Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File: poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier: ew52S2BOE/u04rxk5FM/4UQWjkjoCZULrLDm45j/URw=
Subject key identifier: 13:10:F7:B1:5A:A9:9E:08:1B:35:A2:41:0D:48:B2:DF:8D:C8:EB:FA
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer: /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial: 0420
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number: 0420
Signing time: Thu 31 Jul 2025 03:21:52 +0000
Manifest this update: Thu 31 Jul 2025 03:21:51 +0000
Manifest next update: Sat 02 Aug 2025 03:21:51 +0000
Files and hashes: 1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: nih02RafaJclWb2RDyBtYrHSUYbMoQSQ7wMYcTSzsGo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3632159AF, serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Validity
Not Before: Jul 31 03:21:51 2025 GMT
Not After : Aug 2 03:21:51 2025 GMT
Subject: CN=688ae150-84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:3b:39:23:ed:80:81:7c:13:89:7a:7d:40:
67:f6:01:b3:34:c4:bc:0e:f3:7e:19:37:9a:f1:ef:
70:0a:48:e3:47:25:76:21:a4:08:6f:79:ae:ba:d1:
eb:44:31:7d:fc:20:a8:31:b3:35:9c:ba:8b:01:c5:
f6:59:61:45:1c:90:bf:e5:01:55:48:c1:59:63:30:
9c:1a:81:f5:ae:1a:61:7c:40:38:ff:a9:29:47:b5:
1b:1e:2b:4a:da:a8:28:ef:d6:8d:e1:ca:e1:22:8e:
5d:77:5e:88:da:a3:12:4c:4c:98:b0:cf:c9:ec:4f:
20:05:4d:e1:ff:6b:ff:0c:72:df:bd:5c:c5:94:2c:
b8:ba:ff:93:ad:f2:29:87:bb:63:87:ed:29:9a:f6:
9b:9f:75:13:71:5e:c2:a7:5f:ec:9e:1b:92:a4:2f:
d8:27:1f:67:e3:a9:42:f8:b8:b9:c0:53:96:58:fb:
93:5f:8d:54:ce:12:74:12:a4:13:7c:6d:17:eb:7a:
b5:3d:c9:be:de:26:fa:4e:39:62:a4:3f:14:a0:87:
82:c2:69:e3:04:6a:e0:eb:4e:2a:ba:4e:25:82:1b:
84:30:0e:8f:f7:f3:62:44:58:74:2d:fc:68:60:79:
d3:14:ce:d1:19:70:b4:7b:6c:3d:68:1e:a2:34:fd:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:10:F7:B1:5A:A9:9E:08:1B:35:A2:41:0D:48:B2:DF:8D:C8:EB:FA
X509v3 Authority Key Identifier:
keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:14:c6:6a:95:03:c5:45:c6:5c:d3:01:46:7c:2b:57:65:37:
44:0e:ca:34:b0:91:68:e3:db:99:37:f7:32:4e:7e:66:19:3d:
b2:82:ed:e9:1b:c4:6d:6a:13:2a:7f:b9:0a:bc:42:06:68:67:
f8:75:ec:06:ea:33:8c:d5:19:5f:ec:8d:17:11:ed:8a:5f:bd:
89:17:68:c7:11:50:c8:50:08:05:49:e7:01:35:d5:20:2d:63:
66:2c:9a:bb:2f:b4:f0:6b:ff:f9:f7:4d:2f:bc:c9:7c:d5:c6:
78:f8:4a:76:09:00:62:44:7a:f1:8a:65:97:6a:1f:69:ec:a8:
ba:db:ef:bc:5a:82:fb:e9:83:19:63:be:3a:1f:30:4b:77:2a:
6c:73:13:9e:47:0b:9b:5c:65:b2:e0:6f:58:ba:ad:5d:d0:d3:
f1:02:04:1a:3e:bf:52:7c:fc:02:57:26:a0:22:1b:78:12:89:
9c:4b:7e:25:63:16:46:8a:11:e0:23:d3:71:21:1b:d2:e3:3d:
23:86:1e:94:82:16:aa:0f:7a:e0:79:9a:6c:1f:48:94:7d:b0:
a7:70:46:24:c8:80:a8:e4:13:7f:77:da:2e:52:3a:89:8b:22:
de:6c:0a:05:5c:16:ce:ad:c8:8a:8d:e7:99:59:cb:61:ff:8f:
a8:0d:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:22:21 2025 by rpki-client