Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier: 5K3bY7GeBGKBLOA68ATCs9v9SXI0CJYRTw/Qrx2oDwA=
Subject key identifier: 84:AA:8C:F4:FE:92:E5:49:73:75:F3:67:67:E4:87:24:80:81:B2:89
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer: /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial: 028F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number: 028D
Signing time: Sun 29 Jun 2025 04:04:25 +0000
Manifest this update: Sun 29 Jun 2025 04:04:24 +0000
Manifest next update: Tue 01 Jul 2025 04:04:24 +0000
Files and hashes: 1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: WUdFgv+nLzCEp56t5XgfItvJJQHE8dxhB6hlepaMndI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Validity
Not Before: Jun 29 04:04:24 2025 GMT
Not After : Jul 1 04:04:24 2025 GMT
Subject: CN=6860bb49-782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:d7:42:c0:50:73:ad:e5:e8:6d:9d:54:18:
b7:23:4d:eb:5d:ee:c0:c5:2b:25:76:fd:0f:7e:f2:
05:d3:63:1e:9c:d5:0f:c2:5c:03:f4:26:2b:81:b6:
69:ca:e3:38:f6:3e:fa:cc:2c:db:e2:ed:35:dd:e4:
15:81:b5:73:2c:0a:0c:33:2f:9b:dd:76:ad:a9:c9:
f8:e4:ee:74:88:cb:12:37:93:d7:bf:09:2c:d5:d4:
ab:0d:86:13:e5:71:ba:19:c3:3a:ae:f2:7f:e2:c6:
39:56:9a:af:8e:27:66:00:3c:0d:7c:20:23:80:85:
71:7c:21:61:67:d7:56:d1:12:c3:9d:8b:a4:20:b8:
49:d7:d3:82:83:04:86:da:e1:47:6f:9d:1d:59:72:
23:45:d8:47:55:58:47:17:ce:09:35:1c:a2:70:b3:
4b:7b:b5:4c:cb:7c:fc:e7:70:f7:3d:c1:c6:bb:42:
ab:79:9d:2a:70:19:d2:26:59:1a:5e:65:52:0b:9b:
99:47:30:55:ac:65:c9:77:13:9f:92:7d:19:b4:1e:
fd:82:0b:e1:6a:87:34:de:4a:3b:64:5a:43:c5:cd:
24:3d:69:5d:1d:ca:2d:58:ca:4d:ce:9c:aa:9c:e6:
ee:5e:f0:42:58:30:df:c1:23:ee:40:af:a1:ee:b4:
8c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AA:8C:F4:FE:92:E5:49:73:75:F3:67:67:E4:87:24:80:81:B2:89
X509v3 Authority Key Identifier:
keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0f:27:79:e1:9e:1e:8d:c2:a4:76:af:de:9e:c7:bd:1c:39:
47:36:bc:fa:b0:9f:d7:0f:ae:3d:03:db:9d:43:1c:95:74:d0:
f0:a3:3d:95:0e:30:0e:f7:ae:3b:38:77:4d:ca:ad:aa:f7:e8:
67:e8:23:e7:a9:f0:fd:c3:04:dd:1b:97:cd:f2:59:4f:ec:42:
ef:50:25:48:e1:ef:9d:04:8a:5e:d5:00:fa:7f:84:56:f7:56:
4b:ee:83:54:9e:17:c2:89:76:59:bc:43:c7:70:03:0d:09:bd:
82:ff:3e:f2:06:2f:d6:7b:c5:bd:12:e3:e2:a5:5b:dc:20:29:
d1:5e:59:ff:70:06:c8:7c:40:c5:09:42:5a:f4:3a:3d:84:a6:
8d:cd:33:82:d1:51:90:ae:5e:c0:f8:f7:b1:15:df:66:b8:b8:
f7:bc:20:cc:46:d6:78:6b:c9:69:c9:8f:35:b5:dc:80:4f:74:
31:b6:09:4c:7f:1f:c0:ef:74:af:c3:0c:a2:5b:5f:28:b3:6a:
2f:a9:98:37:28:6f:76:83:75:92:e5:5f:c4:38:68:59:36:83:
f7:73:a1:e0:be:9c:f3:2d:85:60:79:4b:a5:ca:8c:61:fb:bd:
bd:27:33:9a:bb:01:db:c9:f4:5a:17:bf:c6:9f:48:26:a5:13:
e1:b3:9b:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE5NkRBRjExMC8GA1UEBRMoODAzMDc3N0M3NEQxQUYxMjg5ODEwRTQ0RjVGRUND
OUNGMDk3M0EwRTAeFw0yNTA2MjkwNDA0MjRaFw0yNTA3MDEwNDA0MjRaMBgxFjAU
BgNVBAMTDTY4NjBiYjQ5LTc4MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7StdCwFBzreXobZ1UGLcjTetd7sDFKyV2/Q9+8gXTYx6c1Q/CXAP0JiuB
tmnK4zj2PvrMLNvi7TXd5BWBtXMsCgwzL5vddq2pyfjk7nSIyxI3k9e/CSzV1KsN
hhPlcboZwzqu8n/ixjlWmq+OJ2YAPA18ICOAhXF8IWFn11bREsOdi6QguEnX04KD
BIba4UdvnR1ZciNF2EdVWEcXzgk1HKJws0t7tUzLfPzncPc9wca7Qqt5nSpwGdIm
WRpeZVILm5lHMFWsZcl3E5+SfRm0Hv2CC+FqhzTeSjtkWkPFzSQ9aV0dyi1Yyk3O
nKqc5u5e8EJYMN/BI+5Ar6HutIzDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhKqM
9P6S5UlzdfNnZ+SHJICBsokwHwYDVR0jBBgwFoAUgDB3fHTRrxKJgQ5E9f7MnPCX
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBOTZELzc5MEEwNDJDNjZDRDExRUU5NTNFRDE3MDRBRDlFNkZDL2dEQjNm
SFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dEQjNmSFRScnhLSmdRNUU5ZjdNblBDWE9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE5NkQvNzkwQTA0MkM2NkNEMTFFRTk1M0VEMTcwNEFE
OUU2RkMvZ0RCM2ZIVFJyeEtKZ1E1RTlmN01uUENYT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCuDyd54Z4ejcKkdq/ense9HDlHNrz6
sJ/XD649A9udQxyVdNDwoz2VDjAO9647OHdNyq2q9+hn6CPnqfD9wwTdG5fN8llP
7ELvUCVI4e+dBIpe1QD6f4RW91ZL7oNUnhfCiXZZvEPHcAMNCb2C/z7yBi/We8W9
EuPipVvcICnRXln/cAbIfEDFCUJa9Do9hKaNzTOC0VGQrl7A+PexFd9muLj3vCDM
RtZ4a8lpyY81tdyAT3QxtglMfx/A73SvwwyiW18os2ovqZg3KG92g3WS5V/EOGhZ
NoP3c6HgvpzzLYVgeUulyoxh+729JzOauwHbyfRaF7/Gn0gmpRPhs5us
-----END CERTIFICATE-----
Generated at Sun Jun 29 18:50:08 2025 by rpki-client