Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: Zo97hRz4TyPT8aH3JCBmJBbpK4yGVIWcwcr6ELBULg8=
Subject key identifier: A9:2C:FE:95:35:8F:EC:9C:FA:57:31:7B:61:DB:14:7F:A5:FD:3E:4D
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 038A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 0389
Signing time: Tue 01 Jul 2025 03:31:34 +0000
Manifest this update: Tue 01 Jul 2025 03:31:33 +0000
Manifest next update: Thu 03 Jul 2025 03:31:33 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: jLRyvwceRlTd5bhfd4FU9uS9G52PDL/Xhd0tdhsFIh8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 00:07:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 906 (0x38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Jul 1 03:31:33 2025 GMT
Not After : Jul 3 03:31:33 2025 GMT
Subject: CN=68635696-21b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:40:5a:6b:73:86:25:58:ac:96:7e:1a:90:
ea:5b:fa:90:70:8b:06:0b:c9:c1:e1:f4:24:57:55:
81:a0:74:9e:1d:04:5b:cd:4c:09:70:7f:75:52:4c:
76:aa:5b:4a:19:db:56:74:14:5c:84:3f:99:0f:1b:
5c:d9:cc:5b:57:a8:c5:3e:57:83:97:10:ce:96:e0:
af:e1:32:dd:84:14:b7:be:25:5a:69:46:d1:c5:51:
d6:02:06:3d:7d:f0:52:1f:8a:17:d0:b3:f6:78:40:
b8:a4:6d:ef:8f:ec:92:5b:ec:2e:c6:53:fd:d7:08:
7f:17:14:cb:ea:01:18:ab:5a:b3:6e:88:30:95:cc:
22:cb:45:55:52:2e:76:75:c4:f9:f1:7a:04:18:a9:
4b:9c:03:5e:17:80:31:21:42:30:8a:ad:77:c7:15:
e7:b8:d8:f3:1f:35:71:5f:06:b8:bb:ab:80:e6:15:
1c:cb:b9:6a:70:31:b1:b9:da:98:b9:b9:e3:57:48:
51:76:94:e3:34:67:09:59:44:77:12:e4:c7:71:84:
c3:2b:a1:db:8a:79:2b:5d:20:ff:93:3d:d4:55:a9:
91:69:53:2e:39:7d:af:75:dc:79:d9:c6:be:df:b4:
99:60:15:43:e6:69:53:4b:4c:d8:c5:17:68:b0:41:
1a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:FE:95:35:8F:EC:9C:FA:57:31:7B:61:DB:14:7F:A5:FD:3E:4D
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:8a:30:fc:ba:e1:b3:35:91:8b:f8:09:91:7b:4a:30:da:2f:
9d:51:62:42:03:d1:41:bb:0c:2f:00:c4:db:a6:ea:62:56:78:
18:a2:48:35:02:9d:89:10:f2:9c:f6:e7:6f:17:7a:75:4f:9e:
dd:f0:29:fe:71:7b:45:72:72:97:c5:d1:27:62:a6:3b:8f:58:
61:4f:42:2e:c5:09:92:4e:cb:53:07:f3:10:ae:ab:73:c7:e1:
a0:bc:97:75:16:83:0f:e2:ce:5c:94:01:b6:6c:cd:9c:a7:08:
f1:7c:fd:25:f8:58:8b:c3:81:47:77:35:64:48:4c:6f:6c:ea:
a1:4c:2a:5b:b8:ea:cc:f5:ec:69:06:05:67:44:74:6e:fb:d9:
c7:59:c9:b0:0b:3f:c4:1b:91:82:76:58:20:71:09:da:65:92:
ee:89:7a:24:3f:7f:60:46:da:a4:80:72:b6:a6:96:c8:21:c0:
76:59:44:4d:c0:6b:48:04:e5:b8:fa:8b:8a:a1:a8:ad:fa:dc:
59:cb:a4:1e:f5:76:f1:e4:4c:e8:8e:6f:a3:dc:b1:69:12:60:
ac:fc:6e:aa:2d:29:93:db:d2:59:96:50:aa:d3:72:58:59:ec:
e1:1f:52:40:27:6f:80:11:29:7a:be:05:3b:d5:b1:cb:4c:db:
cb:7e:30:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:59:09 2025 by rpki-client