Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File: iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier: Fpbq1F+9fc4w43qTjeDVFMt5aErnIDktHVsBK4tEjwc=
Subject key identifier: A1:30:F5:C0:24:56:DF:20:91:1B:23:3F:7E:67:15:9D:8C:13:F7:C5
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer: /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial: 01B9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number: 01B8
Signing time: Thu 31 Jul 2025 04:41:59 +0000
Manifest this update: Thu 31 Jul 2025 04:41:58 +0000
Manifest next update: Sat 02 Aug 2025 04:41:58 +0000
Files and hashes: 1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: VnuNKrnlgxoHm9QA6fUbJAvluyFPxqyLR1Mc5CSRmsY=)
2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441 (0x1b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Validity
Not Before: Jul 31 04:41:58 2025 GMT
Not After : Aug 2 04:41:58 2025 GMT
Subject: CN=688af417-1c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:18:f5:59:c5:18:7d:21:6c:98:83:b6:5c:
fc:5b:f1:89:a5:d3:64:55:70:4c:d0:35:c7:39:34:
e9:2a:e1:7d:9c:0d:78:d8:d7:05:89:9a:0d:8f:02:
81:f1:23:c8:62:6e:14:f3:b8:9c:5d:20:f5:2b:f1:
76:d8:c0:d0:64:a5:21:72:8d:9f:95:cc:65:ad:87:
d6:b7:1f:f2:de:14:a0:73:ff:d5:48:9a:bd:46:64:
b2:56:a5:8a:19:e4:14:84:82:35:50:eb:15:41:e8:
1d:d8:bd:43:7a:04:5d:9d:b1:5f:65:e7:9f:20:8b:
5c:e1:19:ca:12:81:02:86:ac:c6:0b:b3:85:76:65:
a0:55:40:64:29:00:40:b2:51:30:49:cc:f8:02:5b:
44:b0:93:e5:b3:72:10:be:04:61:4d:89:cc:3b:ce:
b6:e7:db:15:cb:62:fc:d0:2e:f9:af:5b:68:b8:c8:
0c:20:47:58:75:d0:37:50:7a:23:86:14:07:03:b9:
8a:fb:03:41:e6:c1:17:1b:f4:57:d7:bb:e5:f1:89:
98:be:a9:74:4a:87:10:13:72:1b:92:cc:be:b1:98:
5b:3d:4a:d7:37:a5:f6:5f:ee:de:52:af:75:39:fb:
54:e3:95:0c:f8:bd:91:a9:85:7e:16:ec:88:84:0f:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:30:F5:C0:24:56:DF:20:91:1B:23:3F:7E:67:15:9D:8C:13:F7:C5
X509v3 Authority Key Identifier:
keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:5e:0e:10:f2:e9:62:ae:81:88:ad:f8:b3:ac:b4:83:04:f8:
11:fa:29:a9:cc:0e:57:8c:0c:dc:1b:2d:c7:72:10:a1:0b:85:
f2:5a:19:9e:e6:9c:2e:7b:e1:e9:8e:04:f2:6e:02:b1:48:61:
f1:0d:f7:c9:d5:ca:15:4c:56:55:f9:10:dc:1d:f0:84:8b:32:
03:f4:ce:ea:f9:64:6f:e6:3e:09:ed:3e:0a:24:69:ff:c9:93:
f6:69:de:f4:28:f5:d3:5d:eb:99:2e:15:c4:7f:f7:e4:45:15:
66:a5:46:e3:74:38:84:ef:77:ce:d5:48:8e:5e:4b:98:1a:af:
91:eb:fe:fc:80:e5:7e:01:8b:1f:77:88:2a:05:4e:53:11:3e:
35:0c:79:86:07:ee:82:db:b9:b4:c1:74:5e:d4:8d:de:03:69:
dc:2b:8e:1d:56:52:40:ba:c4:77:66:94:07:52:a6:4b:55:62:
78:47:40:af:b4:d1:2b:f4:b7:e4:a1:a7:64:c7:a4:14:0d:59:
c3:e5:d0:08:c2:79:ca:80:e4:f2:a7:f9:ee:b5:4e:05:79:49:
3f:d8:6b:2d:4c:cf:4b:4b:c8:d0:d4:8c:eb:70:fa:18:54:54:
59:e8:37:f3:2c:47:10:36:c3:cb:42:6c:53:8a:54:4f:94:0d:
29:62:8a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:13:59 2025 by rpki-client