
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
File: lyz9rusSb2_NRpalkPcBiDeqX_I.mft (raw, json)
Hash identifier: tKODKdOT9806knsZGU0x5LTdRQd4hsaRm4AB9f969l4=
Subject key identifier: BB:FD:D2:D2:F6:AC:EE:4F:AF:6E:E5:AD:BB:45:3F:7B:64:8F:64:F6
Authority key identifier: 97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
Certificate issuer: /CN=F36EBDD7RI/serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Certificate serial: 063D
Authority info access: rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
Manifest number: 063C
Signing time: Sat 23 Aug 2025 02:16:38 +0000
Manifest this update: Sat 23 Aug 2025 02:16:37 +0000
Manifest next update: Mon 25 Aug 2025 02:16:37 +0000
Files and hashes: 1: lyz9rusSb2_NRpalkPcBiDeqX_I.crl (hash: 1TMN+/noZ2jT66wK4lHS9eguEAqZ416PNM1QEFjnsU0=)
2: FCF2744EE4DD11ED83CFE7E95C736454.roa (hash: 7tfnNvaHIqZ7VHDcLuyEzEdaFsax5cOARy6FVza2SjE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1597 (0x63d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EBDD7RI, serialNumber=972CFDAEEB126F6FCD4696A590F7018837AA5FF2
Validity
Not Before: Aug 23 02:16:37 2025 GMT
Not After : Aug 25 02:16:37 2025 GMT
Subject: CN=68a92485-46dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:c5:37:aa:f9:8d:64:48:18:b2:77:5f:52:
e1:fc:e7:c2:51:98:1c:d6:b4:06:ec:e6:05:fd:ba:
f5:13:d7:13:50:a1:4e:88:42:ca:0a:d2:0d:91:3f:
5f:f9:6f:94:4c:9a:5f:04:d3:d5:b4:e5:76:7f:d7:
2f:9b:09:48:82:ad:ae:89:46:e7:39:23:88:00:98:
ed:15:fd:43:19:2d:a0:6c:d4:b1:f3:32:79:1e:2b:
74:84:c8:9e:7b:7f:89:6f:d5:c9:9e:f7:75:bc:32:
ae:fa:0b:9e:be:90:9f:10:a2:ff:61:13:b8:31:1c:
28:46:44:f7:1a:7f:3a:07:5f:02:84:ea:b5:de:eb:
26:12:be:1e:3c:55:41:ad:d2:c2:16:c1:c4:0b:8d:
f6:c8:44:d0:6e:7d:c0:7d:74:23:31:90:56:91:c9:
a4:ce:14:01:87:98:20:47:5c:7e:b0:af:81:2f:b7:
0f:5d:11:d6:d2:35:c0:ce:39:66:23:b0:bc:cc:6a:
22:88:89:48:39:1e:9b:32:08:1f:55:be:0d:7b:61:
0f:fe:c9:9c:fd:cc:a5:50:14:f9:48:2e:2e:56:03:
6a:2f:59:32:e7:89:bc:54:f5:69:4d:34:86:aa:e8:
00:48:e2:47:51:5b:22:eb:f2:35:97:56:db:51:12:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FD:D2:D2:F6:AC:EE:4F:AF:6E:E5:AD:BB:45:3F:7B:64:8F:64:F6
X509v3 Authority Key Identifier:
keyid:97:2C:FD:AE:EB:12:6F:6F:CD:46:96:A5:90:F7:01:88:37:AA:5F:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/lyz9rusSb2_NRpalkPcBiDeqX_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBDD7/67F004C6BE1D11EB8576B942F8AEA228/lyz9rusSb2_NRpalkPcBiDeqX_I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
78:8b:ea:10:f5:86:a7:4b:df:71:b1:66:89:55:b7:8e:19:6d:
a2:b1:b3:f9:f7:d8:5d:58:84:68:15:b5:28:4c:da:fc:59:15:
f4:bd:19:c4:f6:43:15:88:69:37:ba:a0:09:34:77:67:42:ec:
ae:e2:30:93:34:98:04:3a:7b:b3:fe:6e:74:12:68:06:a8:1c:
e8:56:e5:a2:4e:b6:a7:22:51:24:ed:5b:14:ce:3a:5f:40:66:
58:d3:f6:b5:07:99:43:7d:3d:c7:9e:6b:57:5b:c9:88:d0:48:
45:1e:a2:30:ab:b0:61:88:94:6c:25:f1:ee:ce:8a:16:b0:e0:
d8:ec:b0:1b:f4:8c:1d:d0:4f:15:70:65:c6:51:88:8f:1e:61:
b9:89:76:8f:9f:b0:3b:96:31:40:bb:71:23:d6:7b:24:9a:7d:
72:46:c7:f0:2b:22:af:b6:89:10:2a:ab:8d:6f:bc:b4:a9:61:
20:12:4a:fc:11:da:79:e4:4f:16:9e:0b:2e:9b:3d:7a:86:20:
2f:f4:d6:2d:c4:87:d0:99:ca:a0:8c:10:f8:6a:f7:e3:3b:34:
1d:e3:c2:be:b2:60:7a:67:88:e8:ed:ac:27:d6:2b:ea:c9:17:
c8:5a:8b:aa:f1:15:a5:e2:4d:e0:50:4e:24:62:93:13:8e:2e:
32:76:88:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:35 2025 by rpki-client