Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File: QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier: eXpEcxbl0l4/lxg9AzRaD/BqhryTSPNpQnrTdygZThU=
Subject key identifier: 80:E5:AE:FC:45:43:7A:14:47:F2:C3:2F:83:DF:60:05:6F:5B:72:42
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer: /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial: 0EAC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number: 0EAB
Signing time: Sat 23 Aug 2025 00:53:06 +0000
Manifest this update: Sat 23 Aug 2025 00:53:05 +0000
Manifest next update: Mon 25 Aug 2025 00:53:05 +0000
Files and hashes: 1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: WENmUrPhKgz+EFU+BOyLmiTLb78Dq59jxyiU4lcVcu0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3756 (0xeac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Validity
Not Before: Aug 23 00:53:05 2025 GMT
Not After : Aug 25 00:53:05 2025 GMT
Subject: CN=68a910f2-1005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:93:8d:52:1c:4d:2c:10:e6:47:7c:71:7d:
5c:49:d6:f7:9f:c8:05:da:25:d9:c0:57:9f:39:15:
7c:ca:de:9e:3e:20:aa:56:6c:d8:f8:f7:dd:b4:ed:
ec:1e:3c:f9:31:06:27:e0:c1:54:f7:07:6a:74:bd:
79:35:82:0c:94:42:9d:37:44:45:b9:a1:83:f8:bc:
36:cd:8b:d7:47:0f:50:39:12:14:35:cf:ad:01:af:
2b:06:cb:34:a9:ef:99:91:4e:9b:31:fa:d6:81:3d:
35:e1:fd:44:13:1e:44:59:d8:bc:73:8b:bd:91:01:
84:b4:7f:cd:b3:61:25:82:06:a5:8c:15:d6:47:00:
c0:a1:86:76:f3:4a:d1:4e:54:6d:11:78:02:cb:08:
e8:4f:73:6f:07:62:d8:6a:82:c2:f4:2c:6d:9b:2f:
d6:d0:fc:e6:91:32:fd:db:ce:28:86:bf:ee:10:e0:
8c:7c:8e:50:51:89:37:75:94:43:6e:33:63:0f:c5:
47:67:34:90:ff:5f:75:84:e7:49:b1:a0:39:c3:d6:
87:2f:f6:4f:27:6f:c0:76:4d:5c:65:9a:18:cb:d4:
36:96:75:0f:d4:53:71:29:7d:54:b5:60:4d:3a:f7:
af:19:da:99:f8:16:62:10:db:86:7f:0f:74:f5:d0:
ad:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E5:AE:FC:45:43:7A:14:47:F2:C3:2F:83:DF:60:05:6F:5B:72:42
X509v3 Authority Key Identifier:
keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
02:0e:cb:36:0c:3c:66:d2:49:60:7f:8b:ff:53:ea:95:20:02:
2b:d2:7f:e4:62:5e:b5:c9:64:9a:d9:12:60:6e:71:45:32:fa:
3f:5c:d9:c7:ae:6d:d4:be:4c:fc:40:00:2d:33:8f:20:11:1d:
8c:19:63:a8:bb:fb:da:93:61:9a:84:bb:56:46:38:4d:27:a7:
d9:48:c6:bb:c5:bb:ae:30:9e:7e:09:46:14:29:80:9c:3c:35:
3e:2a:73:0d:33:f1:79:62:5c:66:d4:c9:42:d4:0d:cc:e0:4f:
23:f5:35:b2:d7:bb:fc:5d:5a:6f:ea:06:ca:fd:8c:60:e4:75:
16:1f:4d:62:a0:27:7e:ad:16:86:74:5c:bb:b5:8c:2a:94:45:
39:bc:c8:9f:17:61:d0:dd:b5:83:b0:1d:03:d6:8f:74:00:8a:
d6:ec:87:a3:53:1c:b1:80:71:df:f8:05:d4:da:45:de:80:df:
0c:82:04:a4:5f:eb:80:ad:9a:87:e8:b6:5a:72:c2:ce:6b:69:
52:3a:c9:ec:f3:ef:fc:fa:79:60:0c:3b:6a:99:b0:b2:41:be:
7f:f8:bd:76:64:8a:b9:92:27:4f:3f:8e:6f:ed:8f:9a:c4:14:
0a:2d:fd:26:48:e5:9c:97:05:be:c7:43:06:54:f7:21:9b:e6:
04:9d:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:45 2025 by rpki-client