
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File: r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier: nx2TVeJwNMVmDXE/hPdObOyJ0ud0VxE3sVbzz+7hB4M=
Subject key identifier: E3:F0:B9:2C:47:9E:41:CD:EE:58:FE:07:73:FD:E9:54:56:70:0A:6E
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer: /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial: 01B1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number: 01AD
Signing time: Sat 23 Aug 2025 04:36:18 +0000
Manifest this update: Sat 23 Aug 2025 04:36:17 +0000
Manifest next update: Mon 25 Aug 2025 04:36:17 +0000
Files and hashes: 1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: +6jSxV3O6tpiHupijQtfcB5OakICkSj30TNLjqUOEuE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433 (0x1b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Validity
Not Before: Aug 23 04:36:17 2025 GMT
Not After : Aug 25 04:36:17 2025 GMT
Subject: CN=68a94542-2a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:72:bb:51:62:b3:19:e2:fe:00:f7:9b:5c:
97:16:7a:96:70:57:1e:3f:25:67:bf:28:42:c6:63:
14:6e:88:a0:59:7c:99:cc:92:0e:bd:40:92:e5:95:
b4:67:bc:00:96:a8:13:c2:f3:e9:f7:6d:19:2f:5a:
01:0c:38:28:0a:dc:12:08:9c:a0:7e:e7:13:0f:02:
d9:75:e0:68:75:b5:7d:d5:3c:22:81:19:31:d8:29:
32:e2:33:3d:06:26:ba:f6:cb:0a:38:7f:c6:72:50:
a1:f8:2b:d8:18:76:3a:7a:f8:f9:a0:16:8c:f5:c6:
18:e7:4e:70:44:19:04:04:0b:a0:a0:e3:01:65:01:
9a:5f:53:fe:c9:c8:c4:54:e7:44:4d:5e:dd:c3:74:
04:dd:5e:7c:5c:7f:f0:72:ef:93:93:4a:9f:79:98:
6d:df:d1:d2:85:c6:55:43:8d:d4:ed:b3:38:2e:4b:
19:2c:00:35:1f:cf:42:62:ab:65:10:07:49:71:43:
00:f1:89:b6:85:4f:5a:45:2e:d2:79:50:22:de:cc:
e9:89:74:11:05:56:1a:78:5e:e1:8a:4a:30:bb:a0:
1c:51:3d:0b:08:b5:1e:a0:ad:fe:2e:0d:91:f8:1b:
d7:f6:9e:50:b5:3e:00:3e:0d:34:83:50:84:c6:21:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F0:B9:2C:47:9E:41:CD:EE:58:FE:07:73:FD:E9:54:56:70:0A:6E
X509v3 Authority Key Identifier:
keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:38:92:b4:5c:04:a7:b6:61:75:4c:6b:8b:98:c5:96:44:e6:
c9:38:c5:73:9d:1a:57:6c:de:6f:90:76:ef:37:52:d0:15:34:
ff:fe:6e:e4:62:4d:6b:6c:5e:0a:51:a0:c9:ba:b2:60:f1:2e:
6a:62:2c:a2:34:df:27:e3:e6:cf:7a:a3:8f:67:bf:28:98:cb:
50:62:19:14:b4:24:b9:44:5c:be:db:cb:a6:18:98:ee:91:8f:
64:9d:09:84:0a:cd:30:52:15:b8:d5:a8:27:7d:5f:8b:a2:b3:
7d:4a:25:6f:b8:f4:37:d3:f9:27:8a:24:61:d3:19:3d:74:1e:
21:52:92:59:bc:f3:1e:b0:57:83:0f:02:c0:89:4b:8e:ae:2d:
c5:9f:77:01:ca:05:68:f1:67:9a:f7:67:58:2a:03:b4:bb:63:
f7:51:1a:cf:42:1d:a4:00:9b:c2:76:af:2e:ac:4b:38:e8:09:
62:87:3e:75:73:4d:8b:a0:b3:0f:30:95:a7:8f:dc:09:d3:07:
13:e4:fc:9f:fb:ff:df:5a:b1:d7:f6:19:29:8a:7b:e7:cd:98:
94:6a:50:d4:8d:ce:c5:a0:41:89:36:9a:fb:c2:48:c3:99:ee:
0d:ef:12:ac:6d:b4:b2:3b:d6:76:64:b4:72:5a:0c:bd:99:37:
8a:3c:93:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:58 2025 by rpki-client