Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: /vwrK+kXLWqkbg7o9RX0j75me9sb3ptOrBMDP/PUJ+8=
Subject key identifier: AB:87:61:C2:16:E1:39:F1:CE:3A:4E:C7:CF:AE:93:03:5B:10:B8:EE
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 01DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 01DE
Signing time: Thu 31 Jul 2025 04:37:09 +0000
Manifest this update: Thu 31 Jul 2025 04:37:08 +0000
Manifest next update: Sat 02 Aug 2025 04:37:08 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: OJAt0RlkJvvMKZtj1YBkx40SBjXBKnz3j9O0gpqrnpE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 478 (0x1de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Validity
Not Before: Jul 31 04:37:08 2025 GMT
Not After : Aug 2 04:37:08 2025 GMT
Subject: CN=688af2f5-22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:07:af:c7:1a:ee:d9:a0:64:4a:9e:29:93:35:
53:b1:e5:37:83:f9:df:2b:ac:06:8c:40:f8:b4:aa:
f1:2b:c3:41:77:9e:b5:59:a9:86:83:1a:19:c4:1c:
06:02:de:25:8c:5b:71:0f:1e:26:e4:45:bf:4c:b4:
0d:5b:0c:72:c7:89:de:fe:2b:a3:bd:17:d9:14:88:
66:9f:8b:d3:00:e3:0f:34:a9:27:02:8e:43:e7:30:
2e:95:f2:88:5c:dc:3c:4b:e4:1f:dc:8a:4f:fc:50:
51:e3:b3:84:73:13:92:38:90:6a:84:6f:d0:9b:2b:
aa:51:de:fe:26:15:81:d0:48:8a:78:50:98:e6:32:
0c:92:99:60:73:c2:e8:ed:e1:87:37:9c:6f:fd:51:
d5:39:21:30:92:33:09:2c:a3:b6:bb:84:5c:fa:af:
55:01:ea:8b:1d:ef:04:2a:8d:ea:71:e9:f4:1f:d7:
27:1f:8a:21:b3:18:20:27:ad:46:cf:93:6b:cf:2a:
31:a1:58:34:ef:f4:80:e7:a0:ce:ab:72:53:e8:6a:
69:1a:5a:8d:5c:8d:2a:25:9f:8d:da:29:fd:06:4d:
a3:f3:e6:f2:83:b1:b9:18:22:3d:9b:be:59:cd:d6:
e2:ba:f3:62:cc:0d:e6:b5:44:33:e7:30:f4:87:72:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:87:61:C2:16:E1:39:F1:CE:3A:4E:C7:CF:AE:93:03:5B:10:B8:EE
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:7e:d4:d9:e4:60:55:90:7c:94:6f:30:46:bd:6a:10:bb:
0e:e1:00:7c:a9:a4:40:d8:1d:68:0c:d9:a9:bf:6c:e2:86:b8:
24:18:41:5f:be:7f:7f:ee:0d:db:85:cd:78:8b:f2:88:51:e5:
79:3f:61:ed:cb:ed:5b:2c:a8:ef:c9:fc:30:ef:50:a9:d6:11:
72:b0:40:c7:d3:04:62:96:68:74:2f:98:d4:5c:c3:67:cc:c9:
86:01:2d:26:a8:4e:2c:c7:be:b9:20:17:d9:a7:8f:63:bc:ab:
fd:8f:cc:d5:97:9d:85:af:55:56:0f:d1:e7:ff:67:69:e1:d9:
0a:7b:28:35:59:ed:23:41:ee:61:c2:04:2f:91:66:ae:d4:99:
ab:9b:f9:56:25:b4:75:dc:3a:89:10:85:f6:dd:4b:fb:9b:fa:
55:2a:12:ab:ad:8a:7c:a4:08:da:93:f9:80:ca:c0:7e:ca:99:
83:72:1a:39:0f:32:b3:0f:04:fa:b3:43:70:09:b3:b4:cc:73:
d7:5d:a4:c1:8d:44:33:25:2e:1d:4a:f9:4b:ce:91:75:e9:2e:
62:57:7d:2a:9d:c3:7f:1d:44:7d:a1:52:8f:d3:5a:db:62:42:
ba:23:7a:65:dc:54:27:1f:54:37:e8:5e:82:be:37:69:ff:83:
86:a4:c4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:55 2025 by rpki-client