Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: MwnL7DRkdGsX4Cce30hCGhuCCNBirfQCeRmQsyIKT78=
Subject key identifier: 3F:F0:9E:01:A5:C0:14:4D:D8:6F:EE:D8:7B:C8:23:23:0B:DE:F8:9F
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 55
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C2
Signing time: Tue 27 May 2025 11:30:14 +0000
Manifest this update: Tue 27 May 2025 11:30:13 +0000
Manifest next update: Thu 03 Jul 2025 11:30:13 +0000
Files and hashes: 1: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
4: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: 5mgqLvbsN+h6+1rgk3HAAuTeJIjCWNxjNeE+Dd8jdd0=)
5: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
6: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 11:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: May 27 11:30:13 2025 GMT
Not After : Jul 3 11:30:13 2025 GMT
Subject: CN=6835a245-6fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:7e:a6:89:d4:b5:e8:3a:85:12:83:6b:76:
62:b5:1c:43:cb:0d:02:22:c7:8a:db:1a:4e:30:00:
b1:b7:52:ac:b8:c5:80:10:ad:c1:6a:5b:ee:77:5f:
94:3e:59:cc:fa:0c:51:fc:15:d0:48:bc:78:79:3a:
9c:e5:9d:c6:71:07:cd:51:a6:14:02:3b:3a:77:ed:
1b:ee:b0:a9:08:bb:ec:b1:e7:b4:04:34:93:6c:81:
8f:90:d1:9b:f9:fc:e0:4d:00:70:f8:11:bf:85:9d:
ea:57:a2:e4:ff:90:df:41:b3:25:c7:d0:06:83:a8:
a0:af:50:2b:07:20:48:da:03:45:2e:91:06:43:1f:
09:2d:38:62:d6:97:3b:2f:99:6a:e8:74:cf:f3:ef:
e2:17:e4:bd:74:87:58:fe:10:48:0d:e2:28:c6:0d:
7e:4a:29:18:a2:50:35:5a:79:6b:c1:22:dc:33:1c:
08:2e:b5:f7:7f:9c:8a:e6:51:f4:31:a7:84:02:d7:
be:df:ad:fc:a4:7d:3b:b3:5f:e8:b6:41:c7:86:57:
0d:29:c0:d4:4d:ae:35:c7:43:12:89:7e:0d:bb:ca:
ed:56:70:e3:69:35:2a:81:4d:b4:1f:f7:98:9b:61:
64:1f:75:70:f8:be:02:4b:a5:da:d6:d5:7f:89:b7:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:9E:01:A5:C0:14:4D:D8:6F:EE:D8:7B:C8:23:23:0B:DE:F8:9F
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
be:15:47:02:e7:45:68:68:77:0e:25:74:29:04:ed:56:3e:e5:
6c:06:39:da:64:67:6f:ba:e4:8f:07:8d:bf:69:fb:51:db:bc:
17:50:ee:b7:ec:bc:96:f5:c9:37:41:5a:4e:c9:63:8e:77:be:
95:cc:dd:82:fb:67:91:29:49:7b:b7:2e:f2:83:eb:7c:98:d7:
b6:9f:bf:2a:b3:61:c8:a1:ce:0b:41:0a:c1:f8:f4:43:48:d6:
97:79:b4:bc:ce:76:c7:38:fe:6b:42:63:31:5e:42:8f:80:6e:
38:1a:ba:de:f8:fd:cb:ca:d7:da:79:7b:fd:2b:38:5b:f1:40:
6d:5f:75:c7:81:d7:3b:49:83:81:86:10:6f:43:5a:5b:ac:c4:
a3:38:8a:9e:b3:52:0a:b1:14:e3:c5:66:c0:52:83:9e:e6:1e:
73:21:14:34:b8:15:03:3e:b1:df:f1:7a:b4:b1:f5:92:fb:85:
bc:03:92:e0:d7:59:63:72:de:1b:a1:79:12:15:40:1e:f5:4f:
b1:9a:fc:a0:d3:ef:72:b7:0c:23:1e:05:9e:be:a9:89:1c:97:
5e:49:c9:d8:49:53:a3:b7:d5:eb:86:01:90:70:82:58:ca:fe:
c2:25:f0:6f:9c:cf:30:cb:3e:45:ab:33:ed:c1:0c:58:bd:ec:
70:f6:32:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:16:55 2025 by rpki-client