Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier: EpSl2EvqHiq92pNapBBLhnBCTMiAjihwJ7a25tqqTuI=
Subject key identifier: DE:7B:89:5F:1F:04:59:69:6E:08:B8:33:BA:A3:7C:99:AC:AD:23:20
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer: /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial: 048A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number: 0480
Signing time: Wed 17 Sep 2025 03:01:13 +0000
Manifest this update: Wed 17 Sep 2025 03:01:12 +0000
Manifest next update: Fri 19 Sep 2025 03:01:12 +0000
Files and hashes: 1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: alp1lJyJzhx4yiPQke1a/MiB5pQcUlFauBJSSx0KPBQ=)
2: 5C4F4AC8314B11F0BEA4E5C8DAE4EC9C.roa (hash: B4meKXMBx/VoIvCrgLDGhjqQbFQ+74jsI7Z9mpVTaGc=)
3: 05B9E9DAD17D11EF95C142AC762E951A.roa (hash: Q5K3U35zeD2bPxUENFXhYZ30yazfguSFLvJ7/QgC/Ko=)
4: 23ABB3A2D17C11EFB156ACA7762E951A.roa (hash: JnjC+h0l3NXiTvyHQEAdv5zJ5PF/QKPMrh4aJd626Kc=)
5: 9D138D4CD17B11EF890791A3762E951A.roa (hash: YtOzzIAfQEjwyVcS0gx7UZKyYqAnn55LoVoqNlpKMPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1162 (0x48a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Validity
Not Before: Sep 17 03:01:12 2025 GMT
Not After : Sep 19 03:01:12 2025 GMT
Subject: CN=68ca2479-e80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:5c:7c:89:4c:61:00:dd:ee:78:f0:07:86:
12:33:99:a6:de:91:e0:e1:3b:8d:ad:24:94:c0:f8:
7a:5f:80:2c:3e:74:2f:63:1f:12:f6:36:6d:3b:db:
93:86:30:b7:14:32:15:24:08:9d:02:43:aa:f2:e4:
1b:3c:7e:a8:20:6a:ba:48:a0:bb:3b:70:40:40:09:
79:21:8b:e9:1f:6c:c4:c8:30:fb:7a:5f:f0:b8:9d:
71:5d:c2:20:31:0e:86:d1:d3:02:dd:05:5a:3d:ce:
38:ff:74:b9:e6:2c:08:74:84:a8:d6:02:c8:3f:73:
d5:86:f6:60:70:ce:1f:62:10:68:c5:23:9d:17:1a:
e9:2e:36:bf:87:d7:6a:22:2f:3e:cf:42:07:f6:d7:
93:9d:fe:6e:4c:40:2e:af:7f:53:4c:be:0f:24:62:
34:e5:7e:11:e3:25:d1:c5:1f:aa:e1:66:7e:ee:88:
e1:d6:20:05:dc:4e:fe:b0:70:e8:ac:03:79:e3:b0:
12:a9:a7:c2:b2:5f:cd:fc:10:88:42:91:2c:ad:a8:
ed:51:9d:58:a2:6b:49:31:d4:1c:dd:98:32:ac:4a:
a2:77:63:bd:e1:ad:f7:9f:74:87:7d:de:b4:bf:7b:
0f:8b:9d:f7:8f:f5:5a:02:e0:0d:49:9f:3d:e2:bf:
88:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7B:89:5F:1F:04:59:69:6E:08:B8:33:BA:A3:7C:99:AC:AD:23:20
X509v3 Authority Key Identifier:
keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
91:66:ec:34:bf:0f:09:42:af:6e:cc:85:b2:9d:1f:7a:4c:c3:
08:82:e4:c6:89:01:63:c3:a8:bd:15:84:df:72:a7:43:1d:2c:
7f:b9:0c:07:a2:f4:47:61:c6:b9:25:61:c6:9b:8a:2b:e6:bc:
5d:58:ed:42:9a:ff:0f:01:29:ba:14:bd:c0:c0:03:8a:89:ad:
17:00:77:51:4d:a6:94:36:9c:39:57:e3:d1:f4:a1:54:73:bd:
ce:82:f4:d9:8f:98:8c:0a:8b:f6:04:f9:25:c8:b3:55:f1:90:
17:68:23:b6:c8:d2:23:ec:68:58:d4:34:cc:cd:5a:06:35:d4:
cb:6a:80:d4:17:f1:52:dd:3c:5e:e6:ea:26:7b:d7:ec:92:90:
9e:5f:22:18:63:6f:a0:3e:62:75:34:4c:d1:d9:53:f3:53:bb:
f6:ea:ba:ae:8c:48:d2:7d:00:3c:80:71:fc:b2:83:67:5e:34:
74:a5:57:cd:a8:27:94:03:9f:d2:a3:10:ce:b7:af:f8:2e:cc:
8b:48:77:b8:e0:80:9f:a8:aa:8f:31:84:2d:56:b8:31:c2:33:
24:c4:e3:58:9c:45:83:af:e6:fc:96:7c:ae:49:b9:dd:d3:98:
67:56:74:0d:71:e0:d9:01:c6:87:f8:cb:15:b1:70:e1:94:32:
5b:13:7a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:25:24 2025 by rpki-client