Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier: QRA2c35sG94ri2pAKAL08/Z8KhvAmM7Sydux7G964zw=
Subject key identifier: 04:74:07:B2:CB:2F:2F:B8:6D:44:E6:DA:3D:69:85:06:25:71:2F:04
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer: /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial: 0E0D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number: 0E0D
Signing time: Sat 07 Jun 2025 00:58:42 +0000
Manifest this update: Sat 07 Jun 2025 00:58:41 +0000
Manifest next update: Mon 09 Jun 2025 00:58:41 +0000
Files and hashes: 1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: 5odvkurplGKzpNJndjzTROok6scblGOTt5Sb6b+vuMg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:58:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3597 (0xe0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Validity
Not Before: Jun 7 00:58:41 2025 GMT
Not After : Jun 9 00:58:41 2025 GMT
Subject: CN=68438ec1-c3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:78:17:31:ac:21:a4:8d:75:9f:70:88:84:
80:69:c9:4c:a0:02:50:b0:92:47:25:a4:3a:d4:d4:
4e:bd:33:09:bd:77:27:38:34:48:aa:be:4e:b2:04:
af:80:92:19:99:4e:e0:ef:80:2e:be:29:4e:b8:15:
3d:be:7b:99:c4:43:42:71:2d:c6:55:1f:9f:62:27:
4d:61:bf:d0:1e:8b:e9:b1:76:b9:c0:59:5e:ae:a2:
64:eb:c4:d9:e9:30:2e:5e:0b:d6:8d:88:17:70:aa:
55:9a:27:08:a9:28:91:d2:d7:63:e1:71:50:ca:21:
c0:9e:c6:27:2e:b6:b2:41:59:f5:2e:cb:68:4e:0c:
6a:ba:bf:93:22:2d:44:83:1f:14:26:c5:02:af:81:
45:0d:c0:62:6e:3a:dc:b1:c6:af:f0:f1:cc:40:b1:
41:a9:d9:9a:9f:a7:34:1e:cb:e8:9d:3d:02:c2:5f:
a8:c8:66:67:eb:42:b7:0c:75:ee:24:33:a9:36:de:
98:c2:96:df:8e:7c:64:a9:88:c0:20:c7:50:61:fe:
15:77:08:1b:63:f4:cb:92:07:3d:87:62:63:1e:44:
4e:46:a7:4c:06:5c:7a:9b:52:00:b7:ff:13:6b:2c:
1a:c5:f7:00:cb:fa:25:3d:66:18:26:bf:7c:e1:c8:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:07:B2:CB:2F:2F:B8:6D:44:E6:DA:3D:69:85:06:25:71:2F:04
X509v3 Authority Key Identifier:
keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:16:a7:87:fa:ad:bb:2a:95:b9:8b:30:67:0c:68:46:1b:16:
f1:3b:c5:f1:39:32:3f:34:34:4e:01:fc:fd:1a:3e:8e:b1:1e:
15:e3:93:f4:d7:0d:89:11:f7:12:7f:67:e1:d5:11:9a:27:1d:
03:07:af:2c:45:de:96:3c:0f:07:37:0b:f3:be:73:8e:24:83:
f7:32:e9:1c:8b:4b:cc:ab:96:e7:5b:32:cc:70:f3:f2:09:04:
24:14:ce:c4:b2:f9:8d:63:a3:da:a0:e6:ce:bf:af:c6:83:a9:
d9:f3:88:96:d7:3a:a8:86:ba:d5:5f:36:36:6f:3c:24:6a:d7:
69:97:7f:31:54:8a:7a:17:47:17:ce:28:b9:37:b1:38:37:36:
88:e9:7e:1d:16:e1:58:62:4f:54:23:e9:22:a0:5f:d7:e6:d1:
e7:84:4e:70:3e:8b:b6:60:50:5d:26:1d:96:d5:81:bc:f7:29:
6b:7c:43:c5:b7:72:5c:37:d9:bd:e4:83:67:b6:32:3d:02:b0:
45:a2:13:8f:f7:36:4f:f2:fa:11:53:d3:93:cc:b8:4f:23:06:
0d:06:ab:58:31:de:0c:a0:e6:ab:02:cf:ab:9a:ae:48:dc:6c:
07:67:ca:f3:49:37:b0:c3:82:74:ff:6a:8d:d8:e4:25:a8:ed:
8d:dd:7e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:48:39 2025 by rpki-client