Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: JdQTcl3nXFOpIPdKNuERpHbqJ5O3fyPObGbQLs8vE/w=
Subject key identifier: 55:09:CF:E8:4F:D0:7B:DA:83:CB:64:6B:3A:87:28:FC:23:D8:0A:E7
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 05F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 05F7
Signing time: Sat 23 Aug 2025 02:26:02 +0000
Manifest this update: Sat 23 Aug 2025 02:26:01 +0000
Manifest next update: Mon 25 Aug 2025 02:26:01 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: AEcyfTLLhga1ybHD7Vy1QNV7A86AlRYKLzu70F4HlO8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1529 (0x5f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Aug 23 02:26:01 2025 GMT
Not After : Aug 25 02:26:01 2025 GMT
Subject: CN=68a926ba-bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b9:c5:de:d0:a3:36:7f:bf:f7:b3:92:bb:d6:
7d:c8:ba:78:4e:c1:8a:a6:8b:51:b1:b6:8b:e4:23:
a1:52:cc:ca:fb:f4:bc:d0:ca:bc:49:3f:05:fb:d5:
e6:06:59:4e:0e:40:5d:f1:1e:fd:cd:bf:c5:1f:77:
02:07:c9:f4:01:be:eb:c7:c2:ba:3f:d0:dd:fe:9b:
ac:c7:0f:a4:88:75:a1:6c:ff:32:84:45:bb:4f:5f:
33:a2:b0:d8:f4:d7:70:73:f1:b7:01:dc:c6:99:ad:
8b:7f:a2:47:35:dc:32:08:7d:43:d7:2f:6b:ad:ba:
25:ee:62:ef:81:ca:99:1a:17:e6:3f:c7:70:9d:50:
42:95:13:d2:ac:db:5a:4e:a9:ac:c2:48:0c:65:92:
33:db:66:5a:b0:6e:ae:ee:3a:c8:4e:2b:ab:e6:03:
3b:43:0a:16:1f:17:3d:20:c2:c9:5c:a6:f1:4e:e2:
53:e0:15:3f:f9:34:30:78:ce:1a:19:50:17:8c:7e:
f0:e0:5c:25:db:74:38:91:ac:a2:f2:7f:67:02:1b:
bb:c9:4f:4f:a3:0e:e9:47:e5:51:0e:bc:7b:2b:98:
23:87:1f:bc:c1:5f:69:20:c7:56:d3:5d:4d:dd:f4:
3a:fb:5f:5f:00:a3:42:5b:b5:f8:c5:bc:9b:26:d8:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:CF:E8:4F:D0:7B:DA:83:CB:64:6B:3A:87:28:FC:23:D8:0A:E7
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9a:a2:0d:b9:2f:f6:61:1f:cc:63:06:f1:78:84:25:06:28:
52:7e:57:62:23:df:6e:4d:5d:bc:2d:ef:81:c0:ca:95:7c:1d:
00:75:af:ef:d9:ce:bb:73:13:4c:0a:86:87:f9:f8:d6:dd:3d:
15:d0:e1:9f:02:1f:45:97:9f:30:1c:1e:c3:95:6f:4d:ac:45:
01:a8:31:f7:d6:be:1d:c1:c5:8d:78:e6:b5:59:60:fb:14:f1:
31:e1:38:b6:25:66:b4:3a:c1:97:39:fa:32:31:29:bb:6b:07:
87:73:53:af:64:38:de:65:b5:cc:4c:2a:a7:7f:ec:15:34:1e:
1c:0d:95:65:38:10:60:6e:2e:d2:32:b4:f8:fc:fe:dd:79:05:
24:13:de:75:4e:c2:ba:71:df:9f:59:6b:5f:90:9b:c4:a2:d6:
f6:66:cd:2a:91:37:f1:af:6a:1e:dd:f5:95:9b:78:67:2e:c6:
28:c2:af:6b:cc:18:67:30:c2:e0:67:19:0f:80:62:f5:d7:06:
10:6d:6a:0c:2a:ed:79:fb:9a:c7:61:61:2f:db:26:63:25:5c:
53:21:d5:21:30:8d:11:b3:1b:aa:89:32:80:b3:f2:0b:5e:8e:
c8:eb:02:b4:19:85:f0:7e:b6:56:59:c6:b1:10:96:2b:95:58:
4c:3f:c0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:05 2025 by rpki-client