Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier: ufUtkgL8vtyQwB4gqqFG080LcRLY0dAW15tlXJBz9XQ=
Subject key identifier: FF:E9:AF:69:82:05:28:E6:4D:8B:49:9D:6D:EE:96:0B:07:05:F6:6D
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial: 019B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number: 0196
Signing time: Thu 31 Jul 2025 04:47:01 +0000
Manifest this update: Thu 31 Jul 2025 04:47:00 +0000
Manifest next update: Sat 02 Aug 2025 04:47:00 +0000
Files and hashes: 1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: I5rTOUkgp+qQ3w3Mumc4+vo9a9TWXNxYz6rwSMkTsiQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411 (0x19b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Validity
Not Before: Jul 31 04:47:00 2025 GMT
Not After : Aug 2 04:47:00 2025 GMT
Subject: CN=688af545-774c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a5:8e:67:9b:20:81:bf:b5:6b:63:74:f1:2a:
6c:dd:fd:12:aa:62:82:d6:8d:9e:9e:f0:cf:70:66:
f8:d6:e0:d5:bf:0b:09:99:a3:d9:00:cd:4a:da:3e:
2a:0e:f6:e7:58:4b:c3:cf:be:7e:50:d5:31:44:24:
9c:fa:9c:41:d8:62:93:7e:80:20:e1:2a:14:74:3e:
67:47:e1:15:de:92:64:03:93:8d:ad:36:f8:4c:c7:
22:a4:11:60:7b:84:9e:9b:bc:11:44:23:a7:77:6d:
af:fa:e0:4b:56:66:12:3d:13:e3:2a:6b:79:6f:bd:
4d:ea:65:bc:81:06:01:61:dc:54:66:69:5d:f8:23:
aa:9a:cf:75:53:2b:ff:48:99:00:87:7a:d8:a8:45:
59:c5:c6:ef:75:3f:6e:27:cc:5e:de:5e:b8:ec:f4:
6a:be:4b:14:2c:27:61:59:d4:ce:f3:7b:0a:77:00:
58:92:a6:b0:ad:e8:c9:dd:3e:46:db:a8:08:78:e3:
42:43:4d:2d:6a:bd:7e:e7:52:9b:e7:d6:be:29:31:
4c:58:cd:a4:63:c8:a1:de:ba:d4:63:5a:3b:61:51:
84:34:b1:fa:3f:65:57:68:e5:f4:d2:ca:db:67:c6:
b3:82:1a:c2:e3:9c:38:b8:1a:1d:8e:29:62:ed:f0:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:AF:69:82:05:28:E6:4D:8B:49:9D:6D:EE:96:0B:07:05:F6:6D
X509v3 Authority Key Identifier:
keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d8:b6:25:30:b2:c0:2f:db:a3:85:01:90:af:21:c3:d8:c3:9c:
7f:fd:63:93:9e:e1:23:b6:65:bb:58:ed:25:2d:cb:03:9c:e5:
a9:00:37:2a:f1:aa:ff:9b:06:bc:89:b1:c3:d2:74:e6:fd:4b:
1b:57:84:e1:31:69:7c:84:e7:a9:6e:f0:a5:f7:90:de:04:0b:
a3:c1:d3:5f:c5:5f:d2:c0:d2:81:43:ce:dd:ad:86:b4:9c:c9:
f5:db:d5:1f:c2:e1:7b:cf:af:88:a1:ca:9b:37:94:b0:d8:71:
0f:b3:4d:af:ef:bc:88:87:a2:c1:5b:ea:ca:af:5b:95:b6:b9:
28:6c:14:54:30:44:d5:cd:d0:65:7c:f3:19:fc:d2:3d:57:3c:
c9:2d:aa:19:d6:ff:0b:a7:20:b2:22:c0:e4:aa:cd:6e:d9:3e:
ca:b2:9f:c2:af:cd:8c:2c:0d:af:e0:f3:58:46:82:fd:76:16:
1c:8f:32:7e:91:42:01:ec:cf:c7:7f:62:9d:6c:bc:d8:1e:1e:
34:b4:57:a2:ac:12:9b:d4:2e:87:7a:2f:c2:63:85:58:11:ae:
0a:1b:97:58:30:ab:69:f4:65:a0:36:8d:14:66:71:ad:fc:79:
c6:68:81:e8:26:c8:10:34:6d:2a:7b:c4:45:a2:7e:81:52:aa:
59:be:2c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:51 2025 by rpki-client