Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File: v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier: AB5Br00m7lTpDe4r/fZ6BAf5RKHiaiJtt+jGhOsB6P4=
Subject key identifier: 2A:5F:77:01:36:D9:D0:94:ED:6B:BF:6A:9A:A3:CF:6E:C6:36:77:09
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer: /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial: EE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number: EE
Signing time: Wed 17 Sep 2025 04:49:52 +0000
Manifest this update: Wed 17 Sep 2025 04:49:52 +0000
Manifest next update: Fri 19 Sep 2025 04:49:52 +0000
Files and hashes: 1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: tnNbzxv5O/xJWUntnTTUkW32+TQeqfdLpgWoqnWnaio=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Validity
Not Before: Sep 17 04:49:52 2025 GMT
Not After : Sep 19 04:49:52 2025 GMT
Subject: CN=68ca3df0-16b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1a:ae:42:39:80:6c:3a:e2:e6:6d:20:a2:aa:
79:55:4d:eb:a7:0f:81:42:c7:c0:83:5d:e3:eb:c4:
be:2f:98:7e:31:65:0f:91:d8:a6:ee:b9:e3:3c:88:
f7:55:c2:59:9e:44:21:96:1f:3e:6d:d9:cd:f5:a0:
41:47:a9:5d:68:2d:1d:90:5b:47:0f:cf:58:f4:ed:
6d:62:dc:0b:f9:82:c2:5c:1f:1f:f2:d7:1a:00:2a:
9b:14:a9:11:9e:3f:c4:c6:78:84:69:ea:1f:bd:a4:
87:cd:b7:a8:d0:62:b1:46:73:21:65:0d:95:23:14:
a0:2a:95:11:76:00:5d:4a:2a:80:24:93:11:6c:f1:
27:ee:f5:0d:a5:51:c0:8e:b4:d5:b0:1b:07:7e:e0:
76:0b:0e:ac:61:c4:62:55:1c:97:c1:a7:50:1c:91:
34:f2:4c:d1:19:2f:c0:18:11:40:5c:ac:86:27:ac:
20:64:4f:47:d8:ca:f2:50:cd:d7:69:21:7a:45:1d:
2a:29:a4:70:53:e2:81:56:a4:7b:d4:57:91:86:83:
0b:98:0b:a3:e2:4e:9b:85:13:72:01:20:9e:b0:fa:
dc:56:27:75:6a:99:b1:9d:2b:79:ab:ff:4d:39:cd:
07:07:5a:33:c1:44:cc:52:8a:8f:b6:62:ac:96:02:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5F:77:01:36:D9:D0:94:ED:6B:BF:6A:9A:A3:CF:6E:C6:36:77:09
X509v3 Authority Key Identifier:
keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:1d:b5:43:0c:9b:db:13:2b:dc:f8:09:24:d4:5b:ae:89:c5:
9b:30:83:9c:f9:f9:b0:fd:c2:01:fc:27:10:70:3b:49:bb:9b:
8b:59:f1:38:f2:ab:af:1c:e0:6d:13:6e:62:69:85:77:cd:65:
d2:99:7b:10:4b:6e:ef:12:48:f2:06:9d:56:65:74:d7:47:05:
0a:2d:80:a8:48:ed:5c:29:dc:40:19:21:32:9a:5f:7e:6b:fb:
1f:c1:43:fb:27:0f:0c:6c:88:41:aa:a1:3b:51:30:31:71:dd:
bf:b6:9d:66:cd:08:58:99:9e:23:e5:4e:83:40:9e:58:88:c7:
a2:1f:64:e6:de:bd:32:6c:7e:2c:8c:ea:2e:56:f2:c7:7d:25:
54:73:50:c7:f7:16:d3:5c:48:85:84:00:8e:3a:8b:85:41:9e:
f1:25:ec:6c:88:82:29:14:d2:8a:31:e3:62:fa:46:e5:a5:4e:
bf:63:60:bb:d2:ac:be:ae:8b:59:be:60:e1:da:00:67:2a:eb:
eb:f6:26:a3:42:6c:f3:5b:fe:8f:c0:04:73:14:40:a4:08:7f:
58:55:ae:13:2e:b1:71:64:3e:70:58:9d:66:f4:cc:20:43:85:
18:dd:43:54:7c:75:fb:39:38:45:14:7a:72:18:b1:4f:98:90:
5d:a9:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:38:47 2025 by rpki-client