Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File: tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier: I/P8gvTDkS3RrcZUiNOYcS/99V9p5Jx7TaOwbKe2e7w=
Subject key identifier: 35:0B:48:B5:36:9B:D7:36:B1:9E:64:58:C9:48:BE:6E:A1:D6:17:1D
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer: /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial: 02F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number: 02ED
Signing time: Thu 31 Jul 2025 04:02:21 +0000
Manifest this update: Thu 31 Jul 2025 04:02:21 +0000
Manifest next update: Sat 02 Aug 2025 04:02:21 +0000
Files and hashes: 1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: 97sdA6HP6+KpXCHSN5wecfOPW9b5vyEB16jXp9Kb2qo=)
2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 755 (0x2f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Validity
Not Before: Jul 31 04:02:21 2025 GMT
Not After : Aug 2 04:02:21 2025 GMT
Subject: CN=688aeacd-69a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a9:d4:93:97:a3:92:b2:67:dd:9f:9e:a2:df:
a6:f0:ba:a9:6b:1d:d5:37:29:58:4b:c4:46:6d:79:
e4:93:24:26:ce:60:fb:5c:91:b8:4c:8d:a9:b5:34:
ae:13:a5:fc:d0:aa:06:cd:24:26:a7:2c:03:6a:41:
5e:67:2c:00:c5:eb:c1:8c:83:5d:24:9c:0a:60:d2:
c8:d6:91:a9:3b:5c:06:4c:53:d2:b6:cb:a3:bf:eb:
da:c6:37:2a:f2:f9:1b:cd:2c:91:b2:ec:6c:45:bc:
f5:fb:77:5c:5e:8e:c1:ca:24:64:0a:b8:1e:80:94:
a3:14:40:94:8c:a5:e6:72:00:9a:2c:6c:58:50:8b:
3f:ad:ad:50:6d:a5:fb:8d:db:de:33:e1:f4:73:db:
21:e0:33:a6:fc:e0:c8:2a:02:06:2c:cf:ca:2f:8e:
03:60:4e:70:a6:16:0c:8f:b7:e6:41:63:54:48:85:
9b:0b:84:90:99:d0:60:18:95:8c:c4:b0:03:33:e3:
27:3e:b2:20:4e:58:8a:49:8d:9f:86:31:7e:99:ea:
27:fe:89:23:fe:b5:64:85:46:05:2b:dc:0a:25:d1:
99:ad:a0:4e:86:3f:81:e2:d9:53:98:d0:3a:5e:b6:
e0:ee:96:fc:1e:0e:9e:41:c2:74:6c:70:9b:0d:fc:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0B:48:B5:36:9B:D7:36:B1:9E:64:58:C9:48:BE:6E:A1:D6:17:1D
X509v3 Authority Key Identifier:
keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
04:dd:a8:a4:ba:b1:85:59:4f:c2:12:c3:b4:60:fd:05:5b:87:
34:88:2e:88:16:b6:8b:d5:e9:8e:1a:ae:ac:bd:27:d1:df:84:
9d:4f:3b:25:a2:ae:58:b7:a2:d9:92:af:96:c1:6b:63:23:8d:
b1:b9:a3:d3:13:90:76:f5:c5:72:57:15:98:5f:6c:34:f8:e0:
84:50:d0:0e:26:a3:0c:9a:0b:a1:90:f8:70:49:14:30:35:66:
d2:2f:8d:85:b1:2d:7c:4f:ae:6d:88:bf:71:fa:1d:18:ba:d1:
b9:3a:12:2a:1f:d7:66:4f:35:ca:f6:88:1f:de:7f:cb:b5:5c:
8e:37:aa:dd:17:37:da:0c:d8:fd:b3:cb:af:db:b9:af:74:4c:
28:f3:f4:94:6e:b0:35:46:86:5e:aa:ef:a8:bc:f3:15:88:1d:
fd:60:9b:22:48:ec:3c:ad:eb:78:39:0b:2a:5f:a6:4d:92:2e:
2c:8b:e2:e1:6c:ea:9c:0f:c8:32:f8:77:c8:7e:b6:98:97:09:
a2:b5:a3:62:71:53:28:32:57:b3:5f:61:04:5c:38:85:a7:1d:
80:39:21:de:86:9d:a4:8c:dd:f4:25:8b:91:00:27:0d:68:4d:
5c:73:bc:e2:0f:55:43:15:90:01:26:5c:77:b9:92:8d:4b:d9:
67:f9:2e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:32 2025 by rpki-client