Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
File: c_ReAoX9cOku_fc2CqXtcWKLafw.mft (raw, json)
Hash identifier: Jc0mF9W37tk6TymiBmUciw4vgc0CaqN0not4Xq4pWBg=
Subject key identifier: F5:D4:40:71:C7:01:C0:FD:5B:A4:84:F7:6B:E6:E8:D7:B8:BC:5C:A2
Authority key identifier: 73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC
Certificate issuer: /CN=F36ED8A8AF/serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
Certificate serial: A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
Manifest number: A8
Signing time: Sat 23 Aug 2025 05:11:27 +0000
Manifest this update: Sat 23 Aug 2025 05:11:27 +0000
Manifest next update: Mon 25 Aug 2025 05:11:27 +0000
Files and hashes: 1: c_ReAoX9cOku_fc2CqXtcWKLafw.crl (hash: u3eSfrqOLICoecVOWDgWKiwMUS2yxiPrEYu+UlLCPOw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36ED8A8AF, serialNumber=73F45E0285FD70E92EFDF7360AA5ED71628B69FC
Validity
Not Before: Aug 23 05:11:27 2025 GMT
Not After : Aug 25 05:11:27 2025 GMT
Subject: CN=68a94d7f-de0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:b1:69:a6:dc:c4:3d:a5:ee:02:36:6c:02:
08:df:b9:6f:89:0b:85:d8:4b:b0:7f:e6:84:9f:22:
6e:53:d9:6f:97:86:64:ad:7e:3c:f5:ef:f8:dd:55:
a7:09:14:0c:a7:9b:ab:2d:b5:70:a9:f9:db:ac:75:
a3:b2:7b:87:b5:19:7b:48:37:41:e9:8f:67:1b:c7:
e2:93:31:1b:13:d7:57:0c:4e:6c:66:79:dc:29:2e:
c9:28:63:35:ab:b1:da:2b:a6:f5:91:a7:01:95:be:
bf:8f:e1:ee:8f:1d:14:14:6e:dc:c6:51:b4:c0:d4:
5c:7f:7a:46:ea:43:0e:4f:fa:7e:0b:63:61:a6:a4:
90:e6:9a:a5:41:67:f8:a9:26:ca:03:28:ed:a6:bb:
6f:ec:0d:53:cb:32:cb:61:0c:8e:08:56:50:c8:82:
24:d0:10:9e:ea:fe:90:f6:6c:ae:6e:9f:c7:cd:74:
27:cb:b4:62:b0:99:7a:e5:b9:1d:6e:75:67:b5:fa:
cd:c3:b0:2a:0e:61:db:ce:3f:d0:d1:f2:95:29:ff:
9c:b2:56:2a:92:0b:62:7c:54:65:d6:1b:fd:4d:a6:
bb:98:bb:6b:48:f0:b4:0b:80:db:f1:3a:2d:29:81:
37:0d:d7:47:1f:70:10:bf:66:62:b7:32:68:a6:d0:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D4:40:71:C7:01:C0:FD:5B:A4:84:F7:6B:E6:E8:D7:B8:BC:5C:A2
X509v3 Authority Key Identifier:
keyid:73:F4:5E:02:85:FD:70:E9:2E:FD:F7:36:0A:A5:ED:71:62:8B:69:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/c_ReAoX9cOku_fc2CqXtcWKLafw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/FBDD5384FE4A11EFBF439B79762E951A/c_ReAoX9cOku_fc2CqXtcWKLafw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2f:54:43:7c:b7:50:0b:74:06:91:95:27:ce:df:9d:fa:01:
98:2c:63:fd:1a:0d:22:3c:1c:7f:7e:26:e1:0e:6f:41:81:1d:
9f:51:35:d1:47:40:64:c5:be:e9:4e:b5:21:d9:8b:fa:c1:e4:
d5:39:d1:5c:05:21:8c:39:3a:48:0b:ba:ac:3a:04:ed:d1:42:
80:1e:05:a7:d6:2d:2a:de:e7:d2:23:9f:3f:72:5b:46:1d:42:
3a:b4:ac:b6:1a:78:c0:01:1c:b9:57:9d:56:ff:3a:2f:a2:f3:
39:e5:28:87:d3:93:2b:c1:b7:e0:5e:2a:40:0d:2d:25:20:e4:
39:3b:9c:18:0b:36:5f:19:5c:e6:7d:ea:91:7f:02:b9:0b:e0:
b1:a8:a6:68:4b:07:3d:02:7c:d6:ad:d7:fa:70:83:c5:b5:03:
8e:dc:8a:5f:6f:b5:77:a8:48:ce:ec:21:83:26:50:a0:cf:eb:
81:51:f0:e7:18:29:66:75:22:90:34:d6:e4:82:42:02:d1:f9:
62:28:d5:b0:64:33:e1:e9:ee:a0:88:a5:2d:f8:62:3f:0c:78:
ad:9e:bc:f6:14:99:0c:c4:76:1e:fc:c2:6b:3d:98:d7:27:36:
30:7b:23:7b:0d:88:5b:c8:f9:23:7f:f8:bf:0a:48:0b:fb:81:
4d:59:a2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:46 2025 by rpki-client