Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: Sq0sbq28oUVcgJUE4PgGAGm9uh3WGx/ksvYwPss/auA=
Subject key identifier: 89:CB:C7:FC:CF:87:8E:CF:0F:23:AA:B2:9A:5A:73:23:EF:EB:12:85
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 0247
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 0244
Signing time: Sun 27 Jul 2025 04:19:16 +0000
Manifest this update: Sun 27 Jul 2025 04:19:15 +0000
Manifest next update: Tue 29 Jul 2025 04:19:15 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: TFob5c+sm3NBoPpUl0uxO8UEnaVOQnILaE2YOJiBlSk=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 583 (0x247)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Jul 27 04:19:15 2025 GMT
Not After : Jul 29 04:19:15 2025 GMT
Subject: CN=6885a8c4-9617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b5:25:9c:1d:20:87:05:c9:b4:a5:89:c5:88:
41:b2:93:9d:eb:46:8b:f9:77:ba:f6:db:b1:2c:ae:
50:af:a5:dd:be:36:d9:5b:cd:4c:d7:da:11:d4:5c:
3d:a1:5e:59:6f:c6:97:c3:6b:f2:5d:b6:60:68:da:
4e:00:5a:4b:11:2c:d8:af:df:4b:1a:57:a6:67:b8:
f2:cd:dc:e6:25:aa:6a:2e:5d:6c:47:8f:e2:9d:34:
08:b5:93:0c:85:8b:ff:5b:1e:f1:25:b9:c1:00:fe:
ad:f7:53:ff:6d:3a:d6:3e:d2:1a:84:bb:98:27:1c:
24:ca:48:05:e7:53:11:03:07:18:2a:c8:79:38:87:
d9:c7:df:18:9e:5c:fa:cf:ba:d4:82:de:ae:ac:fa:
3f:9f:04:ae:3b:92:cc:3b:97:39:6c:64:c6:99:29:
55:cb:f4:72:a1:b7:d3:06:c5:3d:50:a8:2c:f2:9f:
a3:2c:c3:b3:13:22:b3:09:7e:89:41:e1:42:37:60:
e2:7c:6b:1c:25:de:78:b9:a7:77:64:66:e7:f8:f5:
d9:17:7f:43:9e:2f:e4:a7:b8:b2:9c:30:ba:0d:2f:
5d:af:23:1a:d7:3c:31:d9:25:7e:b6:7f:60:48:a3:
4c:5b:14:e5:19:43:11:45:ae:bb:85:8c:aa:b9:49:
91:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:CB:C7:FC:CF:87:8E:CF:0F:23:AA:B2:9A:5A:73:23:EF:EB:12:85
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:a6:8b:8e:ff:fc:7d:34:df:94:a9:7f:c4:7f:15:27:57:09:
2a:39:03:8c:2d:c7:64:b4:e2:60:fb:52:35:4d:bf:7f:ed:2e:
a4:c2:c7:62:01:7d:bb:00:53:d3:67:04:b6:1b:7d:f2:35:86:
d2:54:29:bd:9c:a8:ba:b7:be:fb:0e:68:b0:99:d6:30:1e:f3:
92:21:ee:a2:9f:32:08:c6:32:94:cd:55:96:14:44:bd:bd:c3:
b1:d4:dd:6c:66:b1:75:d0:f6:2a:c4:22:00:68:78:79:78:67:
c4:0a:44:eb:01:65:14:27:46:6f:15:b3:ba:e1:b7:af:6d:47:
d8:77:68:9e:b2:78:c4:c4:52:f0:ed:ac:fc:e0:55:ff:e8:28:
55:57:87:3b:0b:d5:42:0e:68:b8:4d:a7:25:eb:24:f9:23:e2:
a2:e5:0e:cf:8c:dc:24:07:d1:7a:d8:45:f4:67:cd:b6:74:c4:
e0:b4:79:78:52:a3:c2:85:28:7c:01:de:c8:ab:a9:01:f0:d8:
e7:26:ef:48:d6:a8:e2:a5:f3:fb:be:a8:39:d2:e1:66:31:ed:
9d:90:6d:d7:de:cf:2f:83:a7:52:f2:d2:ba:e0:53:ec:d0:d1:
03:6d:8c:db:a4:c9:92:80:65:78:49:6c:86:14:1b:2e:04:fa:
75:af:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:20:33 2025 by rpki-client