Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: VYEk+PZXMpb9nF3V/OKOQ+Xyz7UT4efjU0/t8zTD9cA=
Subject key identifier: EA:E4:16:8A:18:C4:AB:33:F4:F9:15:2F:3A:0E:88:68:14:33:AA:C9
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 0445
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 0435
Signing time: Sun 27 Jul 2025 03:19:05 +0000
Manifest this update: Sun 27 Jul 2025 03:19:05 +0000
Manifest next update: Tue 29 Jul 2025 03:19:05 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: 73Lg560TAANtV3DanWe+SMq2cRdoxEuhCfNJV4CaGZ8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Jul 27 03:19:05 2025 GMT
Not After : Jul 29 03:19:05 2025 GMT
Subject: CN=68859aa9-385d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a2:48:f4:1d:a7:2a:56:28:49:28:ac:78:e6:
9d:5b:c6:cd:e7:f6:93:1b:5d:9f:bc:c9:43:0b:6f:
2b:9f:8a:ec:ac:d5:7d:66:6d:c0:e4:35:0f:c3:f1:
26:0e:e1:58:2f:ce:78:fc:9d:33:68:4d:55:4a:6c:
e2:35:32:96:a3:16:49:19:b9:9b:87:b1:10:13:3c:
56:7f:27:4e:27:79:03:a5:34:f1:a3:20:d7:69:36:
76:3a:ce:12:00:0b:5c:93:f5:61:ed:cb:32:ad:3d:
6b:b7:1e:62:3e:a5:ca:ab:ae:a5:d7:f0:9e:2a:15:
eb:c5:d7:0c:a8:c4:a3:cd:49:e8:ea:64:26:ff:d8:
a1:f0:2a:aa:f6:20:a8:3d:45:6f:eb:7a:73:d1:b3:
29:f9:46:f2:88:67:c7:6b:61:48:e1:2b:c8:d3:93:
d4:ba:02:0b:66:ba:98:c4:0b:5e:dd:73:6a:56:c6:
d4:b1:3d:17:c4:76:23:25:29:21:eb:cb:d0:70:d7:
16:11:3c:56:81:87:f9:32:3f:b5:7f:e2:d8:32:3c:
a2:f5:13:89:17:95:22:67:0e:fd:47:c0:b8:52:cf:
60:7a:fa:7f:36:ba:15:e9:f8:26:ed:07:65:9e:b2:
c2:95:d0:59:7b:f8:96:47:ee:06:b4:51:f6:13:c8:
13:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E4:16:8A:18:C4:AB:33:F4:F9:15:2F:3A:0E:88:68:14:33:AA:C9
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:a5:ac:20:e3:39:4b:f7:e8:77:95:b2:56:34:a4:36:00:99:
c2:c5:94:8d:90:85:eb:aa:40:8f:54:8a:e6:7e:26:fe:35:7a:
b8:6e:26:74:f5:a8:d8:2a:4f:62:df:ec:c9:d6:8f:f3:2d:c9:
b0:5f:02:83:5f:df:e2:54:74:71:92:33:dd:04:76:c5:eb:6c:
78:ea:fa:0b:57:01:2a:f9:32:f7:73:d4:99:72:ae:53:20:71:
4d:1c:f8:66:d3:ba:b9:bd:7c:3d:a7:78:89:b1:b6:01:df:31:
ee:0a:4c:2c:9a:05:28:b8:d4:d0:92:18:11:50:07:04:8f:27:
a5:2a:ef:d1:0d:4b:e4:ec:a3:42:0c:ff:02:ef:51:f5:f2:a0:
ea:70:62:ca:d5:2a:b0:fa:30:27:13:19:11:16:4e:87:f3:fc:
2f:11:8a:77:88:07:82:7a:34:44:a9:76:bd:a8:ea:c8:2d:3c:
9d:73:00:30:08:60:f2:12:b0:54:c2:1a:3d:60:99:43:30:76:
58:fc:c9:31:9c:13:07:30:54:75:e9:19:7a:36:72:e8:28:79:
30:f7:2d:e5:21:68:0f:31:5c:3f:6c:9c:23:dc:f2:23:3c:1d:
bb:d6:cc:78:f0:82:74:85:5e:ad:07:08:05:95:03:5e:e7:44:
2c:f8:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:45:04 2025 by rpki-client