Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier: SPzBna8JLchnpu+vAOWudGLVSuxoua8xUobKg3SNsnI=
Subject key identifier: 71:21:2A:72:0D:39:2E:54:B1:DB:C7:41:FC:46:1A:7C:B5:2E:3E:4E
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer: /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial: 0949
Authority info access: rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number: 0948
Signing time: Wed 11 Jun 2025 01:19:54 +0000
Manifest this update: Wed 11 Jun 2025 01:19:54 +0000
Manifest next update: Fri 13 Jun 2025 01:19:54 +0000
Files and hashes: 1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: LWkGZRPFdVywyhXUlLlZYDyZW/0g5knQn9V98cHm0lE=)
2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2377 (0x949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Validity
Not Before: Jun 11 01:19:54 2025 GMT
Not After : Jun 13 01:19:54 2025 GMT
Subject: CN=6848d9ba-493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:3c:b9:c6:90:db:c8:2a:ec:df:e3:a0:ee:
7e:ef:aa:4f:9d:d0:19:e2:1a:1d:2b:9f:5c:0a:d6:
bd:cf:fd:cc:07:e6:bb:c9:48:f1:64:94:9e:b9:9f:
d4:9f:58:5d:54:3f:df:61:f7:60:0d:71:c5:f0:f2:
62:d5:81:bc:3d:8c:20:f8:05:0c:3f:17:2a:30:15:
99:8a:87:ed:34:8a:dc:4d:34:f9:06:56:23:9f:19:
8b:30:21:1b:b8:81:59:64:bc:c5:19:46:e4:c3:48:
b2:bc:e2:df:41:19:f7:62:9a:43:c8:71:f7:a5:bf:
50:2a:5b:62:47:5e:4f:70:7c:f2:ba:6e:6c:65:bf:
49:8b:7d:c8:0a:c5:11:36:bb:da:09:3b:62:55:1c:
ef:9d:19:ac:da:14:63:92:df:84:5d:8f:96:c4:4b:
a7:26:cc:19:d2:79:94:0d:18:2f:1a:95:7b:4c:64:
4e:68:57:9f:8e:3c:42:ec:59:cb:f6:e3:68:74:d4:
b4:9a:18:6f:51:3f:6b:df:00:77:d6:52:4f:f3:b5:
9b:a2:5c:b7:02:6d:b6:aa:8d:04:6f:66:69:b4:06:
3b:95:6e:90:cc:c7:2f:f4:1f:9e:93:c3:f9:02:36:
47:fa:3e:63:76:f7:21:f4:e9:c6:c8:a8:65:76:34:
a9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:2A:72:0D:39:2E:54:B1:DB:C7:41:FC:46:1A:7C:B5:2E:3E:4E
X509v3 Authority Key Identifier:
keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:c3:c9:43:b3:db:e8:3d:e2:c3:27:59:cd:1e:9c:25:c7:
ba:15:67:9f:fb:79:5a:92:0e:c6:1c:da:2f:ba:ec:96:5e:33:
5c:91:79:58:d1:43:eb:62:a9:60:c3:05:c2:ea:22:da:98:45:
bd:fe:75:03:bf:07:af:a5:87:75:d7:4b:a0:68:ff:b3:37:b5:
ce:4a:51:a2:1f:6b:ab:07:7d:55:d5:07:ea:47:63:e8:29:c1:
0c:38:a2:fb:08:2b:5f:bd:67:a0:00:ef:90:39:26:64:4e:91:
d7:79:98:cd:46:9c:07:9e:4b:ba:42:2d:24:f3:0d:8d:26:1d:
c6:78:00:54:a8:ba:05:89:7d:eb:6c:6b:97:96:78:46:13:ce:
e2:9f:bd:48:31:f0:b5:1a:43:b2:ee:48:1e:ec:dc:f0:e2:e6:
6e:ce:91:43:41:26:7e:2f:ce:25:da:ec:41:32:32:bc:5d:71:
86:91:87:40:ae:fd:a8:dd:21:84:34:4f:07:9e:aa:e6:b8:d3:
bb:c2:21:ef:33:0e:42:6c:ce:1b:92:e7:12:93:4a:1c:89:57:
3b:6a:74:31:02:79:9a:f2:4c:d8:c0:2f:78:d6:2c:aa:02:35:
37:3a:f9:19:1c:a0:67:d2:09:26:80:e4:b4:ea:78:76:f8:04:
fb:d5:0b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:45:18 2025 by rpki-client