Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: NInZSlgPCkChTh7WxtHYYwdkrmS6fLRHD3DyL+oaZzM=
Subject key identifier: D2:06:7F:75:76:1E:1B:75:8D:6C:7A:10:8A:83:A6:68:A5:EF:AF:6F
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0E40
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0E40
Signing time: Sun 27 Jul 2025 00:58:39 +0000
Manifest this update: Sun 27 Jul 2025 00:58:38 +0000
Manifest next update: Tue 29 Jul 2025 00:58:38 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: /xmZIMEpWhGzt50YZZpau8/MhgHU5qqmx0jPsnoh2CI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3648 (0xe40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Validity
Not Before: Jul 27 00:58:38 2025 GMT
Not After : Jul 29 00:58:38 2025 GMT
Subject: CN=688579bf-45ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:bb:84:15:5c:ce:b6:ea:cd:f7:a6:29:2e:
87:9f:85:0c:43:e9:1a:c8:33:87:59:0c:1b:11:94:
fc:62:15:7b:cf:93:82:34:8b:70:32:17:9b:69:c9:
bd:31:de:08:71:42:6e:4c:c6:7f:ea:61:e0:79:66:
11:40:11:16:9a:a0:80:a4:72:34:4c:59:12:d7:58:
24:25:f3:c0:2d:a6:c5:af:3e:bf:9b:7a:ef:1a:80:
1e:01:ea:60:b8:e9:dd:7d:1c:00:77:26:3b:5a:d4:
26:30:c6:ad:19:21:1f:c6:3a:d1:f0:47:ed:53:8f:
47:f3:62:60:a3:87:98:e7:bd:05:7e:85:87:de:26:
ad:24:30:eb:ff:e7:96:a8:a3:fe:31:a2:19:76:c1:
42:c5:ae:d9:6d:17:ba:b0:b4:98:7a:fa:59:43:7a:
bf:aa:bb:e3:ed:af:a9:e8:04:d2:f1:cf:a3:e2:82:
34:22:21:20:de:e8:d0:b1:c4:50:1c:a2:97:ba:4c:
64:29:4b:b4:23:d6:39:42:b0:3c:c9:36:84:e1:14:
48:f7:59:ab:66:34:fe:77:0d:ad:8f:de:f0:be:7a:
bb:70:c8:73:9d:82:83:63:35:2f:92:5c:62:03:2e:
97:f6:3c:83:23:80:06:43:92:70:15:10:43:be:19:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:06:7F:75:76:1E:1B:75:8D:6C:7A:10:8A:83:A6:68:A5:EF:AF:6F
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:9a:9b:98:df:9f:e5:4c:09:18:79:63:3c:1f:0b:51:45:e0:
b4:40:1c:f9:62:80:ad:d7:f3:59:ed:cf:a5:fe:e8:14:fd:8d:
84:56:0b:25:cd:96:04:d6:f8:c2:d8:8e:22:fe:90:b6:69:74:
6f:a3:cf:45:af:50:02:75:65:82:31:25:3d:b3:33:11:df:52:
f8:c2:50:ca:15:2f:14:c7:bc:10:12:64:d5:28:1f:41:21:0b:
bf:ec:ea:a8:36:94:66:20:ab:ba:45:a3:99:60:7c:75:45:0f:
fc:2b:1d:5c:2b:3c:40:41:7b:8d:f3:b2:ad:32:b2:36:1d:57:
23:03:6d:8b:61:5a:55:85:2a:a4:05:2b:27:33:ed:d6:aa:fc:
b0:c8:0b:19:d7:41:97:f8:3b:5a:74:af:94:b1:b7:44:93:9a:
b2:f4:a5:1a:ee:b7:23:05:b3:f2:da:8c:2c:9d:ae:1c:2a:98:
64:09:2c:99:c7:7f:47:e3:ca:06:31:2e:dc:d1:db:07:e1:ab:
9c:f3:c5:0c:65:1a:47:a1:25:ba:bc:16:65:3d:ba:70:1b:71:
23:c0:2e:31:8f:84:e7:89:26:fb:1d:25:30:2a:ef:77:65:aa:
0c:30:17:ba:29:c9:a0:df:86:de:39:d7:0a:8d:2c:b2:94:0c:
fc:27:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:31:07 2025 by rpki-client