Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File: Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier: M757BZk/IvYuOs6apzEOvmtwvojqa54QwaVrVmb2fEs=
Subject key identifier: 8A:76:27:51:A2:F1:ED:B0:E8:B5:B1:D3:61:CD:93:81:AA:74:64:1E
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer: /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial: 03B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number: 03B0
Signing time: Sun 27 Jul 2025 03:29:09 +0000
Manifest this update: Sun 27 Jul 2025 03:29:08 +0000
Manifest next update: Tue 29 Jul 2025 03:29:08 +0000
Files and hashes: 1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: +ZrPiuG3iZdbvjPEP+dHrJs9eJJoh9HDI4jZ3W0bEUQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Validity
Not Before: Jul 27 03:29:08 2025 GMT
Not After : Jul 29 03:29:08 2025 GMT
Subject: CN=68859d05-7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:df:52:b8:88:b3:4f:00:c7:2f:4b:ec:32:c8:
53:a6:79:6a:77:5a:19:8f:5f:41:0b:d1:23:57:78:
85:e3:e2:57:9f:0a:e2:fd:ce:18:8e:69:62:34:40:
8e:df:c6:47:47:da:70:83:f8:6e:34:9f:81:0e:57:
e3:c4:60:0c:91:fd:3f:4e:1f:24:3d:cd:b8:e4:ee:
ee:cc:9a:f1:9b:d9:96:9f:7c:a9:a0:ea:15:b8:1f:
f6:7f:59:c5:64:d5:ab:fa:3f:f7:7e:f0:67:5f:10:
d6:ba:82:4d:31:26:b1:28:80:b6:0a:a1:51:e9:c8:
f2:ba:10:f4:29:8c:3e:ae:e4:6e:37:1e:9a:89:6d:
09:13:a6:5f:db:74:26:da:b5:bc:e6:34:f6:f3:34:
2c:63:94:25:ec:02:6a:e6:aa:01:c1:f7:f9:34:86:
e7:13:6b:b9:f3:13:75:88:e8:9c:cd:79:32:64:6c:
77:13:9c:d0:5c:c2:f7:35:d2:ed:82:fd:21:7c:af:
91:d9:13:a2:d2:20:db:59:a1:31:ea:18:f1:66:51:
1b:b9:36:49:19:0f:42:e3:28:d9:8c:12:d9:af:09:
0c:c6:e2:b2:02:d7:2c:55:dc:2a:e8:20:db:81:bb:
ef:2d:e9:5b:54:37:8f:5c:df:6c:b9:f7:83:69:ef:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:27:51:A2:F1:ED:B0:E8:B5:B1:D3:61:CD:93:81:AA:74:64:1E
X509v3 Authority Key Identifier:
keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:2a:f0:fa:12:b1:80:59:03:12:87:da:e7:46:52:c1:82:bc:
d4:61:73:8b:69:a6:a9:08:e9:73:77:e4:95:be:b1:40:9b:6b:
de:eb:f9:eb:b4:22:02:ca:d6:a0:d7:46:b2:ce:34:c5:44:0b:
40:ef:8c:25:68:d2:8e:a3:75:06:fe:e7:a3:4f:28:1a:a1:37:
8d:80:01:e8:c8:55:b6:b3:0e:4a:f7:24:ff:9a:c0:86:35:12:
4e:21:b5:e3:41:d9:2f:3e:2b:bf:ec:c7:c8:79:e2:38:b3:b0:
6a:16:3c:00:32:f4:27:ef:f2:0d:cf:2f:7d:b9:7e:08:83:46:
8e:24:1d:39:dc:d3:9c:61:bd:cc:54:5a:dd:53:2f:ef:0d:36:
1d:7e:53:6e:bd:1f:69:33:6d:54:9d:2a:05:0a:00:89:d3:f0:
70:3a:f4:bd:42:54:1f:8e:98:b1:3d:78:96:da:08:b1:88:df:
0f:8c:e2:85:86:c4:5c:68:6d:08:42:96:1a:f1:42:16:ed:d1:
42:c3:5f:1a:35:2a:79:a8:48:08:a1:1d:29:21:e6:d9:5f:37:
61:d7:8c:71:90:b5:20:eb:e2:af:29:a5:5a:85:65:ff:25:37:
1b:f1:b2:ea:22:3a:6e:85:4f:21:34:14:7a:9f:ee:bd:d4:13:
e8:40:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:57:04 2025 by rpki-client