Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File: HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier: aGgYwySEKHgoRSWLQQZ3r6dclShEq3cvuo1COrRzmcU=
Subject key identifier: 83:A8:73:A1:94:B1:4C:F4:45:37:28:6C:B0:9A:2E:BE:26:C3:61:EE
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer: /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial: 0367
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number: 0363
Signing time: Sat 23 Aug 2025 03:40:14 +0000
Manifest this update: Sat 23 Aug 2025 03:40:13 +0000
Manifest next update: Mon 25 Aug 2025 03:40:13 +0000
Files and hashes: 1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: D8lCnr3Yze5Qx4PSUJ5w0w1Q9lAY9bv/BRKRGl3W7M8=)
2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 871 (0x367)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Validity
Not Before: Aug 23 03:40:13 2025 GMT
Not After : Aug 25 03:40:13 2025 GMT
Subject: CN=68a9381e-9bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:f4:8f:57:4b:56:37:89:44:28:c5:0d:76:
01:7b:a1:c6:c9:f4:9c:42:de:3d:cb:2a:86:c6:aa:
4a:72:e5:ff:87:2d:17:ef:43:ae:1f:24:6d:f2:b5:
0e:59:06:8b:0e:31:5c:1a:26:49:9a:fa:9d:a5:98:
02:1f:ea:14:d8:4c:04:e2:29:24:9e:34:5e:9b:4c:
d0:03:66:24:b8:f9:96:71:68:d6:56:10:51:ba:6c:
01:96:b0:e9:aa:bd:de:e8:d4:ae:d3:db:ea:1d:a2:
2a:da:db:bc:c2:1a:b6:37:32:64:d1:e0:54:72:8b:
94:c6:45:a4:57:01:d5:0e:07:8a:29:04:b0:e2:aa:
f3:28:ae:80:8a:ce:93:b1:1a:2a:4f:59:6c:9f:49:
a9:8e:8b:24:3e:22:ad:27:2b:00:e1:1c:fd:d0:7e:
9b:89:c6:03:98:18:4e:a3:19:4e:aa:8f:09:db:1b:
48:66:b5:42:e4:ca:c9:41:cd:f6:ec:de:96:e0:1b:
2d:c8:ba:b0:88:f2:f3:f1:3d:93:46:b2:fc:12:8b:
bd:19:ee:a9:77:a9:6e:b3:db:0d:77:4c:9c:01:42:
f9:3c:a7:4f:e6:1b:58:9b:30:73:f1:b5:95:85:bd:
f3:19:63:59:36:32:66:89:25:35:5d:65:83:57:69:
0e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A8:73:A1:94:B1:4C:F4:45:37:28:6C:B0:9A:2E:BE:26:C3:61:EE
X509v3 Authority Key Identifier:
keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f7:d2:e1:3a:02:f2:e6:59:76:05:95:19:9b:c9:ea:bd:ab:
e3:80:e4:75:73:6a:0e:1f:8e:66:9e:fc:4a:5f:0b:66:09:8f:
04:0a:97:fb:2e:d1:7c:e9:88:33:94:8c:03:8b:da:4d:c5:89:
8c:6c:0b:b2:1a:a9:52:42:4e:54:3a:a0:1a:69:af:27:5e:50:
eb:d4:ae:77:d1:d6:97:cd:7f:83:b9:76:0a:8a:82:0b:4e:64:
c7:a9:04:35:ec:7e:8e:eb:43:e1:96:8a:5d:bb:e6:02:d4:1a:
21:2a:fa:b7:e8:77:46:60:80:3d:72:9d:13:e2:50:2a:c4:0f:
a0:78:e0:03:60:a3:61:6f:8b:3b:0f:35:ab:a2:fb:c7:55:63:
fe:51:6c:4b:ba:6d:04:4f:87:ea:e3:23:3d:c0:e5:fc:56:ee:
15:14:f4:13:8d:e8:06:48:73:eb:0e:12:22:12:24:95:0c:f8:
c6:d6:7c:c2:ba:d6:69:43:16:ab:ea:fb:7b:56:de:85:3b:ac:
07:5d:5f:79:c1:a9:9d:43:d7:0a:ac:ee:9c:78:f4:51:fb:0c:
ed:6c:c9:63:e1:03:64:12:9a:25:99:6d:46:a0:f0:86:f7:fb:
bb:04:86:12:3f:ed:66:14:1a:b4:0b:f7:64:bb:f0:f2:26:9e:
7c:a0:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:51 2025 by rpki-client