Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File: PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier: grdWqCATdgipIofGiemCs9lybT58S57LEjhF7WbC6XE=
Subject key identifier: 25:07:F7:BE:0F:39:AD:C3:54:EF:08:2B:DC:AB:77:D7:B8:59:E4:6E
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer: /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial: 04B2
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number: 04AF
Signing time: Sun 27 Jul 2025 02:57:42 +0000
Manifest this update: Sun 27 Jul 2025 02:57:41 +0000
Manifest next update: Tue 29 Jul 2025 02:57:41 +0000
Files and hashes: 1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: LEY2nUBBsgPyY+8DF8NwRLAi8rkYxMfuL2PQ+cCqYfs=)
2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1202 (0x4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Validity
Not Before: Jul 27 02:57:41 2025 GMT
Not After : Jul 29 02:57:41 2025 GMT
Subject: CN=688595a6-980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:0e:03:2d:5a:87:5d:c8:e5:5b:c7:01:73:
81:2a:d4:81:96:13:d8:1a:78:03:71:ee:e7:68:09:
a1:d9:11:1c:d5:7f:d1:8e:43:56:90:3d:b4:5c:19:
a7:ab:ee:c4:52:8a:f1:6d:a7:c7:bd:c1:ce:96:27:
df:c4:a8:69:37:11:61:a5:97:bc:57:1d:ee:52:71:
64:f8:5d:77:b1:79:6c:7b:f4:77:50:9a:6d:42:e5:
bf:85:d8:3f:ed:2f:7f:1a:e8:6a:20:ce:a7:68:c2:
67:91:c6:a2:ef:09:55:73:fd:66:57:f0:db:d8:7e:
16:92:1d:d2:84:97:bd:23:c5:4e:0b:d0:5f:d6:ac:
23:10:3b:56:5f:4d:a4:f7:a4:2d:ef:df:8e:38:32:
f0:a5:69:ea:6d:dc:47:bf:18:71:69:f5:65:90:27:
f7:55:0f:a8:84:39:93:07:dd:8a:be:d7:4a:21:d0:
3e:9d:0c:21:79:b7:16:a2:e3:80:aa:78:8a:4f:ba:
84:83:b5:72:02:20:1a:88:90:0f:6c:1c:60:c0:59:
57:de:c9:46:9f:56:57:88:62:2d:ec:cd:3c:fe:d1:
3c:32:7e:9f:d6:90:3b:ef:76:b6:7a:28:20:54:20:
57:7a:9c:c1:42:0a:a0:53:9d:89:5c:a8:0d:2a:85:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:07:F7:BE:0F:39:AD:C3:54:EF:08:2B:DC:AB:77:D7:B8:59:E4:6E
X509v3 Authority Key Identifier:
keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:5a:fb:08:17:a2:a5:03:39:16:4a:0a:ec:40:1e:43:e9:35:
5f:ee:41:ce:d7:8b:c6:24:50:0d:84:a8:74:9d:fd:07:da:8c:
e0:3e:6c:b3:df:df:83:ce:55:70:48:74:6f:03:61:12:fe:41:
0e:ca:ad:03:f3:0a:3e:2b:3c:43:88:f0:05:4c:0f:b0:ea:1a:
bb:08:62:92:7f:91:90:6d:24:10:96:89:a9:e9:1d:cc:8e:db:
4c:28:a9:1f:5d:f3:70:ae:a1:13:76:d3:8a:36:69:c8:0c:2a:
29:83:64:c4:a7:12:dd:83:6c:fb:59:47:a4:d2:5f:23:b9:49:
12:99:04:92:f9:53:89:8d:2e:73:b5:90:8f:68:bf:1a:64:06:
83:2d:3f:e9:cd:9c:5d:d2:3d:0a:93:7f:22:53:28:f0:18:36:
fc:10:53:dd:a7:43:a0:a6:01:2d:72:9e:c7:bc:10:82:e1:a4:
76:a5:bf:75:15:0a:50:b2:b2:e5:60:f1:3d:29:a7:e2:dc:f7:
90:7a:37:12:cd:22:79:43:17:11:ab:98:67:e5:7f:d2:2e:04:
64:e5:ce:9d:95:89:39:ac:f7:7f:ca:cc:40:c5:70:33:79:42:
65:10:3f:00:f0:99:1a:a4:2f:b2:57:11:79:df:73:f9:d0:5d:
86:7d:81:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTk4RjVBRjExMC8GA1UEBRMoM0Q0QTRFRkQwMjlBMTEyRUI4OUFBQzhFQ0E5RDkx
N0E0N0NCNkM1QzAeFw0yNTA3MjcwMjU3NDFaFw0yNTA3MjkwMjU3NDFaMBgxFjAU
BgNVBAMTDTY4ODU5NWE2LTk4MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5Ww4DLVqHXcjlW8cBc4Eq1IGWE9gaeANx7udoCaHZERzVf9GOQ1aQPbRc
Gaer7sRSivFtp8e9wc6WJ9/EqGk3EWGll7xXHe5ScWT4XXexeWx79HdQmm1C5b+F
2D/tL38a6GogzqdowmeRxqLvCVVz/WZX8NvYfhaSHdKEl70jxU4L0F/WrCMQO1Zf
TaT3pC3v3444MvClaept3Ee/GHFp9WWQJ/dVD6iEOZMH3Yq+10oh0D6dDCF5txai
44CqeIpPuoSDtXICIBqIkA9sHGDAWVfeyUafVleIYi3szTz+0Twyfp/WkDvvdrZ6
KCBUIFd6nMFCCqBTnYlcqA0qhQKvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJQf3
vg85rcNU7wgr3Kt317hZ5G4wHwYDVR0jBBgwFoAUPUpO/QKaES64mqyOyp2RekfL
bFwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5OEY1L0E0MTBEMzUwREMwMjExRUM5OUUzNjE4OEYxMjIyNDY4L1BVcE9f
UUthRVM2NG1xeU95cDJSZWtmTGJGdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BVcE9fUUthRVM2NG1xeU95cDJSZWtmTGJGdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEy
MjI0NjgvUFVwT19RS2FFUzY0bXF5T3lwMlJla2ZMYkZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASWvsIF6KlAzkWSgrsQB5D6TVf7kHO
14vGJFANhKh0nf0H2ozgPmyz39+DzlVwSHRvA2ES/kEOyq0D8wo+KzxDiPAFTA+w
6hq7CGKSf5GQbSQQlomp6R3MjttMKKkfXfNwrqETdtOKNmnIDCopg2TEpxLdg2z7
WUek0l8juUkSmQSS+VOJjS5ztZCPaL8aZAaDLT/pzZxd0j0Kk38iUyjwGDb8EFPd
p0OgpgEtcp7HvBCC4aR2pb91FQpQsrLlYPE9Kafi3PeQejcSzSJ5QxcRq5hn5X/S
LgRk5c6dlYk5rPd/ysxAxXAzeUJlED8A8JkapC+yVxF533P50F2GfYHc
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:25 2025 by rpki-client