
Subject: CN=68a94583-fa25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2d:e8:85:e1:bb:ca:f7:e1:fa:1e:1e:b8:4d:
91:73:83:06:10:f6:8a:7c:06:86:c6:e4:9c:8e:ff:
ad:de:e4:1c:c8:c7:6e:e5:d1:ba:96:e8:cb:72:08:
9e:7d:1f:07:bd:67:df:eb:b0:1a:6b:30:73:6c:c8:
09:c2:74:9d:aa:28:15:a9:4f:5b:ae:e2:de:f1:a7:
b4:7d:f1:90:76:86:6f:9c:ca:12:47:0f:d6:ea:fa:
c0:0d:7b:db:b8:16:d0:c9:4d:ec:64:8f:bd:9c:d9:
d0:01:ec:47:4c:72:22:0e:20:ef:03:d5:29:b9:18:
ab:2a:11:5a:8c:57:30:34:da:ef:b7:36:5e:2d:02:
c3:91:2b:4a:cc:f4:72:28:66:9a:20:86:9c:6a:7f:
2f:ef:eb:1b:38:02:20:f1:6c:d8:57:ef:fa:ca:36:
cd:d4:8a:1c:f7:5d:d8:34:e0:09:46:35:0c:4d:b2:
55:aa:aa:c2:23:cd:a8:e9:92:a5:46:c1:a5:2e:0e:
74:04:96:84:66:89:38:0a:8c:c1:ce:e3:ff:14:04:
24:ed:b0:1b:e5:b9:f0:47:ce:ea:f3:ea:dd:fa:63:
67:1c:fe:92:93:c6:f2:8e:b7:7b:fc:3e:0a:52:fa:
cc:7f:eb:f1:b8:38:fe:16:6c:35:16:0c:45:89:e5:
78:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:91:4B:9C:A6:31:17:6D:5C:45:36:8C:BA:7C:41:A3:4B:78:72:AD
X509v3 Authority Key Identifier:
keyid:B4:C0:1C:4D:61:E8:05:90:05:DA:EA:4C:67:7A:16:E4:44:7D:55:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tMAcTWHoBZAF2upMZ3oW5ER9VSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D26A1/9BFDE1BA3EAE11EF8EE2C15E762E951A/tMAcTWHoBZAF2upMZ3oW5ER9VSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d5:6e:92:8f:c8:ca:12:b7:97:87:6e:1c:31:9b:f2:31:b9:8b:
bd:88:3b:1b:b1:d8:5a:d2:fe:54:5a:71:25:06:a3:03:ae:ca:
30:13:d3:bb:2a:06:69:e0:46:bc:c8:0f:8b:30:e0:c0:ce:73:
bd:65:a2:59:12:b8:0c:3a:74:00:e0:0c:cb:b8:04:05:01:cc:
51:cd:68:aa:4f:ff:3f:5d:76:2e:4f:68:97:64:ff:0c:9d:01:
0e:fe:5e:e8:7a:dd:98:4d:ae:ac:4d:73:04:cb:69:c6:bf:c2:
bc:13:1b:cd:b8:96:b5:2c:23:19:a6:27:43:df:47:f2:f8:df:
1f:47:2a:da:7e:fe:53:b7:54:08:11:a6:7e:0d:18:3b:a7:40:
41:2e:5c:e8:c7:e7:04:f0:78:56:04:7e:07:ea:00:a3:2f:9d:
ba:15:e0:4a:01:f8:d1:fd:0c:bc:17:c1:de:12:fe:ef:1f:fe:
67:88:97:8c:d7:f4:8f:48:2f:71:7c:9e:20:7c:80:51:4c:b6:
be:0b:02:0b:d8:bc:e2:62:0f:00:be:d8:34:13:7d:18:03:dd:
61:78:7b:c8:f6:9e:8e:0a:d7:d9:f7:1e:63:bc:2f:88:0b:93:
5f:4f:cf:f3:15:3e:da:03:98:2d:66:bc:bb:e1:b4:40:7b:5d:
15:2e:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:45 2025 by rpki-client