Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: +hiEv++e+HtMuJEQw6OXe6nnZDPdOD0erOWo/iNOVTA=
Subject key identifier: 3A:0A:3F:00:BB:22:5F:C4:C0:56:EB:D4:5D:3B:23:2A:C4:33:6F:FC
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 0917
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 0917
Signing time: Wed 17 Sep 2025 01:31:19 +0000
Manifest this update: Wed 17 Sep 2025 01:31:18 +0000
Manifest next update: Fri 19 Sep 2025 01:31:18 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: 04Mnpo3CYEOhWkFaC4OivS+lMqYzJbwMBf0Ys9WIbl8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 01:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2327 (0x917)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Sep 17 01:31:18 2025 GMT
Not After : Sep 19 01:31:18 2025 GMT
Subject: CN=68ca0f67-b570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:44:d0:78:a6:39:65:04:54:c9:52:da:52:99:
b5:5e:05:8d:87:c1:03:58:0a:95:47:37:7a:a0:16:
d9:76:c8:28:c0:d9:c4:ca:25:bb:3a:1c:70:4d:c1:
ac:82:de:0c:da:6b:ed:ab:3b:32:e7:4a:81:ae:7f:
1d:67:89:47:20:b4:a2:0b:89:63:fd:2a:8c:06:b7:
97:c4:23:71:9b:e0:c6:77:37:e8:11:ad:cd:ab:e7:
0f:27:da:0c:f3:df:4e:9d:31:f2:f1:4c:8d:38:f3:
62:f3:68:f1:ef:32:f5:cb:2e:78:e6:e3:c9:db:66:
06:cf:7f:7f:47:a6:46:11:4b:2d:ed:45:0b:e7:b7:
b9:1b:54:44:42:1e:42:1a:48:f4:ac:0c:17:41:2d:
de:b4:08:45:90:48:a0:87:de:32:57:5b:43:c8:07:
b2:ff:5a:06:fc:a0:cd:34:cb:cb:b2:c7:47:f6:02:
b2:41:16:95:13:06:8f:1f:f0:05:54:0c:8f:aa:f4:
a7:4a:b6:ce:91:7d:ec:15:19:84:87:b8:65:f6:26:
c3:fd:ef:5b:5b:c4:6c:26:c4:c4:f8:39:6a:a4:25:
a9:62:96:8a:8b:28:6a:5c:cc:7f:44:90:1b:5b:2e:
7d:b7:7c:ce:45:ee:71:ba:3a:41:8b:21:3e:3d:87:
39:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:3F:00:BB:22:5F:C4:C0:56:EB:D4:5D:3B:23:2A:C4:33:6F:FC
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:95:83:94:b1:0e:df:da:a7:73:f9:6b:00:5f:1f:0e:47:
5d:53:e6:ad:d2:e9:09:b7:c6:df:a7:93:3c:e5:11:60:6c:6c:
c2:e6:85:d8:d9:66:89:d9:3a:f9:21:b2:54:13:d5:14:38:8f:
79:c7:96:18:3c:c2:97:f2:a5:74:5a:98:9e:e1:36:18:55:19:
5c:1e:19:24:e1:39:af:60:61:4c:81:1a:a5:bc:44:7b:59:0c:
8e:f9:a6:6b:75:d2:31:d9:c2:03:69:19:c4:d1:fb:78:48:01:
4c:13:1f:5c:a5:02:08:7e:5c:c7:28:8a:96:a0:cd:52:d0:56:
9d:92:68:c6:8d:80:51:75:45:24:2c:d5:47:27:b5:7b:fb:ff:
18:e9:25:a6:e9:e2:f4:3a:66:29:34:0c:1c:82:74:52:15:6b:
9f:87:02:cb:bd:cd:fb:f0:87:e2:9c:12:1f:cf:e8:b0:26:e8:
59:14:e0:33:9a:3f:41:8b:dc:f3:67:7f:dd:a5:9b:69:a9:ec:
ce:b5:e8:91:08:9f:fb:9f:2b:ec:e4:ab:73:4b:d4:43:0b:42:
ed:96:04:b8:5f:a8:93:a4:06:19:61:85:95:ea:7b:3e:6c:4e:
d7:64:6b:31:82:7b:7b:b9:33:db:ee:ce:c5:f5:39:49:0a:2d:
c2:ff:37:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:01 2025 by rpki-client