Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: 7jx8cE/v9rFZJtSPtlJjhAq5s+GEXTE3rDcQAwpSTDM=
Subject key identifier: 32:68:7E:90:EA:1C:D6:85:17:7D:6B:F9:E7:8D:40:08:03:4F:C6:06
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 01CA
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 01CA
Signing time: Tue 16 Sep 2025 04:18:55 +0000
Manifest this update: Tue 16 Sep 2025 04:18:54 +0000
Manifest next update: Thu 18 Sep 2025 04:18:54 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: /lacS3SLP+xfiwK4z2+pFWL4X62p4uPJj3af3zZiKJk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458 (0x1ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Sep 16 04:18:54 2025 GMT
Not After : Sep 18 04:18:54 2025 GMT
Subject: CN=68c8e52f-ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:de:e4:68:32:af:ed:17:9c:02:d7:48:23:
88:04:9b:60:80:9e:25:fa:9f:47:57:7f:f5:c4:12:
e2:f4:dd:6e:de:f3:34:75:c6:b8:fd:16:19:28:d5:
e3:23:aa:de:78:e7:9c:9f:3e:7a:66:47:5c:09:8b:
49:0c:cb:0d:1d:cf:07:5c:db:9b:35:02:c1:fd:e4:
69:36:9d:3f:79:46:3d:7f:b0:04:84:62:60:d9:b8:
98:04:22:5a:ef:0a:b4:48:88:c6:b7:c6:bc:6b:84:
11:4d:a3:76:1d:0e:cf:f3:c7:ba:64:86:ac:b9:cd:
28:c6:08:cd:b7:4e:01:71:76:68:75:ac:2b:7d:17:
f1:c0:63:93:47:89:7c:88:7c:7c:fc:64:b0:29:a3:
ff:f3:47:98:99:31:e4:30:72:f7:3b:cf:ae:05:73:
85:19:c6:fc:58:27:82:26:ed:5d:c6:b4:ee:e6:91:
8c:ce:5a:a0:04:85:0a:1c:95:15:4e:a2:59:ad:8e:
c4:9c:28:fb:29:a2:ba:4d:4c:f9:8d:97:bb:1e:c2:
49:51:e7:ed:c3:72:20:c5:07:d0:37:d5:68:23:03:
8a:11:1d:b4:c3:a7:68:15:34:9d:c7:ba:4a:e5:66:
b9:a2:1e:f3:39:6d:a7:e5:7a:b7:7f:08:8a:94:01:
a2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:68:7E:90:EA:1C:D6:85:17:7D:6B:F9:E7:8D:40:08:03:4F:C6:06
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:e0:03:d0:28:45:8b:c7:41:87:3a:af:be:58:e6:6c:46:01:
58:38:71:9f:1c:71:77:38:95:67:79:06:33:24:aa:5e:96:76:
4c:cb:61:ad:5d:53:ee:e6:e8:27:7e:33:18:17:b9:cd:77:2e:
75:99:82:ca:7a:4e:0d:76:da:8f:f6:27:44:8f:d4:46:c9:da:
f8:2a:a3:5a:bd:8d:3b:18:5c:e7:37:db:93:fa:af:07:85:48:
74:d4:e3:3f:7a:7e:4f:e5:fc:2d:a1:b5:d4:f5:02:9b:b3:e3:
c6:ee:7e:2e:bd:52:55:b9:a9:43:6a:01:1e:56:e5:96:46:94:
10:ec:e2:40:1c:4f:4a:88:35:0c:a4:cf:2a:b3:87:21:41:9f:
e8:62:37:23:01:8e:bc:32:9a:68:cb:7f:9d:4c:2a:f7:9a:cb:
5b:61:46:8c:b9:63:96:39:d3:59:10:fc:99:0f:2b:f5:76:1d:
1d:41:d0:44:23:05:05:37:a1:a7:1e:5d:b1:2d:58:21:0e:66:
28:cf:44:71:1e:27:c9:5f:02:64:32:05:f7:3c:77:ff:56:c9:
45:58:fb:22:33:2a:bf:aa:1c:36:31:91:76:97:fb:87:c0:2b:
75:df:17:9f:d3:ec:ca:4c:fb:34:08:05:a3:24:d8:c0:13:74:
c3:62:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:14:18 2025 by rpki-client