Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: nmmkuF0NTVQ3SJR8sGD6Eeks8RnXP2eOPeYwKXjF97k=
Subject key identifier: 82:34:FA:57:2F:92:90:92:80:55:53:42:89:5E:9A:F4:16:F1:7C:C8
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 0215
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 0214
Signing time: Wed 02 Jul 2025 04:21:40 +0000
Manifest this update: Wed 02 Jul 2025 04:21:39 +0000
Manifest next update: Fri 04 Jul 2025 04:21:39 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: qXPDyYM7dLrAnwajmaWInqJF73VGP0Fnz0KUDaLzgRE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 04:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 533 (0x215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jul 2 04:21:39 2025 GMT
Not After : Jul 4 04:21:39 2025 GMT
Subject: CN=6864b3d4-2b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:2c:d6:67:a4:58:5c:23:f1:ea:9d:12:43:
a0:1a:ad:f3:e9:3e:20:5d:ab:2f:48:f5:95:ec:bc:
92:6d:36:0e:0f:02:2d:2a:c1:39:35:41:3e:76:80:
19:95:cc:57:8b:b9:01:21:6c:1f:91:5a:24:fb:0f:
0e:1f:25:76:54:8f:2f:89:9b:db:e9:9a:00:0e:c1:
85:67:82:c8:28:d7:f3:8f:2b:e1:d0:85:c0:a8:91:
c5:98:2e:78:f3:aa:8e:0c:d1:e3:42:90:56:a0:b2:
0f:58:ea:af:aa:ed:92:42:43:f0:4b:cb:8b:cc:ce:
58:ff:a5:cf:31:2f:52:33:8f:35:7b:7f:f2:db:d9:
95:32:08:21:cb:0e:27:d4:68:64:9d:e4:b2:a3:61:
e4:20:eb:3e:c3:81:ff:f8:8b:66:38:09:8e:ee:f0:
80:d5:c0:2c:0d:a9:4c:6d:15:02:68:9b:10:bc:ce:
1f:c0:6a:22:9b:65:74:9b:f1:83:28:8c:15:39:54:
83:31:47:e9:27:20:a2:1f:48:93:47:dc:18:8a:ae:
2c:06:49:4b:7e:ae:36:02:a6:ef:b9:73:84:7c:ba:
32:1c:55:79:96:c0:36:32:fc:ac:13:ab:45:a7:c1:
dd:30:a7:c6:1b:bb:0e:3c:7b:7d:6a:b6:ff:ac:05:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:34:FA:57:2F:92:90:92:80:55:53:42:89:5E:9A:F4:16:F1:7C:C8
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:82:09:94:ce:07:60:fc:cd:69:9c:0e:f8:da:9b:af:3d:de:
d1:a2:9c:0f:37:96:64:cd:b4:a3:f6:e3:4b:ff:e2:a5:0b:cd:
c2:9e:7b:68:89:23:1f:af:64:c8:c7:1f:e1:20:21:17:9c:fc:
d1:37:d8:a4:85:76:97:ff:b7:66:30:b1:48:b3:9a:38:f4:8c:
ac:cf:63:e7:6f:d5:c2:a3:97:5a:59:91:b8:74:4e:ab:53:c7:
1b:8c:88:a5:0f:6b:e3:78:67:db:78:48:51:fe:85:4c:9b:cc:
8e:13:67:eb:b3:c2:e9:b1:83:7b:4c:c9:a9:d1:19:25:ef:c5:
a4:43:eb:1b:85:fc:aa:6d:1c:d2:30:98:05:af:81:12:9d:c7:
5d:dc:f9:c3:28:76:58:c8:7c:46:0b:f3:88:16:3c:66:1b:24:
f6:c8:7c:09:3b:5c:c9:ee:6e:9b:7a:f5:2a:63:1b:92:28:65:
aa:1a:c6:11:a9:4a:00:77:e7:f7:5c:d8:0e:4f:9a:b5:e9:72:
e6:1f:c6:7c:82:40:90:61:cb:a8:28:65:e5:e0:53:c2:84:7f:
97:7f:5e:0d:32:72:1b:9e:8a:c9:e1:9c:92:d7:5d:cb:82:47:
5b:b7:34:c6:01:23:df:89:b7:5b:e8:38:9f:95:ea:ac:2d:13:
85:ed:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:30:11 2025 by rpki-client