Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: EyM0SyHDCHLWYUGeqfY6D16OysI7U3LN/izgNo/8240=
Subject key identifier: 9B:4D:E7:18:F1:03:80:3D:61:C1:7B:2D:9A:E3:E1:D8:0F:27:A4:00
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 03E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 03E9
Signing time: Thu 31 Jul 2025 03:26:15 +0000
Manifest this update: Thu 31 Jul 2025 03:26:15 +0000
Manifest next update: Sat 02 Aug 2025 03:26:15 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: 9zO7srQL1F5pqWPO4tDwGp46076h1c2TU9JJfN2/VDI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1001 (0x3e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Jul 31 03:26:15 2025 GMT
Not After : Aug 2 03:26:15 2025 GMT
Subject: CN=688ae257-e27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ca:bb:20:f1:0b:39:24:dc:87:9e:e6:31:c4:
42:a7:9f:4a:a1:5f:b9:39:bc:59:51:82:0a:19:3d:
04:19:c2:31:46:31:c5:13:1f:1d:5a:25:6a:24:3e:
37:2a:65:16:69:29:f4:0c:9c:2c:7a:03:88:09:f9:
f6:25:cf:ad:54:e5:3a:6b:7d:41:21:e4:1c:4f:4f:
15:4c:64:f5:fc:74:29:4f:ed:71:dc:39:b6:fe:99:
e5:b7:88:6f:27:f7:3f:ce:1b:28:15:f8:df:44:ff:
bb:5b:ae:74:f6:36:ae:2d:32:e9:a3:69:95:2b:a6:
b6:93:02:15:c0:dc:39:b9:41:72:43:f7:03:eb:c9:
b7:9b:c4:67:95:13:fc:a0:8e:1d:da:32:3b:18:54:
9f:2a:a1:b1:ae:10:0a:b4:d7:3c:e6:db:15:b5:2a:
af:9d:db:31:9b:86:9c:56:01:90:b4:1e:fa:81:a3:
7c:d4:59:46:c5:16:cb:69:51:34:83:28:78:22:d8:
d9:d0:6f:71:87:4a:13:4e:b6:8e:c9:6f:bd:97:26:
55:57:1d:f5:91:52:f5:9f:5a:6e:f5:f3:62:6b:ba:
ee:cd:73:29:99:6e:ef:1b:0c:c8:b0:f6:63:98:ac:
53:df:bd:e7:38:20:3f:a2:26:71:0e:da:f9:c4:d9:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4D:E7:18:F1:03:80:3D:61:C1:7B:2D:9A:E3:E1:D8:0F:27:A4:00
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:85:7f:bf:59:e2:52:c1:09:43:32:d0:78:44:b6:ea:79:dd:
14:d0:7a:1a:57:45:ec:66:28:8e:3d:c5:9b:5a:13:11:7b:f2:
62:ee:df:03:53:c1:3c:5d:f1:5b:aa:33:fd:70:fc:7f:c7:5e:
4e:bc:91:4e:e2:c1:2a:73:dd:91:8f:cf:c6:c0:24:f5:b5:60:
25:c7:18:84:5e:53:2d:d3:13:2d:5c:71:8c:c4:9c:1c:3f:67:
09:eb:c3:7b:c6:d7:46:c5:e4:8e:fd:02:a3:55:85:b1:d4:68:
89:e9:b6:f1:c1:84:6b:92:85:47:74:49:ba:71:f2:0f:45:08:
5a:2d:af:fa:1b:3b:d2:78:eb:29:03:6b:88:54:e9:2f:99:19:
83:20:5e:2b:e5:69:7a:b8:91:c8:af:cf:44:9a:07:a9:aa:d0:
fc:98:68:a9:fe:ca:98:be:f8:b8:6c:d8:92:1e:e9:15:9c:80:
31:bf:2e:37:f2:fa:d6:30:09:74:11:87:bd:60:f0:d3:68:f3:
b1:f8:ef:6f:8d:7d:1b:a2:8d:86:2f:e1:9a:8f:4d:93:d7:c2:
eb:fc:bb:a3:c3:de:4b:f8:30:59:f6:83:fc:a3:a3:3f:77:bd:
25:2d:75:a9:dc:75:42:67:0b:d4:7e:fd:b2:c7:0f:4b:1d:9d:
52:af:42:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:02:16 2025 by rpki-client