Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: jWRQbnzKhdqDOqLBGLPqdW7ebfgM3X93jT/Air2Gyzk=
Subject key identifier: 68:D3:2A:E1:B5:C4:58:BF:C6:F4:69:1F:38:D5:A1:69:6C:47:65:0F
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 02E6
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 02E5
Signing time: Wed 30 Jul 2025 03:58:00 +0000
Manifest this update: Wed 30 Jul 2025 03:57:59 +0000
Manifest next update: Fri 01 Aug 2025 03:57:59 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: h6vK/zgzxFH/Ya47Q7C/6bAsiS1I4Tg7+boPnGRITiY=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 01 Aug 2025 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 742 (0x2e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: Jul 30 03:57:59 2025 GMT
Not After : Aug 1 03:57:59 2025 GMT
Subject: CN=68899848-e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ac:9f:d1:12:86:a3:4c:21:a3:f1:b8:c1:ca:
ca:68:f3:fa:f7:11:ba:fe:5a:80:bf:66:a0:60:8a:
9d:04:61:87:47:87:4f:41:06:28:05:d3:3c:d2:20:
aa:20:3b:7e:ef:33:b4:f6:57:02:4b:a1:47:4c:82:
f4:e1:ab:19:b7:05:11:1f:c5:3a:4e:a8:26:9e:00:
d4:41:dc:99:c1:80:5d:df:92:bb:25:dd:b5:de:44:
fd:5a:5e:93:e9:0c:4a:6d:fe:86:f7:af:a2:1b:6b:
45:5c:25:0d:8c:2a:e8:dc:61:ca:3b:1b:a6:94:d6:
59:44:05:ca:c7:e7:5b:ee:7c:36:53:0c:c1:88:89:
ad:0e:3c:ff:e4:12:e4:22:bb:d3:5d:98:02:a5:55:
2e:f6:25:1f:98:9b:3d:5b:f1:0c:54:43:fb:08:51:
3a:0a:47:61:6b:c6:f5:f2:0e:26:1e:3f:7b:68:62:
6e:eb:8f:5f:7c:a1:d0:09:3d:a7:c2:3b:be:cb:10:
70:8f:4d:b5:65:e3:78:19:7d:5d:65:41:e6:5b:60:
d6:dc:30:c5:eb:ae:be:7c:20:a0:c5:50:4b:fa:90:
15:c6:4c:fc:98:aa:67:ac:e1:86:fb:0b:8a:46:75:
3d:8f:7a:e3:0e:34:7e:26:cc:1e:38:a8:9a:cb:f1:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D3:2A:E1:B5:C4:58:BF:C6:F4:69:1F:38:D5:A1:69:6C:47:65:0F
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b5:04:c6:8e:8e:0d:8e:46:33:ad:7a:70:33:fa:92:97:b5:94:
cf:6f:e1:33:e1:ee:f4:23:85:ea:24:af:e4:10:56:63:5c:f2:
40:7f:c8:69:f5:af:aa:69:f3:9e:07:52:8e:26:bc:44:8a:c0:
34:c6:ba:c4:bc:9e:98:03:da:c0:c0:b6:f2:94:92:c8:8a:d6:
e4:d6:7d:97:a8:9a:f9:70:3e:a3:1c:b9:5f:d9:8d:60:26:26:
d9:4d:71:03:7d:df:10:39:45:42:83:55:9f:72:9b:5f:2c:47:
82:29:c1:27:a9:49:79:a9:5e:db:bf:21:6f:10:f4:20:57:0c:
40:31:34:4e:61:52:89:e7:20:c0:1c:11:e4:61:d0:e1:a8:ea:
e2:32:79:85:ea:43:ec:11:d6:c7:e7:f0:30:9d:08:16:7b:bd:
fd:2d:9e:09:0a:7c:52:a8:b2:43:5c:00:4a:43:c7:60:51:64:
3f:a5:ec:9f:9e:91:2f:3e:7c:c1:2e:aa:f7:3a:a6:05:1b:84:
c6:c1:f6:ad:38:53:fe:29:5c:a2:62:a7:1b:33:67:da:63:48:
2f:21:81:67:2f:e8:81:02:4d:b8:79:e7:2b:cd:90:7f:9a:9e:
eb:d4:a4:38:00:15:12:e6:c0:ca:cd:18:b8:8a:8b:c3:ef:75:
2e:55:4b:7d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTA3MzAwMzU3NTlaFw0yNTA4MDEwMzU3NTlaMBgxFjAU
BgNVBAMTDTY4ODk5ODQ4LWUzNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDrJ/REoajTCGj8bjByspo8/r3Ebr+WoC/ZqBgip0EYYdHh09BBigF0zzS
IKogO37vM7T2VwJLoUdMgvThqxm3BREfxTpOqCaeANRB3JnBgF3fkrsl3bXeRP1a
XpPpDEpt/ob3r6Iba0VcJQ2MKujcYco7G6aU1llEBcrH51vufDZTDMGIia0OPP/k
EuQiu9NdmAKlVS72JR+Ymz1b8QxUQ/sIUToKR2FrxvXyDiYeP3toYm7rj198odAJ
PafCO77LEHCPTbVl43gZfV1lQeZbYNbcMMXrrr58IKDFUEv6kBXGTPyYqmes4Yb7
C4pGdT2PeuMONH4mzB44qJrL8RRTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUaNMq
4bXEWL/G9GkfONWhaWxHZQ8wHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1BMaOjg2ORjOtenAz+pKXtZTPb+Ez4e70
I4XqJK/kEFZjXPJAf8hp9a+qafOeB1KOJrxEisA0xrrEvJ6YA9rAwLbylJLIitbk
1n2XqJr5cD6jHLlf2Y1gJibZTXEDfd8QOUVCg1WfcptfLEeCKcEnqUl5qV7bvyFv
EPQgVwxAMTROYVKJ5yDAHBHkYdDhqOriMnmF6kPsEdbH5/AwnQgWe739LZ4JCnxS
qLJDXABKQ8dgUWQ/peyfnpEvPnzBLqr3OqYFG4TGwfatOFP+KVyiYqcbM2faY0gv
IYFnL+iBAk24eecrzZB/mp7r1KQ4ABUS5sDKzRi4iovD73UuVUt9
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:46:15 2025 by rpki-client