Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File: aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier: dhudFv0xjbDjfwCfYHZacO1N+9CBu+iUzN0e7hd+QB0=
Subject key identifier: EB:DB:4D:BA:9F:23:7A:6F:01:1C:CE:5F:E5:8E:13:96:73:44:28:3F
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer: /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial: 1E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number: 1D
Signing time: Thu 31 Jul 2025 05:35:38 +0000
Manifest this update: Thu 31 Jul 2025 05:35:37 +0000
Manifest next update: Sat 02 Aug 2025 05:35:37 +0000
Files and hashes: 1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: LlgnNw2wr8h33Sv4aMiWMuybBCrlb+tyWNoVazrcUqQ=)
2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Validity
Not Before: Jul 31 05:35:37 2025 GMT
Not After : Aug 2 05:35:37 2025 GMT
Subject: CN=688b00aa-af3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7b:f8:33:92:ae:5c:37:58:35:c2:ec:0c:f5:
6e:a3:20:19:f9:02:9c:74:27:c7:ea:3a:68:02:9b:
4b:07:1e:92:b2:e6:fe:8e:44:08:34:c8:bc:35:8f:
55:0d:0c:57:98:6f:2f:fc:82:37:52:05:d2:d3:23:
e3:b6:d0:37:f2:4b:45:02:a3:08:07:df:d5:81:61:
90:63:cd:1d:8e:0b:b4:d6:e5:5b:ba:f0:68:ed:bb:
e6:18:49:73:33:a5:89:f4:5c:1c:ea:7e:7d:b1:29:
31:5d:34:47:2a:c0:e7:19:04:28:1d:ae:0b:41:6b:
13:2d:51:be:5a:61:e3:b3:a6:d6:54:62:8a:b0:a7:
53:fa:9e:b7:92:00:31:65:8b:74:38:c9:2a:58:08:
3e:76:e9:02:c3:fb:d7:84:30:c4:05:6a:b9:5f:2f:
8f:2c:f5:de:31:44:90:b6:17:0b:b3:fe:f3:52:17:
44:84:3f:2d:7f:08:e1:40:df:ec:ae:ba:7a:ca:10:
8d:23:47:43:9a:62:6e:68:02:89:9c:18:12:9c:c1:
c9:ac:62:75:fc:db:19:84:a1:a7:11:0b:20:62:07:
39:b6:c7:e3:cb:66:4b:6f:0b:89:1b:3d:37:79:a2:
c4:93:5a:9a:ee:6a:3c:2b:d2:04:c5:09:07:2a:cb:
e6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:4D:BA:9F:23:7A:6F:01:1C:CE:5F:E5:8E:13:96:73:44:28:3F
X509v3 Authority Key Identifier:
keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:6a:92:7b:fb:ff:0d:66:7e:01:cf:23:2b:ed:cc:d2:98:42:
fa:76:a5:44:43:d9:2a:fa:bb:e8:f7:45:a5:6d:a5:45:6b:79:
f8:67:44:c6:58:7a:94:22:37:60:6c:5a:cc:de:c4:91:60:06:
5f:12:31:07:92:29:55:35:9a:7a:85:62:1d:a6:74:30:af:ae:
98:0e:2a:ed:d4:34:a7:d8:e5:fd:a4:e2:ce:56:80:84:f1:9d:
f7:13:30:92:1c:52:d0:2b:8a:f6:25:a0:9a:2f:df:0a:f5:09:
c5:65:8e:76:a7:e0:b5:7c:6c:b4:24:9c:b9:d9:ed:33:2a:52:
44:10:8f:c1:8b:1e:87:b2:07:3f:c3:37:da:a2:e6:cb:24:77:
51:97:2a:29:3e:39:0d:a1:07:59:80:7d:a2:45:a1:76:ff:19:
43:23:dd:c9:16:bc:6b:ff:f5:6a:91:01:7d:5c:8c:91:5b:84:
1a:bd:8c:19:90:39:a0:3a:70:37:a6:51:7f:d6:2b:85:f0:85:
c7:bd:d5:ec:6b:1b:9c:bc:a9:37:11:fc:3e:39:c2:a5:0d:e9:
51:5e:d1:44:7e:33:de:2b:43:ee:17:6a:4d:54:6e:8c:f9:63:
e4:f5:6f:9f:0b:e4:c1:08:4f:6f:47:e5:b7:2f:95:e9:a5:71:
b2:f3:f8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:47 2025 by rpki-client