Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: I+MTYWw9ruMz4gRQ0BmZnqWQcAuGYFRTtK8HRGiRLa4=
Subject key identifier: AE:A9:9C:72:F2:A3:99:9D:5D:92:CE:9A:D1:7E:E2:07:05:0D:46:72
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0D59
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D39
Signing time: Thu 31 Jul 2025 01:04:59 +0000
Manifest this update: Thu 31 Jul 2025 01:04:58 +0000
Manifest next update: Sat 02 Aug 2025 01:04:58 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: XY1UTJXEUmdyGOsUFtj1+/CMDSn0NB9AeDY70qqC5Yg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3417 (0xd59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Jul 31 01:04:58 2025 GMT
Not After : Aug 2 01:04:58 2025 GMT
Subject: CN=688ac13b-a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:86:d8:16:d2:d5:ee:6c:ec:84:28:c0:2e:
23:ac:e0:7d:8a:7e:c1:15:88:b6:83:35:0e:80:f8:
b3:5d:8d:d4:3c:65:a8:42:20:d3:69:04:68:b7:da:
6d:77:73:d6:6f:79:57:6d:71:d4:04:75:30:1d:b9:
f1:6f:4e:66:b1:d9:97:92:df:d1:88:bd:29:4f:d5:
bf:be:cb:63:db:60:bd:dc:7b:2c:b8:b6:99:fd:5f:
00:41:e7:12:24:fc:22:f5:97:f2:eb:28:14:c1:24:
74:7f:c1:89:ef:5e:95:d9:dd:f7:9c:3d:f5:f0:8d:
fe:ae:e4:c5:f7:fc:c8:8c:e1:51:28:52:45:02:fd:
cf:ba:5f:c0:71:e3:00:62:27:d6:7e:06:ab:32:b8:
8b:68:c2:9b:35:fe:dc:92:e3:02:01:03:87:cc:d3:
20:37:0b:59:77:7c:61:1d:61:57:04:7d:2b:c8:81:
b0:b6:b4:ce:6a:c4:49:a8:55:34:f6:72:73:b0:2c:
0d:81:2f:28:2a:a5:25:21:e1:6e:db:76:94:27:ea:
6f:9e:f6:ec:f0:50:d0:9d:45:ae:ce:f3:d6:eb:0a:
ee:a6:67:fa:20:5a:c1:15:ae:f0:eb:d5:21:35:9a:
22:99:95:f5:e4:70:4f:ed:b2:89:9b:99:e5:ac:1f:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:9C:72:F2:A3:99:9D:5D:92:CE:9A:D1:7E:E2:07:05:0D:46:72
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
26:0e:96:a7:00:61:a4:96:e1:51:5f:10:cd:63:da:12:81:a4:
8c:b9:20:23:39:e5:c5:25:81:0f:b4:ec:3d:0c:cf:29:e2:ab:
cc:c6:29:21:e4:5c:0c:4e:4e:01:e6:f9:16:5e:ab:db:af:db:
8f:94:d5:4e:6d:23:d3:11:55:32:10:a5:13:d0:6c:85:c6:8a:
03:b7:3e:be:8f:1c:b3:d9:34:33:bd:00:4f:0b:8c:97:5a:f9:
bf:6d:8c:f2:7a:10:cc:e2:72:48:4c:13:6b:05:cc:6f:88:bc:
b5:9a:48:cb:a6:26:f7:9d:16:03:3f:cd:c5:a8:86:c5:e5:a7:
ec:ac:b4:e3:7d:f6:ec:ef:73:70:d9:5c:1c:5c:46:94:5b:c7:
d3:2f:fd:d1:75:ec:3c:a8:e0:f6:fc:ad:67:dc:43:7f:13:53:
dd:f2:6f:1f:39:ed:a7:e6:64:8c:bc:bf:6a:ae:7a:fa:09:81:
0e:9a:be:df:b2:35:2e:5c:6b:91:39:c2:31:ee:39:06:da:0f:
93:4f:0e:f1:29:32:36:16:19:67:46:1e:dd:32:f1:31:ae:ef:
4b:94:e6:1b:13:bf:72:5e:dd:77:b6:e3:43:5f:ae:0a:c4:47:
cc:8f:f7:0f:f2:92:ac:aa:95:0b:e1:27:39:db:b4:68:48:e1:
8f:39:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:06 2025 by rpki-client