Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File: l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier: VmGByBbE29r3WTZCSZI9E2cM/7P/uMhEY3ZC+I1BI+0=
Subject key identifier: 37:1C:FA:D5:B8:3F:BF:E4:15:0D:A3:A9:6B:C6:A6:29:4F:79:83:D9
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer: /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial: 0348
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number: 0347
Signing time: Thu 31 Jul 2025 03:47:53 +0000
Manifest this update: Thu 31 Jul 2025 03:47:52 +0000
Manifest next update: Sat 02 Aug 2025 03:47:52 +0000
Files and hashes: 1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: +Q9q/ARhRMvFvFls6LknoLlFn07G1eWeoLLHmvOfX0g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Validity
Not Before: Jul 31 03:47:52 2025 GMT
Not After : Aug 2 03:47:52 2025 GMT
Subject: CN=688ae769-f966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:65:fc:ee:15:c3:57:de:25:8d:8d:98:75:
cd:15:eb:95:49:18:51:ea:4f:03:00:24:b8:00:65:
35:d1:16:24:70:bc:ee:d8:2c:45:dd:cd:83:0d:5b:
05:b5:3f:ed:37:00:01:55:7b:e8:27:15:e2:38:a9:
71:55:bf:a9:53:a6:d7:3e:85:44:39:72:b7:af:a3:
47:23:2e:9c:c2:19:02:63:42:ce:a4:27:98:26:11:
d9:6e:31:ef:34:03:76:d8:57:07:50:79:18:1d:69:
6c:e5:2a:22:08:2d:3a:35:16:04:6d:ee:4f:29:52:
dd:98:97:2d:c9:5e:7c:53:9e:1c:c7:4e:ef:95:42:
a7:b7:93:dd:d2:0c:35:2f:44:0b:49:82:11:68:4c:
d1:f0:d5:e6:78:28:cd:bf:3d:05:71:9b:91:df:4f:
f6:72:be:c6:48:36:df:ff:14:d4:c7:f1:48:00:d1:
ce:cf:c2:6b:ea:cc:47:66:77:a6:e3:98:d2:55:3c:
33:1c:af:1e:2c:40:1b:81:f3:b2:c4:3c:bc:bc:dd:
1f:2b:92:7c:ee:88:f8:8b:4c:f4:01:d2:18:ca:22:
22:37:5f:49:32:db:67:00:9a:7b:61:2d:4e:07:06:
0c:2d:38:59:51:8b:4d:6e:0a:0d:9b:d5:83:11:ce:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1C:FA:D5:B8:3F:BF:E4:15:0D:A3:A9:6B:C6:A6:29:4F:79:83:D9
X509v3 Authority Key Identifier:
keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e2:ba:04:bf:e0:f9:66:f7:e6:32:cb:ae:33:53:90:88:ea:db:
a6:4e:e0:26:23:bb:ca:6d:8b:7d:38:ac:44:fb:b6:b4:1e:02:
e5:d7:ed:8d:2c:bd:e6:24:50:6f:b5:4b:23:63:19:fa:dd:fd:
6d:ae:e9:6c:12:a9:c2:dd:cf:42:1c:75:74:4d:14:e0:95:bd:
85:7c:e9:3a:1b:01:d0:d5:3d:af:7b:68:4e:15:20:70:8c:5c:
55:a8:27:ab:06:db:e1:17:ca:47:ce:c0:ed:a7:4d:eb:cf:19:
05:04:fd:8b:47:6a:42:07:4d:42:9a:b6:1c:2d:86:7e:f0:7f:
5f:bb:41:e2:b7:7c:9e:cb:d8:0f:08:06:26:2b:9f:47:17:47:
93:f9:f8:8b:98:19:dc:67:9c:36:0f:ce:e8:74:6f:de:98:d9:
46:aa:14:5c:65:b1:ee:f3:f9:57:44:32:60:88:b6:ae:ef:e1:
0c:97:7a:5d:63:e1:11:20:93:e2:4f:39:64:22:ec:5d:95:6a:
1d:96:e1:34:34:7f:c5:e5:ed:47:ec:11:1f:7a:4d:37:38:77:
c9:5c:45:51:9e:9e:13:96:33:4d:fd:17:c3:69:1e:80:8d:e7:
28:0e:21:4e:d1:19:83:2d:f6:c6:67:98:27:c7:9f:47:0a:11:
a0:26:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:46 2025 by rpki-client