Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
File: rlEpNifxvXqfU3iOKmXqBBNGpwI.mft (raw, json)
Hash identifier: MSM3BPhMPXJdorKk/H8qzQAUnh0b3xFxL5Qp7rACOAA=
Subject key identifier: 64:11:C6:EF:E5:6E:30:42:FF:8F:2C:72:A5:DF:37:E5:EE:E1:D3:5D
Authority key identifier: AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
Certificate issuer: /CN=F3620C16AR/serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Certificate serial: 0340
Authority info access: rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
Manifest number: 0334
Signing time: Thu 31 Jul 2025 03:50:37 +0000
Manifest this update: Thu 31 Jul 2025 03:50:36 +0000
Manifest next update: Sat 02 Aug 2025 03:50:36 +0000
Files and hashes: 1: rlEpNifxvXqfU3iOKmXqBBNGpwI.crl (hash: WMZt3PMUrhMrfPK49j+OsvVRB0cC5DpfjZP1+Z/g5iA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 832 (0x340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3620C16AR, serialNumber=AE51293627F1BD7A9F53788E2A65EA041346A702
Validity
Not Before: Jul 31 03:50:36 2025 GMT
Not After : Aug 2 03:50:36 2025 GMT
Subject: CN=688ae80d-126c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c1:f9:db:60:d7:e9:2a:cd:2f:be:fb:44:9f:
87:39:f3:e8:1b:e2:3e:02:fa:83:27:ae:2c:99:27:
eb:32:7b:6f:73:3a:b2:14:e9:99:3f:21:eb:26:7a:
16:1d:dd:6c:44:c5:3c:1e:77:bd:48:70:2b:93:6d:
4e:9f:44:36:19:9d:17:82:a6:cc:12:be:90:b7:ad:
22:51:48:cb:4f:17:3d:5d:37:2f:6a:3f:7b:d7:2d:
54:37:a8:19:fd:49:1f:05:71:42:92:a8:eb:c3:5d:
99:44:e7:0a:99:01:1f:64:e3:1d:d2:ee:ed:b1:a4:
a2:fb:b9:e8:f8:ee:ed:a1:9a:a8:97:ea:e6:e5:88:
9f:90:7a:70:44:5a:cf:27:c6:aa:49:34:d7:64:87:
4d:9a:21:f1:2f:b8:8a:84:de:3a:4c:34:b1:da:52:
1d:2d:82:5f:e6:77:0f:0f:59:a2:e9:de:95:12:12:
ad:0e:46:6a:04:0d:f9:30:7f:e3:9a:91:6d:d2:b4:
f5:4a:f4:89:be:a5:5a:a0:74:b6:d6:e4:4f:f5:ec:
32:71:01:d2:16:39:65:7b:58:17:b4:47:c7:f7:3c:
56:dc:9c:e3:94:0d:6e:c0:ad:f3:c2:61:31:d9:16:
b9:95:db:32:c3:b7:7a:9a:25:3f:67:25:02:3e:57:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:11:C6:EF:E5:6E:30:42:FF:8F:2C:72:A5:DF:37:E5:EE:E1:D3:5D
X509v3 Authority Key Identifier:
keyid:AE:51:29:36:27:F1:BD:7A:9F:53:78:8E:2A:65:EA:04:13:46:A7:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rlEpNifxvXqfU3iOKmXqBBNGpwI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/9DD0C388052311EE98AFF3354AD9E6FC/rlEpNifxvXqfU3iOKmXqBBNGpwI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fd:e0:11:da:dc:be:a3:83:d9:86:ad:67:f4:ab:26:ab:19:
0b:e8:f8:47:0b:a4:fc:e0:7e:85:cf:85:37:5b:19:5d:ac:87:
54:d3:64:9f:d4:6b:60:ff:35:d3:11:2f:fb:3f:7a:c2:36:18:
b0:48:3c:08:69:5c:3a:84:a1:ad:11:40:47:8f:af:c8:30:d1:
4c:4c:15:f6:ac:64:f2:89:fd:d1:95:7a:b2:0b:c6:f0:82:a5:
3b:79:2b:95:fb:37:7b:dd:ac:4d:80:db:c0:74:e8:e7:e8:89:
76:61:f2:31:31:f8:6d:8c:fb:f3:11:e4:1e:02:4d:fe:ee:68:
62:fc:07:93:d7:b8:17:bf:dc:c0:e5:a0:b6:36:6a:f4:a9:0f:
ba:a0:8a:63:54:66:b8:99:0d:b4:54:0f:1c:ec:3a:ac:15:15:
f0:33:86:44:36:0c:a2:48:12:d1:f6:dd:21:c3:8e:8c:22:13:
3f:09:58:06:1f:7d:83:c8:80:8c:c6:cd:f7:33:6b:90:16:79:
ad:f7:7c:f4:be:dd:20:60:6a:f7:b5:2f:ce:1b:b1:e5:15:ea:
b9:b4:c3:49:f3:a1:80:52:4d:10:f3:0b:04:77:ab:1b:b7:c5:
75:df:19:5c:44:62:7f:48:a2:f2:7d:39:e1:96:84:80:42:2d:
1b:46:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:29:02 2025 by rpki-client