Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier: 72eLJO2unSfnJVRutK2eUZXRZwLaXBrlv2vI/+7jkQ4=
Subject key identifier: AE:F3:39:1F:C2:B4:38:51:62:65:6E:59:AB:00:E3:13:95:D4:C5:BA
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer: /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial: 0865
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number: 0860
Signing time: Thu 31 Jul 2025 01:45:23 +0000
Manifest this update: Thu 31 Jul 2025 01:45:22 +0000
Manifest next update: Sat 02 Aug 2025 01:45:22 +0000
Files and hashes: 1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: qc+V12QzL1zajqhFtkiBGC/Q1834zE/AM/CfcirBf1M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2149 (0x865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Validity
Not Before: Jul 31 01:45:22 2025 GMT
Not After : Aug 2 01:45:22 2025 GMT
Subject: CN=688acab3-8f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:65:68:11:85:0f:df:7c:e1:97:08:a3:b3:
ce:be:f5:1f:73:6a:6d:4f:e4:0d:2e:3b:c4:ff:82:
d9:66:46:49:ad:64:0e:94:7c:09:91:30:1a:28:e2:
e7:69:2b:69:b3:3e:01:1b:c1:93:3f:99:cf:06:08:
af:e7:9a:a2:de:cc:10:88:ee:56:b6:d3:ec:c6:80:
be:ea:a1:8f:8b:af:ce:3a:5a:58:2d:2b:a1:bf:1f:
1b:fd:3c:de:e0:9e:9f:50:bf:40:49:9b:44:f2:5d:
92:e4:af:0b:00:8a:6b:2b:f2:8c:f2:f8:1a:4c:4f:
e5:de:8f:90:30:f3:c9:69:7e:f4:35:d4:1c:e7:2f:
99:c7:d8:f6:85:3b:93:ce:c6:12:59:b0:54:51:01:
89:fb:aa:ee:27:61:d8:1a:66:5c:3d:61:6a:73:12:
f9:35:c1:4d:8b:ac:ae:69:dc:20:83:90:03:e7:c9:
8b:9f:8e:0e:33:b1:ee:7e:ae:9f:ad:d7:21:b1:c2:
89:96:02:43:3c:af:dd:a3:57:f8:d7:e1:3d:96:7c:
3f:21:49:e8:c1:2d:e5:46:0b:ba:6f:c8:52:a0:83:
ca:4d:f0:ec:f4:21:46:30:a1:57:d4:3b:f1:2e:fe:
8a:41:d8:38:06:cc:6e:f3:f9:51:d0:95:ec:83:af:
0f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F3:39:1F:C2:B4:38:51:62:65:6E:59:AB:00:E3:13:95:D4:C5:BA
X509v3 Authority Key Identifier:
keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:68:95:77:05:de:1c:36:32:fc:de:12:46:5c:25:e5:25:36:
35:f4:d7:dd:c9:c0:b1:64:81:10:2a:1b:4e:ea:4c:c3:0b:03:
db:89:f3:45:31:54:24:92:23:af:3f:6f:e7:b7:93:66:19:58:
ac:2f:82:97:cd:55:f4:91:f6:a0:1b:08:29:61:71:ce:4b:ed:
20:d3:06:19:6c:1a:3a:9e:63:87:33:74:75:e5:8d:2c:e3:47:
c4:5b:b1:71:3e:b9:c3:de:12:2a:fa:8b:35:0f:93:e6:dd:5c:
80:f6:ab:14:48:06:7f:18:59:ee:b3:9c:09:34:15:1a:b6:cd:
7a:62:40:ea:c1:60:df:50:14:b3:f1:cb:c9:59:dc:7e:14:bf:
31:70:38:a2:dd:d4:dd:e6:7d:30:e3:00:3f:48:68:c5:78:0e:
15:7d:12:a3:60:2f:35:65:ec:f6:96:8f:75:50:31:21:0d:e7:
17:08:e8:9f:56:bb:0d:bd:ba:e1:2c:e4:b8:a2:e6:25:01:ea:
6e:fe:7a:e1:11:a3:9d:a0:a2:ad:41:7d:bd:50:0f:34:ba:dc:
b8:f9:fd:e2:4e:98:90:b9:7b:27:d1:13:70:cb:e8:0a:78:2c:
de:1e:86:86:a2:75:1e:29:57:1b:5b:5b:cc:f3:cd:01:b2:e4:
1a:0e:b2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:33 2025 by rpki-client