
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File: -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier: Yq5LCDWGlr5J0fFVVYo+MxjA935HIv6C9hmegutrUTw=
Subject key identifier: 6B:7E:85:46:1C:AD:80:34:39:7D:EA:2F:57:E7:DF:B8:9D:C2:4E:15
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer: /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial: 0291
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number: 028C
Signing time: Sat 23 Aug 2025 04:09:54 +0000
Manifest this update: Sat 23 Aug 2025 04:09:53 +0000
Manifest next update: Mon 25 Aug 2025 04:09:53 +0000
Files and hashes: 1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: lUAe5SF9BckGr7qsyb2qCB4BySpxxRrHvtBOFnixgoE=)
2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 657 (0x291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D9765AF, serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Validity
Not Before: Aug 23 04:09:53 2025 GMT
Not After : Aug 25 04:09:53 2025 GMT
Subject: CN=68a93f12-3b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:7d:ec:c9:94:81:e8:fd:a6:a5:96:51:12:
a7:f7:ca:12:f1:14:dc:ec:88:17:7a:1f:34:b5:8d:
48:e0:8b:ab:5f:f1:9c:99:fa:21:87:99:85:51:dc:
4c:a6:75:88:af:41:9d:73:09:98:65:d7:4c:2a:1c:
74:f7:d1:d4:98:ac:a6:d8:af:08:2b:49:8e:4b:31:
aa:ca:b0:b2:53:4f:d9:ea:92:e9:d7:1b:b1:67:c3:
ce:cc:fc:f9:17:d6:e8:84:1c:93:88:c6:a8:e8:a1:
67:9c:ce:c7:45:51:0b:42:a6:83:e0:72:84:6e:df:
6e:dc:25:3f:cb:ab:5f:c0:9c:6e:52:05:61:fd:c4:
c6:ba:a5:38:c0:b1:52:7f:82:50:d0:f7:9e:26:6f:
be:da:09:a3:c5:6c:5b:62:a3:f5:51:4c:8b:69:0c:
2f:37:58:71:cf:81:d6:b5:7d:2d:8e:4e:16:1a:09:
11:32:45:b9:03:62:ea:36:aa:e2:a9:f6:cd:42:0e:
b8:1c:7d:ad:2b:e1:92:72:c2:a7:c3:3f:15:e5:a0:
bc:6b:56:3b:80:2b:47:d4:df:ef:68:57:2a:95:de:
59:79:f4:ec:51:de:f5:23:b5:32:ec:65:36:bd:50:
74:b4:5b:d1:04:51:44:d5:f8:e6:c1:23:8b:6a:36:
96:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7E:85:46:1C:AD:80:34:39:7D:EA:2F:57:E7:DF:B8:9D:C2:4E:15
X509v3 Authority Key Identifier:
keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:a1:08:ad:fa:9b:18:c4:08:6e:18:a6:e7:4e:07:ab:8f:
96:ab:fc:1b:75:49:00:a2:3e:55:97:ac:60:17:a0:0a:32:89:
68:df:1f:3a:7d:18:1e:1b:25:dd:b5:5d:a0:14:8b:d3:47:b5:
22:9b:39:23:dc:a7:27:f9:c8:05:be:a5:85:b4:fb:9e:11:78:
ea:05:b7:c7:7d:22:5b:fb:97:b4:cd:97:aa:08:d5:a9:c1:5d:
f8:03:cf:64:23:1a:bf:55:e2:ec:6f:08:93:ad:89:41:e2:ab:
f5:41:12:e3:a7:b7:88:3b:34:87:ab:03:94:0a:3a:9a:e2:f4:
f3:db:cf:1c:35:e4:5e:4e:ee:17:44:c3:0a:9b:cd:f7:08:19:
28:9f:01:86:bd:72:0d:f6:99:1f:be:94:2d:85:c0:f5:14:29:
6d:68:d5:af:68:6d:32:4a:22:04:d0:e3:f1:a8:0f:35:4e:73:
ba:82:9e:df:61:d5:15:b1:93:42:55:8c:ac:c3:5f:5c:06:34:
6c:e6:85:63:06:73:f7:16:13:a7:50:67:e8:26:29:33:cc:60:
72:9f:f2:79:4d:73:67:be:8a:cf:55:01:7e:d1:eb:4f:d7:5e:
07:60:a8:77:6d:eb:c6:c3:cc:cb:2d:b3:71:90:ab:fe:40:05:
cf:96:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:30 2025 by rpki-client