Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier: bK6eDcNiXitGSqPecpRFPLU9f95wl4ThbaRVUfoWjqY=
Subject key identifier: A9:B5:A9:B3:34:F3:EE:E8:37:53:54:35:35:EE:4A:37:4D:A4:CB:9C
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer: /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial: 097C
Authority info access: rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number: 097B
Signing time: Thu 31 Jul 2025 01:21:12 +0000
Manifest this update: Thu 31 Jul 2025 01:21:11 +0000
Manifest next update: Sat 02 Aug 2025 01:21:11 +0000
Files and hashes: 1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: L0Ye8+s0RENOi0Em2V+tYX8A6de+6PJarZ+4JzvSlBE=)
2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2428 (0x97c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Validity
Not Before: Jul 31 01:21:11 2025 GMT
Not After : Aug 2 01:21:11 2025 GMT
Subject: CN=688ac508-1c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8e:cf:75:80:0a:f3:49:ba:b0:14:e5:8e:7a:
43:8d:6e:65:12:fe:91:24:10:f0:a2:e5:0f:88:6f:
81:68:45:35:65:0a:0e:46:1a:7f:f8:9b:29:1f:e8:
ca:ec:1a:17:64:bf:0c:68:da:ca:c1:af:9b:b0:45:
63:55:f9:3e:28:3e:70:e6:a8:aa:f8:36:46:89:03:
6e:6c:be:86:19:74:74:50:68:fa:c2:c0:bc:c8:d5:
fe:e9:8e:d3:fe:e5:6d:1a:81:0b:df:b0:36:cb:7a:
e8:11:d7:63:41:bc:82:df:09:bb:db:dd:b8:b3:fb:
96:f9:07:61:9d:d2:a8:41:a2:fd:29:2b:53:82:72:
dd:a8:ce:0a:3a:f2:1c:19:c4:af:b0:40:b3:d4:95:
cb:00:10:cf:ce:aa:5b:1c:62:aa:97:2e:2e:d1:7e:
d1:7f:86:c5:ac:32:38:62:9c:02:3e:6c:28:30:b1:
58:0b:31:9c:6d:3f:f7:c9:00:71:c2:f4:85:bc:a6:
99:d2:23:d7:ef:f9:4a:88:fc:ce:4d:fc:aa:cb:f7:
66:ba:8a:32:b5:45:68:2c:13:af:97:ff:d5:ed:2e:
91:85:82:b7:c0:13:21:43:2d:68:bb:a7:fb:a4:9c:
b7:03:07:d8:d7:2b:90:a0:53:bf:da:0d:b4:a5:30:
24:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B5:A9:B3:34:F3:EE:E8:37:53:54:35:35:EE:4A:37:4D:A4:CB:9C
X509v3 Authority Key Identifier:
keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:bf:0b:8a:00:b9:e4:81:bb:ec:7c:04:04:28:2a:f9:78:
98:3e:97:16:23:4c:c0:3b:86:e5:85:3c:b6:e4:77:57:40:a9:
28:a4:84:ff:a7:21:15:32:47:a5:62:f1:da:5e:84:d2:f1:a6:
91:af:95:7b:07:66:47:62:b4:63:ec:df:28:62:4d:e9:4f:d9:
1c:47:f9:b5:22:8e:f0:04:99:b0:cf:1b:4e:91:36:b7:29:f4:
78:c9:fc:6a:e3:55:37:07:e5:3b:96:02:43:cc:5e:48:6e:a4:
08:d0:c9:e6:5b:86:09:fc:85:7e:dd:52:c0:ea:ad:d8:e2:32:
8b:57:c5:9d:42:3a:f7:52:2b:89:2d:68:43:bb:27:dd:c3:15:
48:cb:4c:7d:dd:55:41:00:1a:55:3b:0f:77:06:1f:0b:01:61:
a9:2e:9e:35:bf:b3:aa:4c:db:91:cc:91:89:07:44:04:1a:2b:
e6:ff:74:12:de:ea:82:1f:7d:69:23:6f:5d:49:93:a5:92:c4:
78:97:50:61:68:41:b0:e5:95:32:06:92:cd:c6:1a:07:b4:6f:
9c:dc:9d:16:f7:1c:ad:c1:94:ad:cc:fc:85:4b:6e:25:d7:ae:
29:c7:85:cc:fc:b0:8a:95:3e:d9:5b:63:85:0f:59:54:8d:29:
e9:da:91:02
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCXwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEU2N0NBUjExMC8GA1UEBRMoNzEyRUU0NkNDRjEzMjgwODdGMkUzRjI4NjU3NjEx
OEMxMDY5Qjk3RDAeFw0yNTA3MzEwMTIxMTFaFw0yNTA4MDIwMTIxMTFaMBgxFjAU
BgNVBAMTDTY4OGFjNTA4LTFjMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDljs91gArzSbqwFOWOekONbmUS/pEkEPCi5Q+Ib4FoRTVlCg5GGn/4mykf
6MrsGhdkvwxo2srBr5uwRWNV+T4oPnDmqKr4NkaJA25svoYZdHRQaPrCwLzI1f7p
jtP+5W0agQvfsDbLeugR12NBvILfCbvb3biz+5b5B2Gd0qhBov0pK1OCct2ozgo6
8hwZxK+wQLPUlcsAEM/OqlscYqqXLi7RftF/hsWsMjhinAI+bCgwsVgLMZxtP/fJ
AHHC9IW8ppnSI9fv+UqI/M5N/KrL92a6ijK1RWgsE6+X/9XtLpGFgrfAEyFDLWi7
p/uknLcDB9jXK5CgU7/aDbSlMCSbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUqbWp
szTz7ug3U1Q1Ne5KN02ky5wwHwYDVR0jBBgwFoAUcS7kbM8TKAh/Lj8oZXYRjBBp
uX0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRFNjdDLzgyMjBCRTZBMjkxNjExRTk5NEExRTM2NUY4QUVBMjI4L2NTN2ti
TThUS0FoX0xqOG9aWFlSakJCcHVYMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NTN2tiTThUS0FoX0xqOG9aWFlSakJCcHVYMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEU2N0MvODIyMEJFNkEyOTE2MTFFOTk0QTFFMzY1RjhBRUEy
MjgvY1M3a2JNOFRLQWhfTGo4b1pYWVJqQkJwdVgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLxr8LigC55IG77HwEBCgq+XiYPpcWI0zA
O4blhTy25HdXQKkopIT/pyEVMkelYvHaXoTS8aaRr5V7B2ZHYrRj7N8oYk3pT9kc
R/m1Io7wBJmwzxtOkTa3KfR4yfxq41U3B+U7lgJDzF5IbqQI0MnmW4YJ/IV+3VLA
6q3Y4jKLV8WdQjr3UiuJLWhDuyfdwxVIy0x93VVBABpVOw93Bh8LAWGpLp41v7Oq
TNuRzJGJB0QEGivm/3QS3uqCH31pI29dSZOlksR4l1BhaEGw5ZUyBpLNxhoHtG+c
3J0W9xytwZStzPyFS24l164px4XM/LCKlT7ZW2OFD1lUjSnp2pEC
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:40:18 2025 by rpki-client