Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File: LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier: zr19yqx0F2vFsb6BecER11XLhtOevMNvYjXe4VuICyc=
Subject key identifier: 52:86:D3:9F:64:CF:6E:5E:49:9D:43:5C:9E:2B:61:3D:DD:50:65:6C
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer: /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial: 05F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number: 05F0
Signing time: Sun 27 Jul 2025 02:25:39 +0000
Manifest this update: Sun 27 Jul 2025 02:25:38 +0000
Manifest next update: Tue 29 Jul 2025 02:25:38 +0000
Files and hashes: 1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: oWqRXLqzfw8boGAT+Tz4qQoqvRtvgHUJx64Rcu2EdgM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1520 (0x5f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Validity
Not Before: Jul 27 02:25:38 2025 GMT
Not After : Jul 29 02:25:38 2025 GMT
Subject: CN=68858e22-4a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:74:89:1a:6d:ca:9c:27:1b:eb:17:6a:e6:
37:70:04:f3:c2:4c:f2:c3:7a:ed:4a:be:56:e7:51:
af:7c:11:d2:04:a0:79:70:50:1e:82:76:21:d8:ba:
53:49:22:cc:40:54:31:84:11:47:d9:ea:0e:40:b2:
c7:d6:f3:c0:6d:30:67:80:12:f1:1a:55:da:c1:1e:
96:81:2a:2f:01:72:9e:a0:85:87:55:91:72:2d:ab:
8d:52:04:f0:52:b4:10:13:98:30:1a:82:8a:1b:ad:
4e:bd:ed:ed:a1:68:a9:7a:55:5e:5b:50:2c:41:db:
7e:35:72:20:25:a2:ec:71:46:85:61:bf:c2:52:90:
20:3e:6f:ff:56:30:da:03:3f:0c:50:7b:bc:e9:6a:
60:cc:46:10:1f:4a:cb:b0:41:cf:0f:7d:a6:3b:64:
39:e0:92:68:be:f0:6b:66:f9:f8:d6:b7:09:5f:66:
ee:40:7c:33:ba:f1:1a:76:ef:ca:47:59:51:12:94:
c5:c5:84:5b:04:60:93:09:25:e9:03:76:c9:47:f7:
e1:68:25:6e:81:c7:ee:1c:48:9f:5e:b9:9f:6b:66:
e7:1f:5b:f0:b1:68:77:d9:54:e2:81:e6:de:0f:83:
61:5c:e4:fa:08:83:88:7c:e8:47:50:2f:ed:59:42:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:86:D3:9F:64:CF:6E:5E:49:9D:43:5C:9E:2B:61:3D:DD:50:65:6C
X509v3 Authority Key Identifier:
keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:e4:1e:c8:99:d6:35:07:d8:f9:3b:29:0f:6b:60:7a:ea:dd:
48:3d:5d:a7:ac:37:fa:21:3c:e4:8d:d7:70:90:c6:0a:0d:7f:
f9:ff:90:2f:dc:00:aa:9f:8e:2a:cb:06:a2:88:8d:f9:dd:30:
29:35:6e:ed:7c:01:67:08:12:45:35:78:a1:4e:46:c1:c2:24:
7b:9d:b3:23:db:d2:12:45:73:b1:29:5c:23:af:c5:6f:07:52:
63:20:b8:01:91:5f:66:82:ad:25:c8:6f:60:38:15:ab:af:76:
be:c5:80:6f:74:2c:5d:b5:56:78:09:d6:4b:1d:52:f7:a2:a4:
04:bf:9c:9a:22:df:39:9e:f6:f9:f5:57:3d:44:ea:ed:6f:c7:
03:1e:d3:d4:ba:f7:b0:40:8b:c7:63:81:e4:49:46:7b:6f:2c:
cc:e1:b8:2a:02:b9:ac:e5:c9:ed:e7:49:09:7a:3c:b6:03:bd:
21:df:0d:18:d6:31:dd:bc:a8:b1:5e:d2:a4:74:c7:2c:71:78:
93:bc:68:c8:b4:b3:96:29:6a:31:64:61:6d:27:01:df:6b:62:
75:eb:5d:0e:bb:b2:b8:00:d3:06:8e:cb:0d:e3:2f:10:68:e3:
8d:eb:7a:dc:6c:06:09:b0:18:4c:07:e0:a5:e8:bb:dc:da:1c:
05:49:54:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 01:10:01 2025 by rpki-client