Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File: M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier: MZAWc5gEO1S/cHZexytMKpTTpCv12j5a8+k6zG+qMnQ=
Subject key identifier: 2D:CB:7C:B1:1C:71:70:DD:EE:C3:92:4B:48:47:39:13:7A:0C:0F:85
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: 0131
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number: 0130
Signing time: Wed 10 Sep 2025 04:44:24 +0000
Manifest this update: Wed 10 Sep 2025 04:44:23 +0000
Manifest next update: Fri 12 Sep 2025 04:44:23 +0000
Files and hashes: 1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: cB+OjOV7mOylUgCKLq5kFt0ix9LA/XjqBwrt9e4BPxk=)
2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Sep 2025 04:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 305 (0x131)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Validity
Not Before: Sep 10 04:44:23 2025 GMT
Not After : Sep 12 04:44:23 2025 GMT
Subject: CN=68c10228-9947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:e0:d7:95:9e:16:8a:6d:95:be:7c:b7:09:
5f:26:6d:6f:31:ed:b4:37:0e:aa:c0:85:80:bd:c2:
75:ee:16:fd:b5:c3:41:ad:57:28:e6:55:ee:fc:14:
a4:5c:25:09:5d:63:42:e1:0a:74:27:66:b7:e8:cb:
46:cd:db:78:c8:ef:bd:fa:10:f3:aa:29:77:2c:20:
63:ec:4e:af:bc:25:4b:2f:6f:e1:2d:95:2b:85:54:
92:ca:ed:43:40:9e:b1:6a:88:71:45:63:83:eb:ce:
87:c5:a8:5e:b1:86:d3:99:93:15:db:c6:73:3b:90:
bb:1f:7b:cb:74:44:12:e5:e1:bf:1f:22:29:7f:e8:
77:98:37:ae:1f:a2:f7:af:86:1e:d3:de:32:64:2c:
9e:fa:67:a7:5e:52:e2:c6:67:91:f8:fe:a5:a2:b5:
a4:71:92:d4:be:2a:e8:07:70:01:61:9d:85:1a:63:
9b:30:4a:62:d3:e0:f4:03:20:27:bb:3f:2c:1e:40:
32:88:83:92:5a:e8:b5:e5:4f:6c:88:a8:3f:e9:7e:
e5:1f:13:60:d6:e8:7b:18:c2:c7:02:f7:82:b7:37:
a4:b2:91:3c:da:e0:cb:e0:b2:c2:65:c9:01:d6:e0:
14:4b:15:e9:18:10:63:3c:0f:fc:57:03:58:32:4b:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CB:7C:B1:1C:71:70:DD:EE:C3:92:4B:48:47:39:13:7A:0C:0F:85
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5b:35:ad:0d:7d:7c:9a:93:17:d7:05:4c:77:33:eb:84:8d:58:
c8:e6:b2:fc:39:86:cb:52:11:54:ce:7b:c1:ad:76:02:47:a5:
f3:d2:12:49:df:b4:13:1b:ae:39:5f:4d:a9:af:1b:23:cb:ac:
1f:b2:50:7e:39:c6:2f:25:5f:d0:8f:80:de:7e:9a:07:47:93:
74:91:94:18:77:f2:5e:4d:16:38:29:11:94:cf:77:be:f8:6a:
ee:fb:dd:05:8e:16:1c:78:0b:7e:3c:51:b6:96:b9:aa:1e:25:
cd:a9:48:8f:ff:0c:17:ae:f8:d7:eb:de:9d:3d:65:e6:1e:e0:
de:c8:01:c7:40:a6:ec:3c:81:6b:a4:59:d0:aa:16:73:e9:1e:
26:c2:27:80:09:fb:fd:fb:cd:cc:22:3a:a2:81:8e:23:8b:0f:
bc:07:f0:f4:41:03:db:c9:2d:59:e5:d4:17:3b:e0:fd:1b:e3:
bf:a6:b3:34:de:a8:b0:dd:f8:60:b0:fa:09:f3:36:50:64:d3:
d3:01:ea:0c:9e:af:1f:ee:27:39:8b:d3:42:c1:79:b4:d2:f0:
ef:0a:a2:47:31:4d:fb:d8:59:9e:ac:99:37:a8:a7:fb:b0:b3:
49:9a:61:c7:5b:61:56:db:00:5d:16:4c:80:30:44:90:e1:c8:
c2:92:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:07:43 2025 by rpki-client