Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File: UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier: OFqwR0xJcD6rWt21vL+ObemufaqhdFyKTo/V2RHpD3g=
Subject key identifier: 36:CA:15:0F:D1:6A:A5:AA:85:AA:35:19:5B:46:36:C5:0D:68:75:4C
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer: /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial: 03A8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number: 03A8
Signing time: Wed 17 Sep 2025 03:21:27 +0000
Manifest this update: Wed 17 Sep 2025 03:21:27 +0000
Manifest next update: Fri 19 Sep 2025 03:21:27 +0000
Files and hashes: 1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: ek6k2Q90pec3WhxUFGq4UeSCIQ44rfN4Guzist7+nOU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 936 (0x3a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Validity
Not Before: Sep 17 03:21:27 2025 GMT
Not After : Sep 19 03:21:27 2025 GMT
Subject: CN=68ca2937-12cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f6:c0:b6:c1:41:e5:0c:8e:1e:58:04:f3:18:
c9:ae:d3:b5:52:37:17:83:b9:68:57:7a:dc:b5:62:
58:6e:5a:8f:6a:cc:22:e6:f0:a3:25:f7:f9:dc:2c:
2d:99:5f:1e:79:18:c7:a3:1c:13:98:49:8d:3c:69:
e4:5c:c3:52:18:bc:0f:b2:12:7e:3e:1d:4f:51:30:
a8:01:b1:88:09:d7:42:00:96:89:dc:23:18:24:dd:
da:de:37:b3:da:71:06:08:c0:67:2e:c0:75:52:62:
61:d7:ea:93:ff:40:ab:84:11:12:41:87:5f:75:11:
1f:fa:af:2e:11:43:30:91:aa:b2:c6:93:9b:b4:90:
fd:fe:6e:fe:49:22:f8:ad:f6:e7:5c:40:f4:43:dc:
54:04:d9:1a:89:5f:2b:5c:13:7c:5f:d2:65:ba:da:
14:ea:ef:56:a7:01:22:21:29:7d:d0:88:90:91:fd:
76:37:e9:44:78:4e:a9:b6:5c:84:59:c8:69:eb:8a:
1d:f2:70:e4:58:61:56:84:43:a0:02:bf:fa:87:5c:
bd:ea:fd:53:1e:16:c3:de:26:d0:57:b8:1b:7b:c2:
cd:ea:ce:1d:ec:02:7b:bb:e2:a2:ef:c6:3a:fb:b9:
8a:12:9c:3c:6f:90:c7:10:3c:3e:5d:58:45:be:48:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:15:0F:D1:6A:A5:AA:85:AA:35:19:5B:46:36:C5:0D:68:75:4C
X509v3 Authority Key Identifier:
keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2c:21:72:35:e2:6e:e6:a1:c6:4c:e7:f4:63:b6:fd:0b:8d:
76:62:76:ab:1f:19:22:65:84:b2:d6:e3:ed:63:a4:c4:77:29:
fd:88:71:70:5a:c0:11:5a:10:db:ef:b0:55:7a:24:1c:d7:80:
17:11:66:34:0d:bf:7b:a1:7f:82:c1:0c:a2:72:1b:7c:76:9c:
f3:3c:3a:a3:d0:ad:fd:45:ff:9f:f7:da:f6:21:17:ab:ee:78:
fb:b0:d1:84:7f:da:df:08:33:8c:77:bf:4b:9c:53:cd:c8:93:
1b:4e:47:f6:fd:da:e6:04:f0:b2:d5:11:f0:73:16:49:7e:54:
32:78:bb:97:b1:c2:34:9f:26:99:45:af:fa:72:54:0b:32:1d:
f9:39:9c:ba:91:03:30:3c:d3:ec:f0:52:c8:f1:12:3b:0d:20:
df:ed:b6:6c:04:1b:ff:44:88:5d:60:25:1b:43:3a:25:3c:4f:
6c:53:51:e4:77:ac:b3:dc:ce:9b:1e:a4:87:34:7d:9c:73:a3:
6f:ac:bd:05:d5:b2:5e:81:c0:42:96:b1:a7:69:0a:dd:a5:73:
3d:2b:81:ad:53:93:b4:b4:c7:0d:14:13:64:e3:ba:24:92:3f:
ae:17:c3:63:bc:ca:e3:e8:79:57:3f:48:5b:86:b5:96:ef:c8:
e1:b5:03:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:27 2025 by rpki-client