Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File: QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier: ft4mK6rkOlCZVGa2rdTRW4nFAzrIc0iETdlg+xB+/4w=
Subject key identifier: D5:28:A0:3B:C9:1E:7A:2D:EF:AE:B6:C5:96:4A:09:26:20:42:4B:4E
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer: /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial: 04A3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number: 04A2
Signing time: Sun 27 Jul 2025 02:59:16 +0000
Manifest this update: Sun 27 Jul 2025 02:59:16 +0000
Manifest next update: Tue 29 Jul 2025 02:59:16 +0000
Files and hashes: 1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: u1sBesRFeWAyB+90WLwkJPOBiwgVouco6vha77mBSZc=)
2: 8923FE84E70411ECB97A00C7F1222468.roa (hash: ef6Udp4f7yAWn4yjb6CIRvJunMzfPBNgWsJ+Z6PTHZE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1187 (0x4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Validity
Not Before: Jul 27 02:59:16 2025 GMT
Not After : Jul 29 02:59:16 2025 GMT
Subject: CN=68859604-91fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:66:6c:b9:de:6c:ed:fa:10:0b:29:6e:e3:
73:4a:c7:b6:56:af:36:0c:f3:35:f5:81:29:b9:9e:
3a:40:45:ce:a0:6e:1c:35:3d:8b:f6:9a:95:59:2d:
c7:b0:59:fb:90:33:df:0f:18:cd:c8:21:3e:94:34:
bb:ca:41:b2:88:68:7b:2e:c4:41:8b:ea:ce:c5:09:
b6:25:37:3e:0a:10:b5:c4:54:f6:29:af:69:bb:74:
2a:38:20:0b:80:73:db:4d:d1:0e:c7:ef:d3:f8:99:
91:48:c0:46:8f:f5:ab:71:ed:d7:31:14:14:be:1c:
ab:8d:25:8d:14:21:2f:99:69:ec:5e:6f:8e:da:23:
63:a0:fd:cb:f1:ca:15:c7:7c:c8:2e:e6:8a:ec:00:
49:3e:85:d3:93:7a:94:2b:8d:78:83:b3:28:8a:74:
c7:26:51:9e:ec:d7:69:ee:66:41:66:02:a4:a3:c4:
1a:80:6a:1e:56:3f:db:7d:6e:9a:02:08:1c:4f:eb:
99:ed:a5:d6:fb:8a:3a:30:a1:b4:72:52:05:91:87:
ea:1f:8a:8b:af:09:20:9b:21:d7:91:bb:7d:4b:c8:
ee:03:7e:59:6b:d6:07:67:f8:75:d2:0c:f2:dd:1d:
7b:77:27:2e:2b:31:fd:cf:a8:75:62:97:22:bc:7b:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:28:A0:3B:C9:1E:7A:2D:EF:AE:B6:C5:96:4A:09:26:20:42:4B:4E
X509v3 Authority Key Identifier:
keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9a:91:78:80:0f:ec:e8:75:0b:40:a7:d4:2c:52:71:7b:f2:
fe:68:16:7d:27:bf:e4:d8:da:09:ee:73:09:d3:47:68:fd:a5:
77:e3:d0:b6:04:34:ba:a1:c2:f5:4a:c2:c3:03:17:11:89:cb:
b5:86:dd:02:87:d9:7b:c7:e0:84:75:62:22:42:3e:6f:59:1b:
20:36:4c:4e:37:01:3f:b2:83:d3:86:d3:c2:a0:b5:71:40:a4:
a2:9e:3f:91:56:fa:08:be:dd:4c:f1:9f:82:54:24:6b:3f:aa:
80:42:c5:17:66:ba:ac:73:bd:a6:02:f4:10:3c:95:64:f9:96:
a9:d4:35:cd:d5:be:be:64:e9:0e:b4:f0:c1:8f:64:e4:32:3f:
71:18:e6:40:44:eb:71:3f:da:35:d0:37:f5:90:33:58:4b:15:
8a:af:93:2a:01:ed:93:62:13:d8:89:04:c1:52:e6:f9:d7:10:
0a:8c:56:78:d9:7a:a9:97:8e:08:69:d5:ab:65:d2:dd:4e:b5:
d0:99:4c:3e:74:47:dc:91:d9:f6:70:a5:cd:e0:f8:cd:08:13:
a7:e8:1d:ed:85:82:02:20:ae:67:53:cc:de:df:6d:5b:5b:42:
c8:54:cb:17:64:a8:ee:16:4a:9a:52:15:83:93:66:60:e4:0e:
85:54:ef:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:08 2025 by rpki-client