Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: DRO6qpMFWeMFHw+5Yp+cfjeDH5Nne88tZyBomVMmb+I=
Subject key identifier: F1:3F:BC:E7:4A:F4:1A:8B:4A:34:3B:03:3A:04:BC:66:E1:8E:06:E0
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0935
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0934
Signing time: Tue 16 Sep 2025 01:25:15 +0000
Manifest this update: Tue 16 Sep 2025 01:25:14 +0000
Manifest next update: Thu 18 Sep 2025 01:25:14 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: 4aZpkIiZTRGuoymv15O0h8Xy1uBKoht6T7cNJszCK2A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2357 (0x935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Sep 16 01:25:14 2025 GMT
Not After : Sep 18 01:25:14 2025 GMT
Subject: CN=68c8bc7b-4f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:0c:95:53:5f:20:78:8b:5e:e2:04:33:63:
85:0e:7f:cf:ae:10:52:01:78:c5:fb:76:94:54:27:
08:45:72:b7:7b:65:a7:e5:39:8a:01:ed:68:14:55:
dc:a5:6d:45:85:5c:d7:1a:59:de:3f:7d:46:97:a8:
af:88:59:2f:79:72:c1:a1:25:52:db:4c:03:ef:f1:
fc:9e:63:ed:c7:ad:9e:11:43:7c:99:c8:33:ad:73:
f3:24:e1:cf:f0:b0:49:c8:63:e4:3a:ae:ca:4a:e4:
0c:67:f5:47:24:01:cc:5d:d3:1e:50:f1:45:ca:6d:
e6:b5:5c:4a:d3:48:93:fd:b2:9d:a6:54:a2:27:fa:
c0:c4:3e:b7:c7:00:68:10:6f:f8:36:b5:83:80:f1:
cf:1b:d2:7f:0c:fd:0a:b0:b0:65:28:9e:ce:00:39:
02:bc:c2:77:31:cb:35:7b:39:75:5a:44:45:12:fc:
ba:56:cd:d5:dd:9f:c0:24:96:74:45:95:01:a9:d3:
7c:ef:9a:d7:05:ea:db:ec:46:b4:4b:6a:71:89:e0:
43:36:58:2e:e9:e7:ee:3c:f1:70:3c:ef:85:07:3c:
e3:54:ae:8f:cc:be:25:be:53:71:38:f6:7f:07:96:
fd:3d:4c:f8:ed:04:7c:f4:f3:37:d0:f7:24:95:e9:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3F:BC:E7:4A:F4:1A:8B:4A:34:3B:03:3A:04:BC:66:E1:8E:06:E0
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:fc:16:d7:51:87:0c:b0:02:87:91:22:ba:e2:eb:ab:7c:e2:
f3:08:2a:e1:18:6c:60:4c:b6:16:b1:c5:97:fd:8e:e1:d1:4c:
46:56:0f:11:1e:a5:e5:d8:43:b4:06:12:a8:b0:8d:9d:7d:0c:
bb:03:16:3d:26:e8:1d:8e:00:a2:4d:47:04:6c:7a:e9:71:94:
3d:06:22:f2:0b:46:f0:cc:d5:82:c7:75:0f:0b:47:e8:6a:bd:
dd:86:5d:23:0a:b5:84:ef:01:92:53:3a:e0:3e:81:c7:f8:8e:
df:a9:60:3a:f2:c9:be:56:81:a7:c1:ad:c2:10:42:af:a6:85:
ec:a2:15:6c:22:a2:28:02:f3:4d:71:b6:5c:0d:c0:61:36:7b:
2a:ca:ea:5f:d7:e1:66:62:0e:57:88:ad:04:28:b6:58:e7:22:
af:0e:6e:16:da:de:33:a3:60:69:45:d5:06:1f:cb:ce:47:84:
10:41:38:08:99:be:9f:89:54:e8:b7:3a:59:4f:e4:7e:0c:80:
c6:48:7c:74:3e:4c:8f:e1:61:9d:9c:a8:df:5d:89:8a:82:4c:
d7:09:ba:e5:c6:3a:ba:88:63:b9:d6:fc:1e:cc:07:61:7a:0f:
82:e9:e0:27:ea:d4:d1:45:ae:9a:67:fc:ce:a6:61:ea:23:f0:
9d:57:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:44:58 2025 by rpki-client