Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File: cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier: gQ4GePDhXNu9lsxgslPt1aZDn3XPKkZPZUtWNYM4NaY=
Subject key identifier: 7E:E6:7A:17:AF:79:26:2E:87:2B:2C:79:A9:C0:69:CC:4B:E4:4F:58
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer: /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial: 0618
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number: 0618
Signing time: Thu 31 Jul 2025 02:23:40 +0000
Manifest this update: Thu 31 Jul 2025 02:23:39 +0000
Manifest next update: Sat 02 Aug 2025 02:23:39 +0000
Files and hashes: 1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: cKtbca43MyrjMsY6UijxCLX6lHC7msW3Sc2MVEkDDQw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1560 (0x618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Validity
Not Before: Jul 31 02:23:39 2025 GMT
Not After : Aug 2 02:23:39 2025 GMT
Subject: CN=688ad3ac-547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:c6:8d:f4:d3:24:97:6b:2d:3c:18:bd:a9:
bc:ad:f9:d0:0f:b2:f7:a6:a2:0e:cd:6d:1d:31:7b:
f2:4c:12:d7:14:49:24:11:b0:43:0d:81:4d:df:3f:
0c:00:4b:47:b5:4a:14:3b:c3:4f:44:0e:d5:2d:9b:
5b:54:3a:df:4a:e0:15:dc:39:39:e5:dd:72:25:f9:
9e:89:b5:2e:49:07:ea:08:99:81:f6:4d:4d:56:ad:
40:58:c8:7f:44:47:df:65:71:7b:5b:42:38:9b:be:
85:28:27:ad:38:e9:76:dc:ac:c2:b2:c6:1e:2e:d3:
66:e4:8c:a2:75:e2:cb:4c:19:d5:e8:a9:12:89:0d:
20:40:a5:54:f1:77:28:7d:bd:6c:e4:bc:41:59:29:
d0:a2:50:04:f3:29:88:2a:84:94:ba:60:54:45:be:
7b:ad:42:80:49:51:28:3b:0b:c8:a6:10:96:3b:af:
d5:41:6c:7f:69:be:1f:11:3a:7b:f5:b0:ce:a6:00:
18:02:8f:c8:cc:1e:84:f8:b1:44:7b:5d:43:e2:26:
c0:bc:8b:6d:64:6e:30:fc:a0:21:a1:d7:2d:30:38:
99:58:2d:45:73:26:40:5b:e1:17:c5:d8:ef:d5:26:
0e:b9:c1:51:a7:12:01:91:19:3c:a4:64:9a:75:a4:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:7A:17:AF:79:26:2E:87:2B:2C:79:A9:C0:69:CC:4B:E4:4F:58
X509v3 Authority Key Identifier:
keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f1:15:45:6f:8c:0e:e9:6e:e6:e5:56:a2:cf:ad:d5:d9:d1:
16:1a:66:7f:17:c1:87:6d:2c:77:8a:65:e3:a1:3c:57:3b:0b:
ea:e7:c0:f6:e5:b6:de:52:b0:b3:e9:a0:5f:23:5b:c6:f7:65:
b5:03:d4:e4:99:d1:9a:98:6b:f7:56:ca:35:52:70:fa:f6:6a:
35:0d:2a:4c:77:f4:f4:b5:7c:f7:e7:5a:5c:c9:f7:22:95:49:
65:08:48:56:10:dd:94:b1:4f:9e:64:dd:1d:35:74:b7:76:19:
c2:71:80:12:b9:6e:fb:d9:42:de:1c:23:3e:bd:40:ba:7e:4a:
f4:68:53:ca:ff:62:d9:24:9e:69:45:d3:8c:82:4e:27:bb:16:
e1:b2:ca:cc:a1:96:85:d8:c5:92:e2:16:02:ed:0c:d2:91:8e:
ab:3e:45:74:af:c1:a0:78:56:4c:47:ef:34:d5:7f:23:d6:fd:
0d:5b:50:95:f1:17:0b:c9:e8:62:34:60:08:c3:a7:8d:3e:66:
0f:83:3e:f8:f7:30:8e:f3:8e:e5:80:25:45:7a:cf:7a:db:a7:
94:07:6b:27:e1:a0:99:8f:af:82:d6:3f:c4:cf:ed:69:25:a1:
15:a7:ae:66:af:b5:ce:fb:52:f2:b3:26:f1:71:95:2e:ac:29:
17:dd:cb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:24:22 2025 by rpki-client