Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File: opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier: dzgg5DbaWbhyWv3URDkH33nmPTg2heCiY+hSbZ6aIDo=
Subject key identifier: 24:5B:74:18:0B:59:0D:C1:59:8C:3E:B9:DB:8E:62:F0:D7:CA:FE:30
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer: /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial: 040F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number: 03FF
Signing time: Wed 04 Jun 2025 03:16:47 +0000
Manifest this update: Wed 04 Jun 2025 03:16:47 +0000
Manifest next update: Fri 06 Jun 2025 03:16:47 +0000
Files and hashes: 1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: 4WDkgUMHP7wYi79IvSYbFnWQEBFJh7+41UhuYh7ZuzU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1039 (0x40f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
Validity
Not Before: Jun 4 03:16:47 2025 GMT
Not After : Jun 6 03:16:47 2025 GMT
Subject: CN=683fba9f-3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:59:4e:1d:24:33:5e:b1:9b:4f:3b:10:c5:
fd:96:8f:ec:f4:e3:de:41:dd:9c:b7:0e:65:ff:26:
85:56:7c:7e:5b:e4:b0:d2:15:5c:b1:1d:81:f3:a3:
2e:f0:1d:06:e9:cd:5c:d6:ef:8b:99:0c:38:2f:55:
67:cc:1c:89:ae:d8:d9:1a:57:f1:1c:43:27:b1:a7:
ec:76:8e:cf:46:33:a2:8d:4a:c1:83:06:b8:00:6a:
9f:77:de:ab:d5:47:91:8c:93:30:78:2c:66:5f:3e:
30:de:ec:c3:34:f1:0f:c5:aa:77:c7:92:a1:9d:0a:
72:70:21:4c:c9:08:59:b5:fe:c1:47:84:f8:5b:70:
9a:7c:c3:bc:59:16:af:7c:3a:13:58:52:21:2a:12:
e1:7e:ce:ce:b7:55:51:99:20:be:91:b2:4e:d3:f5:
4e:26:98:3b:48:53:08:6d:08:78:a0:07:9f:1b:b6:
93:96:00:ca:5d:12:b3:f1:c5:c7:d4:fc:5b:c8:d6:
c9:dc:5e:01:c3:c9:3d:98:0a:a0:85:13:c7:89:35:
ae:1f:a9:5a:56:24:71:38:30:58:df:ec:54:d7:2a:
3a:ac:3e:3a:2d:1d:d6:5e:ae:52:da:56:25:4f:d4:
94:26:bc:fc:83:04:92:93:8e:0d:91:39:f5:e5:d9:
b8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5B:74:18:0B:59:0D:C1:59:8C:3E:B9:DB:8E:62:F0:D7:CA:FE:30
X509v3 Authority Key Identifier:
keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
18:27:c6:38:22:af:05:5f:24:40:f3:95:0d:e4:7a:fd:9f:71:
e2:c3:7e:d1:87:f4:bd:ff:c4:6e:5a:1f:5a:d3:bf:c8:ab:17:
d3:e5:5e:b6:6e:12:f5:89:8f:6f:f0:66:df:e1:0b:46:53:e8:
4e:27:01:74:95:74:39:0e:bc:68:27:5b:c5:3f:17:da:20:e2:
60:3b:82:5b:8b:03:7a:94:86:17:40:dd:7a:c4:a9:a5:2d:a2:
69:b4:1c:f5:12:c0:71:aa:3d:4d:a8:68:5c:13:22:1d:e8:bf:
9f:ef:a1:93:25:f2:ce:a0:53:d1:39:ba:9b:85:f1:65:65:d8:
87:fe:2e:26:72:10:b0:91:75:93:ed:40:18:b6:e9:59:32:9b:
5f:40:7d:95:b8:19:a3:b8:8f:29:7c:af:0e:03:eb:d4:b8:21:
fc:6e:2d:39:43:e3:42:a4:7b:fb:9a:45:24:61:7d:08:2f:8f:
fa:c9:ac:f8:92:50:2e:19:35:f8:f1:af:91:08:3f:22:f5:0c:
5b:34:31:98:cd:22:86:d9:81:d0:9f:ae:17:42:30:db:65:44:
7c:f3:0f:eb:7a:d3:66:88:1e:c0:e6:a2:17:a0:73:f2:91:03:
33:9d:19:72:e1:91:49:6c:d1:2a:92:8a:7e:6c:94:8d:8e:03:
b3:57:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:24:10 2025 by rpki-client