Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: EbTvn5bzQRpODwjPuSiXkI0A9j4ry4skj6KKf0j0ldA=
Subject key identifier: EC:E8:4F:1A:DC:B1:CB:7A:71:5D:20:2F:D6:8A:AF:06:60:6C:C7:E8
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 0920
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 091F
Signing time: Sat 23 Aug 2025 01:27:33 +0000
Manifest this update: Sat 23 Aug 2025 01:27:32 +0000
Manifest next update: Mon 25 Aug 2025 01:27:32 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: 9lTICDwZwgqAkE129/9B/36dfarq+ZemCa9EZFLkB8g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2336 (0x920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Aug 23 01:27:32 2025 GMT
Not After : Aug 25 01:27:32 2025 GMT
Subject: CN=68a91905-5152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:b5:a7:76:6f:a3:70:56:ef:f3:27:b8:cb:
03:47:d0:1e:a0:88:05:dc:76:4d:e9:1e:33:b6:6e:
98:fe:2a:6b:9d:4e:90:42:5a:f1:94:4a:15:fc:51:
1b:ec:13:b1:74:f2:b8:af:d0:6e:07:04:16:a7:c8:
e6:f0:76:ec:17:fd:8e:e5:8e:5e:8e:08:ff:de:5c:
cc:4d:1f:fd:6f:4b:6c:23:77:7f:25:4c:64:cf:e7:
af:a8:32:ca:d3:17:e2:c3:bb:29:00:0c:a8:35:6a:
fc:98:0e:de:2a:87:e5:68:ce:82:0f:a0:bc:a4:d7:
4b:c2:3c:ee:2a:b0:0e:b4:52:47:84:e2:45:dc:85:
83:6c:c2:3a:2b:1a:0e:4c:a8:8c:22:a0:13:51:42:
ab:29:bb:59:f7:c8:e4:21:bc:12:14:03:a3:2d:60:
af:6d:67:e4:9c:c7:8a:89:50:e8:bf:99:ad:42:69:
ac:95:ca:e4:5a:1b:0c:29:9d:73:bb:8c:5c:2d:d8:
39:4f:0a:23:fc:c3:ff:f2:fb:94:02:b2:25:ee:8b:
ed:40:16:be:7d:6a:95:9f:c6:17:a9:d6:1b:8d:ac:
62:82:af:2e:d9:9f:38:a6:5e:9a:2f:a1:11:33:74:
78:28:11:7f:ab:0d:7c:6a:21:ac:6e:ef:ab:45:d4:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:4F:1A:DC:B1:CB:7A:71:5D:20:2F:D6:8A:AF:06:60:6C:C7:E8
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:14:f2:a6:72:18:36:63:3d:13:5e:1f:41:c5:32:89:d0:1c:
d5:0a:95:61:42:f6:6c:d9:76:32:1e:bb:10:3a:db:45:bb:eb:
f6:12:f6:8f:f6:fc:9d:24:be:5b:f2:82:fb:86:a2:f8:4f:17:
9c:86:82:ab:c2:74:6d:74:03:64:66:db:4e:5c:fe:eb:e0:03:
58:1d:22:99:80:69:09:b6:6a:04:fb:17:2a:3d:09:3b:82:c8:
89:7b:e4:b6:13:a2:b1:68:44:48:5e:09:fa:31:1c:9e:b0:66:
31:14:0f:28:b9:e1:f0:68:5b:80:89:49:5b:5c:3a:8a:89:8f:
3f:e6:5c:e1:eb:98:4f:7a:d8:8d:c8:96:a5:12:91:08:31:75:
cd:ca:08:36:02:2a:20:23:3a:54:12:b6:89:63:2f:70:36:34:
69:d2:66:05:2e:1c:e9:17:37:f6:b6:c0:3d:c6:a5:bf:f9:24:
99:ca:31:f6:1e:4a:e5:c2:dd:bc:ec:f9:cf:2b:9a:1d:79:49:
22:e8:ec:bc:60:c5:f4:39:47:4b:7d:ea:b0:7f:08:8b:bd:5f:
f2:a5:7b:8b:cd:ce:2c:d5:88:da:7e:53:0b:4d:bc:a0:a7:31:
38:fd:48:e2:6e:57:4e:98:d9:0a:2f:05:d2:e7:ef:cb:89:bd:
dc:2f:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:01 2025 by rpki-client