Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File: 8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier: 6r6c+Fu4Ly6Jc8aQpIKrjna4geUw6T9lw86RIxCZyRE=
Subject key identifier: D2:14:C5:E9:92:8E:A2:C5:87:AA:9D:7A:34:D4:61:4B:B3:A2:69:AD
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer: /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial: 0129
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number: 0128
Signing time: Sat 26 Jul 2025 05:01:38 +0000
Manifest this update: Sat 26 Jul 2025 05:01:37 +0000
Manifest next update: Mon 28 Jul 2025 05:01:37 +0000
Files and hashes: 1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: Tijd8A3YVZytGAIaFgeMAtvfv8fndx7q0Gv2ZgsbH/k=)
2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Jul 2025 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Validity
Not Before: Jul 26 05:01:37 2025 GMT
Not After : Jul 28 05:01:37 2025 GMT
Subject: CN=68846132-24eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cb:ec:94:90:59:ba:11:f9:cd:1c:52:0b:a9:
f7:69:d1:19:9a:bd:b4:31:a1:cd:07:04:58:c0:76:
19:ee:60:1c:fe:bc:d7:6a:d9:ba:9b:22:7e:5c:23:
be:c1:cd:0a:64:ee:df:d5:eb:8f:9b:aa:75:4c:7c:
84:98:5d:dc:88:e0:41:88:20:5d:4c:25:9b:b1:36:
6f:55:5b:e0:61:e8:28:c2:98:dd:7d:be:c2:5f:17:
00:e1:39:4c:e1:29:22:90:26:e3:ea:73:c7:1c:60:
ec:9b:e3:d2:32:e6:62:30:54:fd:2f:82:19:0d:0e:
6f:2b:e4:eb:a6:45:44:ee:a8:a0:ea:d4:34:08:75:
f2:45:ee:a2:2a:88:5d:cc:c4:2e:6f:70:db:41:e0:
d7:67:c6:8c:33:63:60:30:ad:62:7e:4b:63:3e:1f:
dd:74:9b:92:7f:d0:d8:3c:1d:56:a4:ba:a6:e8:3f:
71:f4:14:57:d1:e8:1f:5c:e1:c8:97:d6:fc:9c:ca:
3f:da:a5:91:f5:1a:b6:1a:b8:f6:0d:2e:2b:e6:9c:
b5:3b:3b:0d:0a:fa:e9:fb:a4:b8:2e:88:73:4c:07:
e3:a8:0b:aa:0b:c7:3d:24:ee:67:4a:eb:6a:6e:b0:
11:d6:58:4e:da:b6:5b:c2:96:5d:1c:84:1b:e7:29:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:14:C5:E9:92:8E:A2:C5:87:AA:9D:7A:34:D4:61:4B:B3:A2:69:AD
X509v3 Authority Key Identifier:
keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:cb:8b:2b:74:40:4f:0c:d0:6f:57:6b:86:ea:31:36:17:8d:
ef:c4:96:08:77:2b:56:ca:40:70:3d:bd:03:3d:bf:b0:07:43:
fb:09:e3:f7:6f:ad:90:13:ab:f2:c6:bb:7a:99:52:b9:52:3d:
c4:a4:0d:18:68:67:b4:68:c9:97:06:26:3e:ed:7e:6e:46:be:
f1:e5:39:95:fb:56:c1:80:bf:44:a2:81:cf:0c:30:9b:38:64:
1e:ac:40:00:d1:4e:b7:02:96:c4:64:02:89:02:ca:a8:55:9b:
ed:47:4d:35:59:4c:03:cf:d7:e5:43:d0:ee:67:94:e9:80:09:
d6:37:e9:43:53:e4:8b:f7:2d:81:34:24:1d:61:e2:2b:c7:e4:
cc:56:1b:60:96:a9:40:d7:3c:a8:fc:77:63:01:60:de:eb:a3:
89:f6:85:2e:d8:e3:f8:f9:f1:7b:a6:e2:73:8b:b7:02:c1:de:
17:28:8f:2f:01:74:42:24:fc:3b:a2:76:c3:9d:a2:53:77:8e:
e1:6a:1a:78:0c:23:c6:14:1b:42:49:07:ac:c2:f0:c9:36:3b:
26:c3:a3:c2:ff:58:cc:e5:2b:41:db:66:d7:91:7f:27:0e:4f:
da:6a:76:d2:b5:2f:51:9b:b5:00:87:db:78:c2:bf:ae:59:a0:
25:2c:e0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:28:32 2025 by rpki-client