Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File: HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier: LdYMYaBK+WsQQgow/BImUWmmDyhzEc1pU4KfXBFSAcY=
Subject key identifier: B8:E8:C7:C0:84:B3:24:57:26:AF:CD:E8:D8:BE:6E:D6:43:DA:F0:CF
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer: /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial: 0445
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number: 0444
Signing time: Thu 18 Sep 2025 03:06:00 +0000
Manifest this update: Thu 18 Sep 2025 03:05:59 +0000
Manifest next update: Sat 20 Sep 2025 03:05:59 +0000
Files and hashes: 1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: kU54W2Mi70ZvjLSrz+tjGeHHGDSPUyTT7NOjzttdCnc=)
2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 03:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3647C6BAF, serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Validity
Not Before: Sep 18 03:05:59 2025 GMT
Not After : Sep 20 03:05:59 2025 GMT
Subject: CN=68cb7718-8ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:59:63:47:6c:10:fc:a3:e8:7f:fe:ff:0c:
51:0b:b4:d0:e8:d1:4e:6d:94:fd:9f:10:e0:0e:91:
d0:40:22:9a:90:43:04:8a:ba:6f:e2:6c:d8:3b:d6:
ec:58:4f:03:34:b4:23:88:0a:a1:45:c2:bb:d1:1e:
e2:fb:2f:9c:de:14:97:26:c5:b6:3e:e8:04:a2:57:
92:7a:be:19:34:c6:4d:bb:2c:ec:2e:cb:c3:e3:25:
62:cb:b9:09:15:97:7d:73:97:7f:b6:cb:0d:23:62:
7e:9b:44:1d:a5:5b:88:0d:0a:b4:81:06:42:9b:db:
a8:b3:4d:37:71:2e:08:c7:39:30:92:d3:a3:d1:f7:
54:17:fb:b4:d7:67:6f:8b:95:55:3c:19:be:c4:1a:
6b:84:f0:ad:50:5c:ef:dd:7a:28:f1:27:f5:1e:18:
de:e2:73:c3:9c:c8:8d:da:d6:84:21:32:90:b3:bb:
50:d1:23:95:79:68:46:ab:8b:92:20:10:d9:10:ca:
9a:5a:cc:36:db:ef:f4:1b:ee:00:c7:16:d9:f8:11:
f5:c2:b7:09:fa:c4:e1:da:78:aa:8f:a2:b8:f1:bd:
2d:34:0f:9c:6e:e9:97:ab:90:1a:b1:9d:04:4c:00:
39:da:58:b7:62:56:2c:62:55:b4:93:d8:b4:f7:58:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E8:C7:C0:84:B3:24:57:26:AF:CD:E8:D8:BE:6E:D6:43:DA:F0:CF
X509v3 Authority Key Identifier:
keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:6a:d7:8f:df:74:52:29:45:dc:fc:7f:70:75:7e:23:b8:97:
2f:57:0d:14:a1:07:b3:83:2c:b7:6d:22:42:43:f2:a7:7a:f7:
e9:97:70:04:ca:41:6c:55:77:19:1d:90:10:19:5f:b7:6a:9b:
3b:ed:30:32:7a:a2:c4:08:1f:6a:f8:e9:4c:f1:18:cf:10:59:
ac:b3:ec:e0:1c:a3:d0:65:9e:d6:aa:9d:04:bd:d4:fb:3d:09:
36:bd:e6:df:24:5d:bd:00:1e:5e:eb:b8:84:14:22:1c:df:22:
be:cb:03:77:37:7a:ff:5d:12:05:70:9b:ba:bf:1c:87:6f:8c:
43:32:86:21:25:a0:fd:e8:96:f1:d3:23:11:d1:ea:34:4e:b2:
fd:2f:67:7f:ed:b8:58:09:2f:e7:50:d0:af:c7:55:c5:ee:9a:
51:ff:50:b9:d4:fc:ca:6d:3e:5c:8a:cc:e2:4e:ce:0a:6a:eb:
49:f9:0f:cf:b6:f8:ba:96:d5:78:12:b7:d8:0a:3b:2c:a4:e1:
64:b0:9d:b6:1c:19:7d:44:24:27:04:31:4b:7b:4a:10:a6:c6:
f7:48:7d:cb:15:14:3d:3f:c3:f2:cb:1d:98:2d:35:b3:da:bc:
a7:70:fc:ac:28:bd:cb:16:c3:ce:e4:c1:1d:94:e5:26:89:28:
de:f3:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:55:30 2025 by rpki-client