Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: rIscTBWA18zhvR0zVEoX3pASLbsiIGljhTrX7cxjFe0=
Subject key identifier: 13:82:B0:38:49:E3:49:57:88:D5:5B:07:D2:95:C2:E3:5F:9B:CE:87
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0648
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0648
Signing time: Wed 17 Sep 2025 02:12:58 +0000
Manifest this update: Wed 17 Sep 2025 02:12:58 +0000
Manifest next update: Fri 19 Sep 2025 02:12:58 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: VCi6zM700uS9paZI8qzogUcGANQS+XvDdURHJNtXeTw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 02:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1608 (0x648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Sep 17 02:12:58 2025 GMT
Not After : Sep 19 02:12:58 2025 GMT
Subject: CN=68ca192a-2148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:26:0a:3c:b5:54:3f:db:9a:cd:e0:9b:ce:e6:
5e:ff:92:48:95:0b:81:f4:8b:58:96:a6:bf:de:10:
3c:a7:f8:28:bb:41:d9:58:e4:9e:49:2e:f4:4f:03:
0e:b7:a1:c9:81:2c:62:a0:5a:af:19:02:d9:60:8e:
c9:65:f4:17:60:fa:bb:00:78:c7:7a:12:b6:2e:05:
38:92:25:50:49:fa:0b:07:a6:0c:7b:00:af:f8:01:
51:20:fc:9c:61:f8:27:75:55:55:e1:4a:d8:a6:f8:
1e:87:3e:73:ac:2b:71:2d:88:0e:0f:73:68:34:59:
22:3d:2a:bf:f6:3e:93:79:7c:a0:7c:94:9d:4f:8e:
0f:b5:1e:f2:b4:2b:d4:69:9a:87:74:87:a0:60:d1:
e4:14:d4:5e:3b:c4:65:d7:dc:49:b8:b5:1a:bf:79:
0d:6f:2d:40:a8:16:8d:1d:f8:21:0b:2f:5a:5d:da:
97:b1:ee:31:6d:6b:f2:54:a8:ca:74:f5:72:97:0a:
49:5b:49:10:d0:69:5e:a6:98:ef:ef:bc:4a:72:ab:
e5:ad:3d:18:00:ae:06:4a:bf:b8:5a:2d:54:dc:d1:
8e:70:cc:a7:2f:d0:02:cc:d0:37:db:62:5d:84:6d:
fc:5d:b1:8e:6e:7c:a0:2c:4c:14:ab:cf:4a:64:c2:
30:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:B0:38:49:E3:49:57:88:D5:5B:07:D2:95:C2:E3:5F:9B:CE:87
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c9:3a:47:82:4f:7f:54:b2:73:a9:b0:21:95:b7:85:4a:02:48:
1d:2b:c7:7a:c6:9f:fc:32:89:79:17:ba:8f:d9:3b:f1:a0:eb:
19:0c:60:1a:de:0d:57:e9:3f:49:2d:d8:5f:c0:23:22:63:89:
16:bb:b2:43:18:d3:82:6a:ea:40:d4:21:4c:71:77:65:9d:3f:
ac:3b:65:94:c9:41:3a:f3:6a:72:23:32:73:ca:b8:6b:41:5c:
32:b5:ed:a6:fa:9e:6b:f6:ff:f1:36:68:a6:df:58:b0:c9:87:
13:59:31:1a:b2:90:7e:1a:89:6b:4e:f1:12:97:5b:eb:bb:03:
44:e3:13:d2:f8:3d:bd:aa:e6:73:f1:84:db:43:08:a1:9f:ca:
65:07:d8:08:f2:ae:2a:e2:f0:fc:e3:3b:23:14:53:f7:68:ea:
af:bf:62:94:a6:f1:10:7e:0a:2d:9c:e2:d7:a3:d7:34:25:bf:
fe:01:e4:07:b6:4b:b8:8b:18:6e:d0:8c:6a:d4:3b:a4:fd:49:
08:b6:7f:39:59:9a:23:8d:b9:33:38:d5:d7:9a:44:a9:42:dd:
1b:8c:9f:a5:83:9a:92:44:47:01:11:51:7f:2f:f3:25:19:d4:
3b:27:7d:cb:09:09:2b:d1:b2:62:14:18:dd:3e:16:16:ab:6a:
7d:bc:12:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:27:36 2025 by rpki-client