Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File: nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier: 1WxiYRywjHymZVpJrPGEiC0YZW65Z/PE7fbbZplnOWE=
Subject key identifier: 7A:82:22:0C:AC:E1:7C:86:49:A0:A6:9A:35:1E:BB:4E:21:7E:E7:38
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer: /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial: 0959
Authority info access: rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number: 0955
Signing time: Tue 16 Sep 2025 01:19:22 +0000
Manifest this update: Tue 16 Sep 2025 01:19:21 +0000
Manifest next update: Thu 18 Sep 2025 01:19:21 +0000
Files and hashes: 1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: G9KCLdizFn4OHj6YavNufcfM8aMQ/WEqZKZeuZ9ahe4=)
2: D327BE38980311EE8CAFD532D25BE465.roa (hash: S6gTdluMy3bxrOQWOaTfSvtXEYSyREhvKUaAZL3cXu4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2393 (0x959)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Validity
Not Before: Sep 16 01:19:21 2025 GMT
Not After : Sep 18 01:19:21 2025 GMT
Subject: CN=68c8bb1a-5816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:8b:9e:df:40:d0:c7:f6:60:c7:22:47:d0:
df:72:6b:22:93:05:b5:df:d0:54:38:b8:ac:79:09:
07:94:19:0d:41:f9:69:7a:4b:bd:1e:0c:34:a3:4c:
e3:4c:5d:8f:7b:5b:b1:18:48:34:19:d8:3f:da:90:
01:c6:d6:38:97:54:95:8e:b6:2b:0d:32:06:c9:08:
13:20:d6:ff:39:4d:90:f6:35:66:24:f2:e3:c3:70:
7a:76:ca:e0:a2:d4:65:57:14:f9:14:36:84:33:f5:
41:52:c7:d3:9e:e9:58:2f:6d:f9:b2:4a:a7:30:92:
1e:28:84:42:ec:08:e6:76:76:94:60:c3:a1:44:3a:
25:a6:7f:e3:23:c6:6b:68:db:03:89:87:c4:d1:78:
4f:c0:f0:f0:8b:c7:33:0f:40:65:e7:d9:4b:f9:ee:
bb:99:d9:b2:1f:18:d9:2b:d3:1a:c3:89:61:0f:5a:
91:52:05:9e:62:3a:ba:25:53:69:6d:0e:bb:23:12:
ed:b9:cb:94:39:83:1d:51:7a:bb:c7:01:dd:d3:90:
ca:ba:15:bb:54:d1:e7:54:2b:e9:c3:6f:ab:8c:c8:
51:bd:4f:0f:b3:db:14:21:0f:ee:54:ec:da:fd:08:
ef:fb:09:fd:54:bd:de:d2:c2:8a:11:d9:81:84:f3:
6f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:82:22:0C:AC:E1:7C:86:49:A0:A6:9A:35:1E:BB:4E:21:7E:E7:38
X509v3 Authority Key Identifier:
keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:b8:2e:ec:16:fc:8c:e9:44:5e:3b:5a:ed:d3:e5:16:08:a1:
75:5b:1e:f3:ba:68:14:4f:70:69:bb:a8:b0:f3:2f:60:7f:11:
3a:28:86:4d:9d:5e:f4:4f:13:01:7a:6a:24:df:ec:be:8e:d2:
85:f3:87:d5:d0:bc:a7:46:22:22:e5:a1:0e:2f:78:8d:98:17:
e8:5d:a9:e1:be:bf:87:29:03:fc:2b:13:c4:ab:77:d2:f6:98:
53:43:bb:c2:07:ad:22:47:fb:32:b7:7b:92:e1:9e:4e:dd:fb:
68:ce:23:3c:2b:e4:2e:f5:1c:07:5c:d1:3a:64:96:8c:0f:64:
ba:45:2d:49:e3:d4:1f:11:f4:10:d1:5c:e5:de:68:d7:58:d8:
31:81:7c:0c:24:3b:44:d5:e3:bd:80:70:89:58:17:f0:8c:10:
58:db:8b:24:60:6a:60:ba:cc:20:64:56:04:dc:b4:bb:04:59:
52:27:56:e5:4d:28:2c:0b:75:ee:25:e7:d7:e8:f7:00:35:23:
ae:32:92:61:4a:79:52:e5:49:3d:70:87:da:35:4d:c3:16:f2:
4a:0c:b7:0a:1b:6f:8f:a4:46:c6:d5:c5:b4:61:90:ef:68:c2:
f1:4f:64:76:0d:11:e9:63:d6:93:d3:c3:0e:a4:be:56:a8:e4:
fa:41:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 01:11:11 2025 by rpki-client