Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: H+wdidoYxBdf/1odDJ2hlxn5FRwaHGpqsy7whAnwrEQ=
Subject key identifier: C7:B5:F9:9F:69:49:B7:BB:A9:A4:6F:5B:4E:E5:6A:3D:43:02:A1:17
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0CE3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0CE3
Signing time: Thu 31 Jul 2025 01:08:01 +0000
Manifest this update: Thu 31 Jul 2025 01:08:00 +0000
Manifest next update: Sat 02 Aug 2025 01:08:00 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: AhnLjiC6IxCGeq5knIW77Ga5poq/0v6tesTze6F9610=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3299 (0xce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Jul 31 01:08:00 2025 GMT
Not After : Aug 2 01:08:00 2025 GMT
Subject: CN=688ac1f1-62fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:50:d9:4c:50:7b:a6:a3:59:8d:46:9c:4c:86:
90:95:8b:a8:a9:b9:0c:10:20:d2:13:a4:39:dc:2f:
db:5a:c1:81:4e:29:46:5e:33:7e:48:0e:a9:66:00:
7f:e5:41:65:7a:8b:f2:a1:0d:99:6e:c9:98:04:d0:
6f:14:18:75:81:32:6e:08:f2:96:43:94:60:da:f8:
13:15:11:cb:f2:78:a6:54:82:03:c2:6d:b2:86:55:
43:80:db:23:fe:30:88:d2:2e:73:88:65:99:20:a3:
34:62:11:d0:ae:8e:c1:50:06:72:ec:3e:bb:1b:b1:
8b:3c:41:f5:fd:3c:41:c0:02:02:27:33:5c:44:fe:
12:0b:9a:9c:55:21:a3:54:0e:b8:8e:0d:a2:47:eb:
5e:78:83:ea:ce:77:46:66:fd:f7:ed:bb:cf:37:b6:
32:5f:56:b2:e7:33:86:c6:b9:4e:b3:8f:77:73:fb:
0f:b0:1c:7a:9d:d6:b1:b8:1e:0c:f4:59:bf:05:83:
62:4c:df:38:a3:6a:0b:3a:ed:76:81:e5:41:8e:f1:
b6:7e:0c:bc:ce:13:d6:dd:74:27:d7:cb:f8:6a:a4:
d5:a8:5c:4f:dd:30:98:5f:bd:84:bd:21:c6:7d:c6:
25:35:9c:ce:2e:5d:40:09:eb:a6:c7:91:08:b0:85:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B5:F9:9F:69:49:B7:BB:A9:A4:6F:5B:4E:E5:6A:3D:43:02:A1:17
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:84:84:2e:84:a8:e6:71:d3:3f:cc:48:9c:d4:fa:16:ad:68:
b6:09:96:75:7a:c6:8f:2c:0c:8f:26:66:6a:6c:99:3a:a2:25:
d1:7f:33:ba:40:fa:09:40:2e:da:9e:c2:9d:87:b5:f4:56:8b:
0c:22:42:59:49:ea:bc:18:1e:ed:93:34:fb:7a:aa:89:d3:26:
67:9b:91:b3:ee:17:25:53:50:2e:63:90:72:1a:76:25:d6:0a:
33:6e:12:e1:65:e0:e9:9f:42:58:70:aa:0a:37:17:d4:0d:e9:
e7:b7:bb:3b:17:66:4c:df:99:42:c9:32:50:0d:11:8a:45:d9:
3f:4a:db:b6:e5:e5:b3:10:e6:77:54:0f:8b:76:cc:f7:54:bb:
65:2d:50:97:9f:24:2b:25:0b:82:aa:ab:f2:df:20:a1:b9:ba:
18:ac:e6:8a:43:6b:1a:d8:49:ec:86:a2:0d:48:6c:38:b9:3a:
1d:b3:e1:e0:73:84:de:03:73:1d:62:de:12:0d:ed:64:45:99:
f1:48:d1:ea:fe:ca:f1:35:16:1f:46:ac:62:32:e6:85:6a:04:
00:99:58:16:be:cc:b7:c4:48:84:c9:4b:fe:3f:a3:61:53:16:
0d:60:d4:99:7e:81:92:cf:f8:a0:7d:7e:ef:03:3b:e3:99:64:
5e:2b:5a:f1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDOMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTUwQzFBRjExMC8GA1UEBRMoNjM2MDVBOEExMjRGOEVDQTI2REY2NkE3MzFBNjQ1
RENDODMxOTQ5NTAeFw0yNTA3MzEwMTA4MDBaFw0yNTA4MDIwMTA4MDBaMBgxFjAU
BgNVBAMTDTY4OGFjMWYxLTYyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxUNlMUHumo1mNRpxMhpCVi6ipuQwQINITpDncL9tawYFOKUZeM35IDqlm
AH/lQWV6i/KhDZluyZgE0G8UGHWBMm4I8pZDlGDa+BMVEcvyeKZUggPCbbKGVUOA
2yP+MIjSLnOIZZkgozRiEdCujsFQBnLsPrsbsYs8QfX9PEHAAgInM1xE/hILmpxV
IaNUDriODaJH6154g+rOd0Zm/fftu883tjJfVrLnM4bGuU6zj3dz+w+wHHqd1rG4
Hgz0Wb8Fg2JM3zijags67XaB5UGO8bZ+DLzOE9bddCfXy/hqpNWoXE/dMJhfvYS9
IcZ9xiU1nM4uXUAJ66bHkQiwhRHxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx7X5
n2lJt7uppG9bTuVqPUMCoRcwHwYDVR0jBBgwFoAUY2BaihJPjsom32anMaZF3Mgx
lJUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1MEMxL0YwNEY2QThBODU1MzExRTZCQTM1Mzc0QkY4QUVBMjI4L1kyQmFp
aEpQanNvbTMyYW5NYVpGM01neGxKVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1kyQmFpaEpQanNvbTMyYW5NYVpGM01neGxKVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTUwQzEvRjA0RjZBOEE4NTUzMTFFNkJBMzUzNzRCRjhB
RUEyMjgvWTJCYWloSlBqc29tMzJhbk1hWkYzTWd4bEpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBahIQuhKjmcdM/zEic1PoWrWi2CZZ1
esaPLAyPJmZqbJk6oiXRfzO6QPoJQC7ansKdh7X0VosMIkJZSeq8GB7tkzT7eqqJ
0yZnm5Gz7hclU1AuY5ByGnYl1gozbhLhZeDpn0JYcKoKNxfUDennt7s7F2ZM35lC
yTJQDRGKRdk/Stu25eWzEOZ3VA+Ldsz3VLtlLVCXnyQrJQuCqqvy3yChuboYrOaK
Q2sa2EnshqINSGw4uTods+Hgc4TeA3MdYt4SDe1kRZnxSNHq/srxNRYfRqxiMuaF
agQAmVgWvsy3xEiEyUv+P6NhUxYNYNSZfoGSz/igfX7vAzvjmWReK1rx
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:34 2025 by rpki-client