Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: hNsDvVYlvtxh1USI5FHsJ6jRMiAvjn/yo3ujNal4pzU=
Subject key identifier: 24:30:D6:FC:17:CB:DE:01:DC:4A:42:D9:6E:9F:EF:80:2D:BE:A0:03
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: FE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: FC
Signing time: Wed 17 Sep 2025 04:47:56 +0000
Manifest this update: Wed 17 Sep 2025 04:47:55 +0000
Manifest next update: Fri 19 Sep 2025 04:47:55 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: PGsMjoJrQX8AdxrOzYApXbMjhRc/UHl8aOImSA5Qd8c=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 254 (0xfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Sep 17 04:47:55 2025 GMT
Not After : Sep 19 04:47:55 2025 GMT
Subject: CN=68ca3d7c-f276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e2:46:e8:c9:3f:b0:98:10:61:18:38:13:13:
7f:c5:75:3e:4a:95:ca:0b:74:c7:67:bb:c6:9a:89:
c9:f6:69:5d:6e:8f:64:a5:26:d5:83:98:d1:cf:48:
20:c8:6a:1a:70:1c:e7:c9:9e:80:66:2f:cb:16:85:
27:4e:6d:67:31:d4:6f:2f:79:40:28:be:9a:41:45:
bd:b0:3d:b8:de:94:9e:d9:e9:5c:b4:e4:81:ba:48:
fe:5c:42:d6:7a:d1:51:08:f5:6c:54:e6:95:5c:f7:
ef:e6:bd:63:59:55:0e:ed:9e:8e:58:2b:56:1e:e0:
72:2d:4d:33:fb:84:f4:e2:fc:bb:56:f7:b2:62:6c:
3d:36:5f:9b:b1:11:08:00:3a:31:c4:88:bd:4d:bb:
1d:a3:9e:03:3f:2c:e7:56:ea:99:45:68:f1:c6:c5:
77:8c:9a:1b:bb:a2:59:ca:cc:45:74:9c:5d:1d:88:
b6:23:e0:dd:17:1c:bf:1d:5d:d7:7e:ed:4b:85:af:
1f:a9:19:13:ed:ab:79:ed:09:a8:86:6c:36:4b:92:
a4:2d:20:85:43:df:cf:0f:ba:2b:3e:a9:5f:d9:64:
9c:63:b9:53:d8:e8:33:30:47:5e:2b:d8:c0:97:4a:
44:a6:b1:41:7f:26:ec:9b:29:77:43:88:e8:af:fb:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:30:D6:FC:17:CB:DE:01:DC:4A:42:D9:6E:9F:EF:80:2D:BE:A0:03
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:62:d4:c1:33:30:52:88:b6:00:16:bc:a4:9d:3b:07:4d:e5:
12:c9:27:5a:c3:c9:dd:b3:f2:c6:81:81:6c:ca:0f:72:ec:08:
fa:2c:ab:bf:8f:c5:4d:14:1d:62:7f:93:46:13:07:dd:db:5e:
6d:be:2f:16:23:18:2b:ec:8a:56:0c:39:bf:20:00:12:81:ef:
e0:9d:48:6c:62:76:72:10:d1:bd:19:55:36:40:77:72:2a:e0:
f9:64:b2:28:7e:7f:1d:78:d7:25:ea:9a:ae:b8:fe:04:6e:24:
67:41:4f:93:6e:51:34:0d:0f:2f:9c:fd:79:5a:78:13:ff:9e:
2c:68:a8:50:5f:99:a8:7d:81:75:3d:a9:79:a6:0b:44:58:db:
fd:44:69:09:f0:2f:2f:14:be:b2:4f:e6:52:22:58:82:28:83:
17:04:db:46:58:fe:87:c5:be:be:6b:76:c9:b1:26:db:50:8f:
6e:6f:ef:99:f9:5a:a8:35:0f:ed:6f:9f:60:9f:d9:9d:0e:99:
01:4b:0c:94:a1:e5:b5:a7:8e:9f:23:71:28:e4:88:58:4e:67:
ab:06:d3:73:ac:9f:a0:14:32:a7:41:b9:b2:5c:f0:d6:14:7a:
e5:16:44:6d:44:65:4c:74:74:26:98:cb:31:b0:61:c8:10:2f:
b2:12:a0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:36:15 2025 by rpki-client