Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: 5Hv2gALmqk9UU9D8kL1x+jcuQKaoOQtGcZ0tm8Uhcus=
Subject key identifier: 04:AF:AE:76:53:1F:6C:9A:DF:34:38:6E:C6:DC:B7:5F:31:96:E4:58
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 02BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 02B7
Signing time: Sun 08 Jun 2025 03:55:17 +0000
Manifest this update: Sun 08 Jun 2025 03:55:16 +0000
Manifest next update: Tue 10 Jun 2025 03:55:16 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: GvIQ0ZqtNViz54I2A8y/SeVQqseEDeWmMbVvs4CvKCQ=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 701 (0x2bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Jun 8 03:55:16 2025 GMT
Not After : Jun 10 03:55:16 2025 GMT
Subject: CN=684509a5-34a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:15:9b:50:fa:2a:97:e1:9d:d0:c7:71:63:
91:97:58:da:8a:cf:ad:55:03:02:71:73:0d:a8:83:
b2:61:b0:ec:2f:69:db:7e:01:2d:3a:8e:3d:54:5e:
67:48:7a:4d:09:9f:60:0d:17:98:67:55:68:93:98:
6e:d7:d2:2e:e6:0e:de:86:9b:ea:88:29:09:ff:86:
31:f7:4e:a1:0f:98:5d:1e:26:b7:dc:24:e9:b0:53:
5e:c3:ce:8a:5b:af:4c:64:7d:50:2c:ff:9d:bc:71:
d0:c1:e0:4d:45:8c:bc:a7:70:29:c9:3e:a4:c8:db:
70:59:65:03:d3:73:d8:7c:26:5a:3a:2d:5d:54:60:
01:d4:16:6e:f7:30:b3:ea:10:95:f5:0b:e7:d6:04:
02:dd:a4:d2:57:5c:e7:f2:48:a5:fd:47:b1:ec:3a:
42:8a:dc:8c:9f:de:6e:66:6a:d7:90:42:fc:ec:84:
bc:1f:58:cf:d5:9c:75:aa:d5:71:42:46:61:2f:d9:
52:9d:82:de:8a:2f:31:fa:a3:dc:18:63:c0:c8:3c:
14:c4:c5:6c:74:54:22:6f:aa:55:58:05:7c:21:d7:
07:31:34:2a:f7:76:76:ee:1c:2b:cd:f0:ed:73:6b:
7c:aa:d9:60:aa:f2:87:1b:6f:30:88:67:b4:60:5b:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:AE:76:53:1F:6C:9A:DF:34:38:6E:C6:DC:B7:5F:31:96:E4:58
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c3:1e:0e:d7:0b:23:a2:75:b7:45:8d:d6:fa:75:9b:b0:f0:
36:db:4e:ea:b6:23:d5:a6:71:14:44:56:0a:0e:3f:06:52:20:
86:c3:79:b7:8c:6c:01:f9:1e:85:69:5b:84:62:6b:9a:2e:c2:
ab:9c:65:5b:fc:45:3a:10:48:1a:3d:4d:51:c2:d9:6a:aa:67:
6d:8f:fa:ac:50:d4:d4:3e:0d:48:aa:78:fb:43:dc:24:58:8a:
6a:35:de:2a:2e:10:0e:0b:97:4e:5f:6a:54:98:0c:28:ae:db:
b6:05:cb:f6:6e:1f:db:73:64:d2:97:5f:69:b1:c6:41:88:68:
ec:61:00:2d:a3:16:8b:36:53:d1:88:de:91:d2:33:92:a1:8c:
4a:48:cd:08:d8:94:23:90:63:9d:73:3a:e3:a3:15:1b:7a:be:
88:c3:c5:8c:34:da:7a:ec:b8:22:ab:ad:af:81:49:e0:04:d6:
45:33:72:c6:7f:36:ff:1b:23:c6:31:4d:2b:09:b6:f1:12:9f:
1b:3f:09:0a:81:e3:6f:16:70:39:cb:ac:fc:ed:c8:c4:fa:eb:
31:8f:c3:fd:66:b6:07:d3:d6:f5:32:fb:3a:c2:72:81:9e:44:
28:3d:73:da:ea:bb:bc:64:bc:17:4e:3d:c6:89:59:8f:d5:f5:
73:44:71:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:04:05 2025 by rpki-client