Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: xunVKQzKoDPMIRGWMF8BTz98FMF+qZ3mjemHzktns7A=
Subject key identifier: DA:35:72:04:29:AD:4D:0F:0F:91:63:1E:CD:E3:C8:DC:FA:A0:E6:2E
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 03BF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 03BE
Signing time: Sat 23 Aug 2025 03:28:16 +0000
Manifest this update: Sat 23 Aug 2025 03:28:15 +0000
Manifest next update: Mon 25 Aug 2025 03:28:15 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: 79s8k/9hXKH7mgPnO1H3AcYBaruiOfwfIRtQVz9jRms=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 959 (0x3bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Aug 23 03:28:15 2025 GMT
Not After : Aug 25 03:28:15 2025 GMT
Subject: CN=68a93550-bc2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:44:c7:ba:ce:3e:08:de:b3:4d:68:34:5b:ac:
e4:22:8f:66:84:92:75:1f:13:df:6e:f2:6e:da:e6:
7d:f1:94:fe:11:b0:23:23:2b:91:27:68:12:0b:66:
a1:67:3d:08:1e:8c:87:99:37:ba:50:1e:b1:d0:09:
71:b0:ae:6c:68:89:d8:c9:83:2d:c5:b9:78:e4:ba:
7d:1a:d9:f7:22:0f:d3:f0:73:44:36:7b:99:30:e0:
2b:18:a4:42:71:c6:8c:89:24:94:48:86:cc:03:a9:
46:90:d7:62:20:c5:40:c8:06:98:3b:4c:8e:f3:80:
a7:bf:51:11:02:9f:49:01:d6:e2:62:41:f8:ce:df:
62:c9:85:28:a7:8d:8c:9b:9d:bd:c8:ae:29:2b:8d:
7a:20:60:7a:7d:5f:27:70:50:3c:c4:b1:5f:3b:47:
77:92:fa:bd:a0:2e:b4:c0:ec:4a:8b:5c:4d:c9:d7:
65:1b:f5:be:2c:44:c9:d5:9d:f2:ba:da:19:51:ae:
a3:bf:4d:60:4b:d5:70:7e:d9:51:7d:1d:bc:7c:8b:
1a:bf:bf:5a:26:9c:6a:32:1c:7d:24:cf:14:67:69:
ea:fd:24:1d:e4:f6:d6:a8:c2:f8:b7:b6:5e:81:56:
49:2c:bd:24:d1:ef:b2:38:c4:78:bf:d0:28:39:40:
ab:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:35:72:04:29:AD:4D:0F:0F:91:63:1E:CD:E3:C8:DC:FA:A0:E6:2E
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:d8:0a:a8:7f:12:28:19:e8:cd:0f:38:0c:ca:d2:66:e6:11:
8c:57:db:8f:37:b2:dc:16:50:15:84:c8:ce:27:c2:11:22:e6:
fc:90:35:68:56:7c:67:27:48:ff:13:4f:99:0e:27:e2:28:5c:
13:65:6b:77:b9:3c:4d:c5:0e:ce:ae:6d:a4:7f:a4:00:82:71:
22:66:fb:23:83:c4:f8:c6:f0:8a:f8:70:14:7a:9f:63:0d:e1:
17:53:56:53:a1:03:ca:f3:3e:99:02:ad:87:50:c4:0b:5e:fa:
f6:c1:b8:c4:96:2f:f0:1c:7a:b8:92:06:92:3b:de:ff:23:54:
a4:35:93:81:22:11:95:19:16:98:c9:bf:ca:37:be:b8:0e:9a:
fa:de:c7:5f:cb:c0:3f:cb:64:72:bf:43:11:27:55:42:52:5d:
c1:6d:c0:a1:de:00:f0:95:b1:e9:8e:1f:d9:df:0e:10:36:ed:
e1:39:a4:c8:96:be:78:a2:b2:29:5c:ec:ef:66:1d:7a:20:c5:
46:42:82:f0:46:d9:63:e0:c2:f4:d6:e2:96:9d:b6:6b:3e:63:
9d:5e:93:15:e5:f6:f9:57:99:fb:b1:0b:04:9b:4a:72:dd:14:
07:ff:a3:88:a2:7b:ef:24:82:e4:c8:4e:d0:7f:f1:b7:55:44:
75:4b:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:22 2025 by rpki-client