Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier: fzpIO8YrsUaifUoqw77Iv+5kf85NjK33X8qFzCKQAig=
Subject key identifier: 9C:23:F8:2C:0E:6E:03:19:6C:C5:26:88:77:5B:5F:42:03:14:34:F6
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer: /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial: 0922
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number: 0921
Signing time: Tue 01 Jul 2025 01:21:35 +0000
Manifest this update: Tue 01 Jul 2025 01:21:34 +0000
Manifest next update: Thu 03 Jul 2025 01:21:34 +0000
Files and hashes: 1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: vUnr2zN4Fd67l/T20AOxKa79F3DlAAm92E8Lt64wvIc=)
2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 01:21:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338 (0x922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Validity
Not Before: Jul 1 01:21:34 2025 GMT
Not After : Jul 3 01:21:34 2025 GMT
Subject: CN=6863381f-73fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:54:74:b1:f1:4f:3e:fd:2e:f8:70:c9:99:
15:09:a2:7b:b3:1b:30:51:bf:72:cf:2e:b9:90:d1:
e1:a8:f4:a5:b1:0e:f0:a4:b9:6b:31:44:d4:74:cc:
d4:29:87:9d:bd:63:d6:8c:8b:86:4d:b9:fb:31:e1:
5d:1a:f1:25:73:5d:fa:93:bd:da:48:36:b5:44:84:
43:fb:20:4e:46:58:2a:f0:af:33:eb:ee:93:31:46:
ba:93:6b:b1:23:8b:b4:6b:bb:10:ae:f0:d2:3c:fc:
34:33:68:0b:7e:a1:f5:8a:ce:e3:13:06:a0:ea:f2:
aa:ec:f7:c3:09:ae:f7:0c:21:bc:01:4a:60:84:16:
dd:c7:1f:fa:e2:7e:02:82:ac:17:4b:2d:f4:a5:d3:
98:47:3c:3b:c1:47:0f:bf:b2:28:67:e9:6b:9f:4b:
30:62:77:a4:e5:46:3f:9e:79:aa:83:87:36:da:ee:
69:29:b6:1b:de:e6:6d:19:f3:05:34:8a:a9:c7:5b:
1c:06:c6:ef:e0:f7:51:ab:10:26:99:fa:d8:8d:fd:
e5:34:b3:1e:34:12:51:31:d1:00:46:15:e1:ed:55:
7d:43:a0:31:2e:99:ce:06:d5:0a:62:c6:a6:02:da:
6b:e6:09:b9:e4:8e:31:71:0c:6d:0d:e6:c9:ae:b6:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:F8:2C:0E:6E:03:19:6C:C5:26:88:77:5B:5F:42:03:14:34:F6
X509v3 Authority Key Identifier:
keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:5c:c7:c8:91:f5:4d:e6:db:73:52:d9:ea:37:f8:7a:d1:
09:47:42:a2:4c:2c:c4:7b:cf:ac:b3:c1:81:3b:b7:4d:f0:28:
72:f2:ac:eb:8f:b7:0b:ae:2b:56:a0:06:c9:a3:a1:f7:1d:ad:
42:4f:85:09:a7:da:5a:dc:82:6e:63:97:e2:03:b3:80:57:17:
61:aa:ff:f3:52:23:d4:c0:b8:56:cb:1d:80:90:f0:de:18:db:
1b:ed:99:ac:7a:59:d1:33:a2:8c:1e:ab:6a:9d:7c:82:89:91:
b4:d6:a8:47:14:9b:ec:60:76:d8:c3:24:17:55:71:56:00:44:
dd:78:3a:e5:27:23:83:65:ce:25:9d:25:d0:a8:ab:d8:bb:ea:
41:73:c9:01:0f:18:c1:6d:fb:55:34:15:82:ef:d8:35:4e:a5:
d5:58:62:60:9b:71:c0:48:93:91:84:00:d2:b7:10:03:c5:8d:
2a:9c:a0:1b:ef:60:80:3f:85:9f:38:ad:3a:57:ee:53:c7:86:
ce:47:05:bc:21:29:21:aa:c1:e0:d7:1b:72:d1:f3:90:89:7d:
68:b7:f4:be:ef:d9:25:3d:f8:f4:d2:b1:cf:0a:9a:14:3e:e8:
60:2f:72:42:7c:7c:86:a6:24:53:cc:f4:c5:f1:5c:85:bc:81:
55:ac:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:03:14 2025 by rpki-client