Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: ftoEaNtHg4ZAr1cNe5EPxxL5EiuZWwBRvRvc/yeVNy4=
Subject key identifier: 0E:EE:14:A5:84:98:9C:51:32:22:F7:56:80:E7:EF:24:6F:93:B5:DF
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 04D8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 04D7
Signing time: Thu 18 Sep 2025 02:47:18 +0000
Manifest this update: Thu 18 Sep 2025 02:47:17 +0000
Manifest next update: Sat 20 Sep 2025 02:47:17 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: c1lSDeyLRpWHT5Uyuy1q7A3wgWvyDDwJ6xHKZwqUHyA=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1240 (0x4d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Sep 18 02:47:17 2025 GMT
Not After : Sep 20 02:47:17 2025 GMT
Subject: CN=68cb72b6-5c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:dc:7b:92:c5:7a:9d:0b:17:98:30:6c:83:
98:fe:7a:7c:ee:55:4c:e4:ee:4d:fa:4f:f5:b9:49:
8f:b4:5e:db:64:9b:2a:84:db:37:b6:16:f4:b5:30:
a7:dc:80:c1:e8:37:be:0a:2c:99:45:0e:7d:d3:f0:
a5:dd:11:29:01:2a:d1:60:08:2e:87:58:1b:ac:74:
a2:0e:7f:09:90:b5:a4:ec:a5:eb:18:82:1a:17:d5:
19:fb:4f:88:74:49:33:e3:ce:1c:f6:07:1d:c7:d5:
f3:e6:54:e4:1d:ad:9d:42:3b:e4:34:8a:b3:d1:72:
9c:ac:e9:51:37:a7:e8:69:c5:a1:59:3e:c7:f3:bb:
63:36:2f:4f:b2:60:bd:56:a9:05:70:f5:fc:89:1c:
37:05:13:5e:ec:8f:39:e3:d0:29:1b:6f:a1:af:f4:
ea:52:16:4b:a5:7e:06:0f:6b:52:01:1a:83:d4:4a:
a3:c0:ab:98:f0:76:2c:36:37:ad:70:d4:94:82:22:
89:af:f7:61:62:17:7b:e0:f2:26:7b:92:88:ff:15:
e1:7c:32:06:cf:a6:1c:dd:04:3f:7f:ef:8e:7a:1a:
50:e2:6c:c7:a7:b9:9e:65:60:54:5a:70:5a:47:38:
3b:27:fd:d9:48:38:9a:f3:88:e4:e9:f8:8e:c8:ed:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:14:A5:84:98:9C:51:32:22:F7:56:80:E7:EF:24:6F:93:B5:DF
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f5:fb:b6:b5:fc:42:11:dd:c6:ac:12:9e:17:d1:af:56:8e:
57:e9:d2:3b:a0:98:f9:3b:e9:31:f8:c9:54:c6:6e:f9:93:5c:
bf:a1:6c:85:63:bb:e0:ff:df:6f:a9:bc:07:66:93:15:03:be:
ab:c2:28:47:b8:1d:7d:31:e9:60:cc:66:01:0d:e2:53:83:69:
9c:cf:fa:43:6f:d4:3e:4f:33:97:76:56:a1:e4:a0:d9:ed:17:
ad:2f:41:b5:99:4f:fd:e6:9a:d9:60:60:81:bb:e0:81:6c:a6:
c6:41:ae:b8:a1:f9:05:99:f0:11:eb:0d:61:e9:c4:c3:52:bc:
09:33:0a:19:5a:29:66:cd:a7:c4:e2:97:7c:4f:c9:cd:30:72:
fe:74:8d:31:a7:17:08:3e:b2:e7:e1:b2:e5:2d:53:59:5c:a6:
10:d2:64:44:75:1c:f9:58:20:87:1a:ff:cd:43:3d:e5:60:4b:
c9:04:bc:55:ef:60:05:74:24:f1:0a:ad:be:3a:3e:d2:bc:0a:
fa:90:40:d1:fb:d4:d9:e0:8c:7d:fb:c7:5b:29:4b:9d:df:4c:
ba:83:70:fd:e0:52:01:f0:85:9e:e0:3d:2f:75:59:33:f5:be:
b5:f4:aa:0b:7f:42:c1:34:cb:3c:73:4c:58:1a:4c:19:78:2c:
98:14:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:48:08 2025 by rpki-client