Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: Dq3xd8ljNIIrYIG2Hkygs641BQzj9a2KtcS0hwM1rP4=
Subject key identifier: 44:FD:1F:EA:4F:77:8B:18:58:90:79:77:14:77:75:B8:47:ED:BE:31
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 08F0
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 08EF
Signing time: Sun 06 Jul 2025 01:28:29 +0000
Manifest this update: Sun 06 Jul 2025 01:28:28 +0000
Manifest next update: Tue 08 Jul 2025 01:28:28 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: mgrkplj90u64je2HZN6pq5Lf0aqclX78L20lGzVqP9o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2288 (0x8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Jul 6 01:28:28 2025 GMT
Not After : Jul 8 01:28:28 2025 GMT
Subject: CN=6869d13d-6ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:f6:1d:69:31:e7:23:33:b6:26:0f:31:68:
27:16:dc:73:32:6c:57:36:f7:e4:b0:ab:c3:9d:82:
50:9f:be:c6:37:f5:ca:96:a2:5a:90:2e:39:1d:ce:
a1:56:54:80:b1:9f:44:3e:04:88:c3:9f:f0:a5:d9:
a0:23:98:63:59:82:6e:72:bc:a9:12:6b:30:ee:95:
8e:f8:9d:ed:c9:71:c2:10:21:e2:fc:86:e2:7e:25:
8d:d0:31:6e:5a:56:60:de:82:2f:c7:09:51:aa:60:
50:04:e0:bc:4a:69:7c:fc:db:03:58:ee:62:9f:4b:
5e:36:a6:09:dd:44:7f:3c:cc:b3:30:f5:d3:70:e1:
a7:8e:34:40:3a:30:b5:df:e1:10:a5:75:ab:49:b5:
62:42:e2:53:de:5f:31:5d:4c:d9:7b:9f:ff:64:cc:
55:b9:1d:37:72:dd:ec:8c:c3:ec:98:27:bd:2e:68:
cc:58:66:50:a6:03:ae:22:e3:d1:03:d5:9c:92:fa:
68:21:a3:2a:41:0e:48:c3:e3:6b:4f:34:8e:4a:9d:
25:82:68:6d:48:c0:b1:75:63:41:a7:69:cb:58:f5:
29:13:79:8f:5e:be:99:b6:cf:01:6a:a4:a7:a5:05:
ed:1a:6f:cb:fe:37:f3:e7:d8:d3:ea:86:b5:30:0a:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FD:1F:EA:4F:77:8B:18:58:90:79:77:14:77:75:B8:47:ED:BE:31
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:6a:37:36:33:db:5c:f0:11:a9:7f:0d:1e:b3:13:ac:7e:0f:
57:7a:08:9e:15:76:01:d7:24:28:7a:ba:74:38:54:c0:cf:d3:
0b:79:d2:cd:6f:57:4f:1e:b3:58:37:5f:fd:e2:36:f7:11:1d:
d6:6c:e8:57:0d:ea:28:fc:bc:af:ca:f0:4d:a2:bc:c9:15:28:
3d:99:8e:82:50:93:53:a0:aa:d4:a4:28:c5:1f:9c:ce:9b:67:
c6:2d:a9:ef:fa:88:df:c5:e3:60:f8:0c:37:03:9c:94:8b:d6:
a1:37:84:37:c1:fb:56:c0:80:3f:61:ad:47:89:3f:06:19:46:
c9:2b:0c:55:49:7c:ed:23:0a:bd:b8:22:a8:90:64:61:9a:74:
35:38:33:f4:56:ca:56:f1:e3:12:fa:3b:82:1e:ae:e7:5e:3e:
21:75:62:64:8e:8f:7d:4f:aa:f7:0c:49:e6:5c:b4:2d:7b:fe:
8d:8d:82:d2:8d:ec:f3:69:29:14:9b:f4:24:14:8f:ae:ac:f3:
72:75:3a:82:98:11:f3:08:6d:ba:10:c0:b1:86:f8:c1:f1:8f:
95:6e:51:83:29:67:74:7a:00:1c:ab:6f:51:ec:1a:98:1e:77:
fc:bb:83:e4:6d:ee:de:99:b7:7b:07:2b:12:5e:42:fd:0f:06:
2f:51:2d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 12:10:04 2025 by rpki-client