Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: qrbKIcfaU/HbunuNmWkDJTKW5tkq9beBtGz+jy09F9o=
Subject key identifier: E4:DA:FD:C7:0C:BD:29:2C:2D:16:82:C0:4A:D4:65:8B:85:BF:EE:6A
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0902
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0901
Signing time: Sun 27 Jul 2025 01:29:27 +0000
Manifest this update: Sun 27 Jul 2025 01:29:27 +0000
Manifest next update: Tue 29 Jul 2025 01:29:27 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: xdvFYXZej1I8vmNwcre+BBPaTd0ZQia3chp7Gi9UG30=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2306 (0x902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Jul 27 01:29:27 2025 GMT
Not After : Jul 29 01:29:27 2025 GMT
Subject: CN=688580f7-b9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e8:97:e5:c5:58:e4:b9:be:c9:4b:48:b3:a4:
36:b6:51:ef:25:d2:5f:48:96:d7:5f:fa:4a:d6:6e:
3c:ce:21:8f:9a:51:94:e5:2e:c2:58:4e:4f:b3:f1:
f1:e4:ce:e6:73:e3:d0:76:5c:89:3c:ea:7a:a6:22:
83:5f:b7:c2:7e:65:fc:54:63:16:aa:0c:2e:01:f2:
0b:1d:9f:dc:1c:0e:3e:a6:2e:48:09:6a:ad:77:d7:
e7:5a:33:77:a5:ac:0a:8f:de:42:a8:d9:1a:10:cf:
01:7b:fd:e4:49:1c:a8:43:f1:11:3d:22:8f:a5:87:
eb:29:b4:3d:6f:01:89:ea:0e:fb:97:2e:41:62:96:
eb:c9:41:fe:01:29:16:51:b5:48:f6:53:75:95:94:
2e:56:8c:6b:fb:4c:aa:2e:37:71:47:e2:c8:3d:7f:
fd:ad:62:8a:5b:eb:7f:c3:76:2e:48:c8:07:d4:9e:
17:fa:e2:06:a8:28:0c:3f:4d:1f:72:0e:7d:a2:43:
dc:3b:75:9f:55:82:34:96:22:3f:3a:b7:0d:13:9c:
34:ee:ab:21:e8:99:a7:fb:29:b7:24:21:19:4e:cd:
e9:2c:3f:66:08:b6:04:95:c2:92:08:ec:90:f1:f3:
64:7b:be:af:e3:be:2f:fd:d6:2f:9a:c0:f7:99:45:
21:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DA:FD:C7:0C:BD:29:2C:2D:16:82:C0:4A:D4:65:8B:85:BF:EE:6A
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:6d:15:e1:4a:83:68:e3:f8:5c:e5:de:98:05:71:88:56:1d:
e6:99:4d:24:70:74:82:17:fd:d5:74:91:f5:8f:d3:e9:8e:42:
ab:33:a4:ad:d5:f2:89:3b:0f:09:14:d7:b6:87:b1:6e:99:99:
75:15:8c:18:f2:c1:d8:ae:98:20:51:4f:06:63:fb:bc:3f:b5:
1a:ee:04:05:2c:82:cb:f1:29:ff:18:67:7e:16:21:05:b6:4a:
21:98:f5:cf:4e:bf:d4:8a:b0:62:2d:b3:1f:b4:a5:92:19:56:
c8:99:0c:5e:d8:4f:4a:66:2d:d0:57:47:01:51:3d:4f:1f:e7:
94:a4:27:bf:01:60:dc:7a:08:1b:b0:88:38:60:20:3a:f9:87:
bb:48:26:6a:2b:a1:88:84:21:de:bc:72:f3:b1:0a:7c:e0:0b:
23:82:04:a1:78:27:a2:a6:dd:d0:7f:15:eb:27:87:c6:99:51:
0f:b0:76:c0:76:61:88:f0:e8:cf:d4:cf:1b:09:ca:7d:86:7d:
d3:ba:46:4f:72:f5:d7:c8:62:fd:a8:fb:e2:e2:13:14:88:ce:
25:ad:a2:2a:48:49:51:fe:28:8f:55:ef:21:68:58:7a:a8:88:
a4:c5:df:6b:bb:b8:aa:70:21:05:41:76:fc:54:75:57:5e:27:
e2:6b:e6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:36 2025 by rpki-client