Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: KUrgZ4HDHU7WzJuJR+okwhc3pnvPbcp8vYABKfh+H8o=
Subject key identifier: 29:31:C5:55:CD:39:E0:66:80:25:B2:70:FA:C0:43:9A:38:11:C6:01
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 020E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 020E
Signing time: Wed 17 Sep 2025 04:12:19 +0000
Manifest this update: Wed 17 Sep 2025 04:12:18 +0000
Manifest next update: Fri 19 Sep 2025 04:12:18 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: 3QrfZuoa1qmpNPGaqof+fylihn+Or/zPRRO+f7dOrBo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 526 (0x20e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Sep 17 04:12:18 2025 GMT
Not After : Sep 19 04:12:18 2025 GMT
Subject: CN=68ca3522-f339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:92:62:56:eb:90:29:64:24:69:4c:cc:33:
80:5a:27:cc:53:fa:08:3d:e4:a1:3c:00:f3:9b:10:
65:2a:69:1c:c9:3e:a2:54:8b:b5:77:37:c2:4d:16:
4b:0a:10:7f:9b:72:47:68:5c:32:c8:ed:aa:ee:25:
e8:95:f5:36:95:d4:88:44:71:da:e1:ba:27:31:e2:
e9:2c:6a:2a:03:e5:f9:3b:10:e2:9a:a8:b0:cf:9a:
9b:5d:a4:4c:f1:2f:d5:5a:d1:95:be:19:2c:81:d3:
e2:8c:8c:58:39:4b:ed:b0:4b:54:a8:f3:58:63:20:
b7:15:7c:3c:ea:82:fc:36:5b:3f:51:b2:2f:c0:9f:
df:7b:88:9b:f8:33:d4:21:c8:00:f7:31:cc:ea:a5:
f6:2c:36:bd:92:1f:8b:e9:10:c4:34:89:a3:f3:1d:
7f:7b:21:ad:b0:b2:db:ff:61:ce:66:98:37:15:da:
21:09:60:d7:1c:e2:65:0a:43:ff:e9:a2:56:de:99:
44:fa:62:79:b0:f7:00:d0:61:1c:a1:54:03:b4:68:
1a:b2:8d:ad:33:08:d8:08:31:47:dc:4d:92:5d:d5:
13:37:60:28:53:b3:64:d9:17:c8:bf:3f:42:55:6b:
c6:76:52:c0:31:7c:30:34:49:5c:9c:2a:fe:42:36:
a5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:C5:55:CD:39:E0:66:80:25:B2:70:FA:C0:43:9A:38:11:C6:01
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f8:70:12:5c:27:51:38:f1:9b:6b:61:47:48:77:aa:e3:05:
f5:f9:5c:2d:ac:e0:c6:c6:2c:c6:36:15:5f:33:45:c6:44:81:
1c:f2:60:5b:6c:f8:f7:e0:94:b3:d1:50:fd:90:17:53:39:b3:
99:71:a5:a9:11:6f:25:1e:59:54:fc:73:33:bb:65:00:d3:08:
04:83:56:b6:c3:69:dc:74:0e:c7:29:a1:95:27:38:c4:d5:76:
5d:ae:86:90:b7:b8:df:a9:d0:17:54:ad:be:8c:65:79:f6:48:
ed:1d:bc:3a:f8:67:04:2a:c7:4f:1b:c5:86:95:d6:1b:a0:e7:
aa:be:3c:9a:b9:88:34:cb:94:7c:40:9c:a3:41:6f:4d:55:33:
9e:21:64:60:65:42:2a:cb:ba:fd:8b:8a:74:4a:a1:4c:c7:07:
39:a8:6c:b4:05:48:cf:9f:fb:b2:fe:d2:a7:0d:8b:9e:2e:38:
3f:f2:97:c1:be:05:d6:26:2e:4c:5c:de:0a:89:1e:33:d0:ea:
7b:f1:d2:bc:05:2f:74:e3:aa:60:40:91:29:bc:c2:c9:e9:c4:
fc:5a:1b:39:5d:72:a5:95:ae:e5:9c:bd:80:cb:a8:2b:8e:c0:
9b:f9:b8:91:77:7f:58:c3:5e:43:de:f7:5b:e1:85:6e:a5:fa:
1d:e7:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 03:39:09 2025 by rpki-client