
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
File: vD3h6YQAgLg8ZSeM3qheopiClIE.mft (raw, json)
Hash identifier: UKf8YD3tw0AvbAZ29KdbbUqfYlYm9bASwXftzGEzJhQ=
Subject key identifier: 69:F8:03:E2:BD:67:3C:43:57:91:8E:F6:6B:DF:FC:EC:9F:33:CB:9F
Authority key identifier: BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
Certificate issuer: /CN=F36FCA07AF/serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Certificate serial: 02C0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
Manifest number: 02B9
Signing time: Sat 23 Aug 2025 04:03:55 +0000
Manifest this update: Sat 23 Aug 2025 04:03:54 +0000
Manifest next update: Mon 25 Aug 2025 04:03:54 +0000
Files and hashes: 1: vD3h6YQAgLg8ZSeM3qheopiClIE.crl (hash: vCzkfEePyhAYGMS4gW3A9vdU8SZDXAUP0Yh/Qaqu28U=)
2: B8CAC7A2985B11EFB8B2954E762E951A.roa (hash: 0SM5T8NNVkyg9HDp47V5o7gPmb06fjxNsfa8bT7ZCeg=)
3: 878D493881A211EE930A1D244AD9E6FC.roa (hash: zLISAvhBvxTn3b4oaLe3yfM1aFnsxwTljhKhQX5W/BU=)
4: BC17C6B4985911EFB44BE2BE762E951A.roa (hash: Bo/5IgYc6mUDXUlEMJ0TGF8yZL8JGbJAqfj9nRlvJTE=)
5: 2710C32E985C11EF9F3C7A50762E951A.roa (hash: bmsEiP38JU+Ehb3iR+wE1cNU6seqsv/LKiiqBY7usJI=)
6: 02E6D31E985A11EF9E664242762E951A.roa (hash: kGG1RiMSP23E2TSxLvJ3oRzrbpa7GUjmAWIe62Zi+WQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704 (0x2c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FCA07AF, serialNumber=BC3DE1E9840080B83C65278CDEA85EA298829481
Validity
Not Before: Aug 23 04:03:54 2025 GMT
Not After : Aug 25 04:03:54 2025 GMT
Subject: CN=68a93daa-d04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:0a:9f:ac:9b:04:ea:66:9b:39:3e:fc:d5:
b2:fe:30:35:f2:7b:82:cf:75:14:2a:a7:d2:29:d9:
8d:5b:eb:fb:52:0e:06:09:15:a9:a5:42:67:ad:2c:
5b:b6:c2:8f:a1:0c:c8:58:42:02:00:8d:38:2c:ca:
08:69:d6:01:d4:ef:d3:59:cd:b7:59:49:8f:c1:8e:
dd:02:01:50:96:dd:c9:a9:bf:2d:d4:82:4d:5a:e3:
68:a6:d2:5b:e5:89:61:7c:6f:77:b4:2f:a7:b1:de:
be:a6:55:94:b5:a4:63:29:dc:62:93:ef:55:e1:cc:
34:f6:fa:03:05:b4:a9:6f:76:18:d0:0c:21:c5:b0:
71:c0:71:38:cd:64:9f:13:1e:5a:db:b4:dd:92:d3:
34:47:17:3a:25:d1:70:f7:60:71:aa:23:b2:dd:82:
43:45:6a:e1:21:2a:f2:22:30:f3:03:1d:b6:c6:e6:
dd:d6:d7:b3:e7:24:79:54:e3:7c:37:42:8b:81:6a:
e2:89:f4:97:59:8f:23:cd:68:39:38:3a:8d:03:cf:
38:74:48:50:ee:54:88:b1:d5:be:9c:20:a5:ee:03:
8e:44:c2:22:c7:09:7d:03:2e:19:67:40:92:79:2d:
e8:08:c3:cc:95:18:cd:b1:8c:5c:08:b7:5f:ed:8c:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:03:E2:BD:67:3C:43:57:91:8E:F6:6B:DF:FC:EC:9F:33:CB:9F
X509v3 Authority Key Identifier:
keyid:BC:3D:E1:E9:84:00:80:B8:3C:65:27:8C:DE:A8:5E:A2:98:82:94:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vD3h6YQAgLg8ZSeM3qheopiClIE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FCA07/8A4B771C72B111EEA0E0096E4AD9E6FC/vD3h6YQAgLg8ZSeM3qheopiClIE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
89:2c:18:88:63:b0:83:92:27:1c:d8:8d:52:6c:13:fd:07:ad:
fc:72:69:9a:94:56:6d:ad:d2:e5:d0:51:eb:cb:8e:c7:92:07:
ea:28:a0:5a:c3:bf:20:b9:1b:c3:d1:fd:78:6a:be:c7:18:0d:
db:5e:f7:ca:91:86:5f:be:cc:0a:fd:b5:f5:bb:65:63:52:19:
76:6e:03:68:40:fe:c2:21:1f:cc:58:e4:ee:65:5d:1c:ee:cc:
f2:40:01:27:13:55:ae:38:d5:25:4d:2c:c1:f5:96:5d:8f:88:
25:08:9a:66:8b:c0:5e:eb:b7:79:c9:9b:57:87:fe:e5:28:c8:
b7:e6:09:99:6e:8a:c5:6d:08:63:11:18:91:38:be:dd:db:95:
4a:13:eb:ae:ce:c3:58:03:c6:a4:a8:2e:79:3a:bb:d1:65:7a:
13:63:58:9e:9d:3d:de:7b:b5:70:eb:14:48:e4:19:25:17:3a:
f0:9e:d9:39:76:30:7d:e3:15:4f:45:28:47:5b:df:8e:dd:33:
ea:62:8c:a7:fe:ee:6c:39:07:bd:e8:67:82:96:53:ad:f3:a2:
08:bf:c1:27:5d:4a:8b:b1:67:2b:c5:fc:7e:53:d7:9f:4d:a6:
92:0b:46:93:7e:ef:34:01:fb:ed:18:43:a3:aa:7d:c9:73:8b:
cc:97:ae:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:51 2025 by rpki-client