Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
File: ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft (raw, json)
Hash identifier: p+5s6EkWGcJZ3fNK/91rLvK8H5v2HPL/gb5sAj53dcE=
Subject key identifier: CB:F9:0A:9A:5C:A4:60:18:44:19:E0:3B:AE:58:B1:97:B0:22:B1:83
Authority key identifier: 38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
Certificate issuer: /CN=F3674908AF/serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Certificate serial: 50
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
Manifest number: 4F
Signing time: Tue 16 Sep 2025 05:00:58 +0000
Manifest this update: Tue 16 Sep 2025 05:00:57 +0000
Manifest next update: Thu 18 Sep 2025 05:00:57 +0000
Files and hashes: 1: ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl (hash: XxU6lnf+g7KOTeJqjdVAG+5LPndNts7ERJEalaWrmWI=)
2: 1F963ED8564511F0A6FF3AF2DAE4EC9C.roa (hash: X2krD4jdJ7pGQ3zXFaC89RNcw5IbwbOm7CUbTFo1if4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674908AF, serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Validity
Not Before: Sep 16 05:00:57 2025 GMT
Not After : Sep 18 05:00:57 2025 GMT
Subject: CN=68c8ef0a-9ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:87:b8:c4:45:82:e9:32:d0:f9:19:95:ad:
ad:f2:4f:b4:d5:0a:b6:c0:cd:ac:ac:5d:24:50:cd:
14:00:63:b3:a0:17:13:61:61:13:60:d3:8f:89:46:
cb:91:62:ed:6a:0e:07:bc:63:f5:8c:59:1d:d9:a7:
22:73:d2:9a:5e:51:0a:e0:8d:05:fe:f5:b8:44:be:
8c:ca:5e:f2:b3:04:ee:80:d8:62:e7:b6:98:a1:66:
6c:4b:e9:17:39:d6:c8:e2:27:a2:ac:93:d6:6a:cc:
f4:d0:79:bb:48:c0:68:3a:e3:43:08:89:78:27:ae:
d5:49:5d:65:20:d3:9d:a8:94:f4:d4:f6:53:79:63:
b0:fd:8b:bd:a5:4b:f0:67:8d:6d:f1:db:54:53:38:
9e:88:51:c6:77:79:5d:a7:e2:78:d3:7d:42:0c:36:
21:1e:00:d0:5d:41:f1:b6:34:65:ad:f3:ab:45:a7:
b3:ed:5e:be:64:20:17:fd:b2:f4:a7:f0:cb:a2:48:
39:30:93:7c:73:8e:6d:a9:16:b6:bb:41:dc:30:e7:
bc:51:75:56:e2:de:f1:b1:6b:7b:4b:27:65:2c:28:
8b:e5:bc:ea:5d:a3:24:1c:e9:0c:36:7f:bd:99:45:
ff:18:a9:15:fa:7e:ff:5b:02:c9:de:e0:82:65:36:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F9:0A:9A:5C:A4:60:18:44:19:E0:3B:AE:58:B1:97:B0:22:B1:83
X509v3 Authority Key Identifier:
keyid:38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:a9:16:6d:ba:18:4a:ab:2d:5d:6c:66:f3:f2:18:82:d2:53:
5a:a7:e6:55:83:e1:1b:c1:2a:d4:dc:27:14:25:25:03:3d:75:
2c:bd:81:49:c6:42:3c:78:02:5e:1f:2e:3b:c5:74:15:ae:e9:
59:3e:60:23:81:20:14:9a:1e:b8:9d:5a:b5:f4:86:f8:f2:72:
cd:62:d3:b6:2b:8d:3d:75:96:bd:3a:b3:ed:e6:27:b7:ce:3c:
dc:f6:a7:3f:da:4c:cd:0c:9a:90:02:a9:5d:83:3c:5f:29:00:
0f:45:9d:7e:5f:16:9b:05:ce:9a:ef:06:e8:60:1b:61:75:fc:
8d:01:a3:0c:35:76:b8:65:43:97:b4:91:31:50:b9:28:c8:73:
cb:67:63:41:b4:3a:b7:94:be:a1:e9:0f:69:67:2d:9e:05:bf:
92:ce:c8:46:a7:48:00:9a:d3:26:1a:32:57:5f:bd:17:06:fb:
48:7d:c4:eb:16:ed:3e:31:fe:f4:ac:dc:6d:e3:5a:23:5c:59:
8e:0a:3d:4c:14:49:59:aa:e2:ce:cd:3b:a2:51:f6:65:bf:7b:
61:4e:eb:be:be:4d:e9:2d:fb:3f:28:d5:b9:81:bc:b3:fa:57:
4e:79:30:2f:23:86:1f:3d:73:7e:dd:32:49:71:d0:67:31:35:
47:af:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:41:39 2025 by rpki-client