Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File: OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier: vFtGMJZApCn8FVeM7Vwpqcpkb8jOynVSTfvsSmwIOXk=
Subject key identifier: E1:B8:32:2A:BE:07:EA:90:FD:4D:C8:5B:4F:BE:BB:5D:B5:DC:D3:BE
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer: /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial: 0620
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number: 061A
Signing time: Thu 31 Jul 2025 02:24:21 +0000
Manifest this update: Thu 31 Jul 2025 02:24:20 +0000
Manifest next update: Sat 02 Aug 2025 02:24:20 +0000
Files and hashes: 1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: D7eOAkGl3BkF3C4nR/ycgckATF90AVWRGwM4kd1/rdk=)
2: 5006E70E5E3611F0893678E9DAE4EC9C.roa (hash: +o+9Z0JPTJwXWASmZEn5sX4JUlRX+byFenFDA6I4P5g=)
3: 26D0B8E25E3611F0887D5CE9DAE4EC9C.roa (hash: 2tu3Ld1qF49GVl2mB5JFSgh0SJACUdEbR9uP9vjP6Xk=)
4: A42FDE0E5E3011F0B6CA0CC4DAE4EC9C.roa (hash: Ac2nu6upq7t1gl0xBIa3qrh3jUY/VotzPxg8MIknNhA=)
5: F426C5DA5E3511F08C38F3E8DAE4EC9C.roa (hash: 1sDWYH3f/HWstXqg5Qsn8hl+mqkD2R6cYH7ovhfNSnY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1568 (0x620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361ED63AF, serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Validity
Not Before: Jul 31 02:24:20 2025 GMT
Not After : Aug 2 02:24:20 2025 GMT
Subject: CN=688ad3d5-bbbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:7e:d0:a0:4a:5c:3b:f6:27:f6:72:bf:cb:
ec:fd:dc:d3:af:cb:b4:71:f1:98:92:52:8e:27:b1:
7b:ab:cd:5c:3d:dd:21:e6:aa:59:ad:f1:43:3b:62:
0f:fb:31:bb:07:ec:88:78:9a:61:a1:36:c7:3f:e6:
0c:e3:aa:7b:7d:97:33:e7:3a:dd:c5:77:49:ec:ac:
21:3d:ab:38:1b:12:6b:ce:2a:7b:f0:85:c1:23:44:
9b:71:01:96:e5:03:e1:36:e5:fa:7f:0f:7d:8a:0b:
c5:f3:1f:52:6c:23:a2:05:80:8d:f0:ad:48:68:4f:
ef:15:bc:83:f6:4a:47:fc:1c:27:95:fa:0d:98:e9:
dc:66:0a:61:76:9f:cd:4e:24:19:d5:92:39:c0:64:
c2:8e:89:5e:9d:7f:1a:30:98:a3:d9:47:06:55:2e:
71:84:e9:d5:bf:e2:6f:c1:d8:aa:32:9f:2e:8e:66:
84:ee:6d:2c:e8:3b:80:74:f2:a3:46:80:83:20:d7:
b3:ed:ce:47:fc:45:2d:25:84:41:7a:60:0c:af:92:
f5:68:c0:ef:7d:3d:06:96:8b:95:ed:c8:e5:a7:78:
ca:90:bd:38:dd:e7:cc:e4:a5:19:9d:f1:3a:9d:3b:
36:9b:31:ef:90:7d:d5:d3:ff:fc:8f:c2:63:59:f9:
7b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B8:32:2A:BE:07:EA:90:FD:4D:C8:5B:4F:BE:BB:5D:B5:DC:D3:BE
X509v3 Authority Key Identifier:
keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:0e:36:cd:0b:f1:ea:da:45:7f:15:fd:05:f8:7d:8f:c7:
79:a1:78:ed:d5:68:09:02:92:f2:1e:c8:a4:9b:f3:b6:9e:76:
fe:26:3c:7d:14:d8:ec:95:9d:03:51:46:2d:ea:ce:55:06:c0:
c8:d9:4e:76:d8:15:95:62:44:57:b7:aa:48:de:d1:42:64:20:
01:0a:76:e3:ea:c7:de:d3:e8:99:f9:d7:a2:40:0d:71:94:8b:
35:e1:26:2e:52:78:b1:de:90:b7:ce:f6:1a:00:5a:20:a2:cf:
2e:4e:c2:30:95:20:7d:e3:c1:a2:d8:8c:b9:6e:da:39:65:30:
fe:e7:56:d3:23:78:7b:b9:60:41:c7:53:69:91:b0:95:ac:30:
28:39:ca:fc:4b:ee:7f:5b:5d:ac:52:c3:61:53:46:b1:a2:23:
78:17:a3:36:40:a5:45:a3:55:15:a6:a7:6d:df:dc:4d:3d:46:
79:c8:14:68:d6:42:ba:d3:56:e1:f6:e5:bf:8d:83:ce:47:97:
af:f7:45:18:a8:09:14:43:c1:f4:9c:19:04:53:41:24:ac:70:
2a:9a:bc:3b:50:2f:37:c2:48:fb:da:3a:66:fb:f2:90:d0:bf:
e5:5f:5d:aa:6b:c9:81:0f:ec:36:28:c8:b2:e7:f5:f6:96:3a:
b5:d5:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:52 2025 by rpki-client