Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
File: JbZLdh63yNTuwchu-qN5sDvSAGE.mft (raw, json)
Hash identifier: 2i/aXnILITmWOmqvUc4Dnu5BgEaLSq67Vu3bjd6b7Z0=
Subject key identifier: B8:AB:6A:E3:09:EA:79:4D:6D:86:81:5A:A6:83:7C:8F:88:3C:44:75
Authority key identifier: 25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
Certificate issuer: /CN=F369FA36AF/serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Certificate serial: 090E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
Manifest number: 090E
Signing time: Thu 31 Jul 2025 01:27:32 +0000
Manifest this update: Thu 31 Jul 2025 01:27:31 +0000
Manifest next update: Sat 02 Aug 2025 01:27:31 +0000
Files and hashes: 1: JbZLdh63yNTuwchu-qN5sDvSAGE.crl (hash: yPNQfh2JvU2IXv+psCr4gPy/4Ai/8CnCEOwUsDsjYk0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2318 (0x90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AF, serialNumber=25B64B761EB7C8D4EEC1C86EFAA379B03BD20061
Validity
Not Before: Jul 31 01:27:31 2025 GMT
Not After : Aug 2 01:27:31 2025 GMT
Subject: CN=688ac684-6404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:37:6e:2b:e6:b8:d4:7e:e6:da:15:a6:60:03:
05:c4:11:60:66:b4:1a:2e:cb:32:73:40:e3:d5:7d:
4b:52:92:18:88:c0:29:d2:f5:a0:80:23:9d:2b:fa:
7f:a8:01:34:89:e3:19:b0:45:c4:d5:4f:36:d0:3e:
da:7e:d9:67:7d:28:3c:03:a3:e1:67:4e:83:e6:f7:
9c:f7:dd:18:4d:a8:f7:39:c6:a4:18:fc:9a:60:e7:
76:71:5e:a0:ae:00:52:97:19:10:8d:b4:61:61:fe:
1d:ca:07:a2:b5:82:b8:cf:f0:67:33:20:44:18:f1:
94:08:da:5d:54:15:17:b3:77:ec:c1:c4:42:cc:31:
13:de:70:fa:57:03:e8:cf:0a:4e:b8:f1:ad:cd:9a:
5e:ce:fd:30:0f:c5:64:9d:d4:c1:13:8b:23:1a:ff:
a8:74:63:89:87:82:bd:93:78:66:ea:b8:37:ae:c0:
0a:66:09:6d:fb:9e:d9:e2:6d:ae:2a:56:4f:32:3c:
f0:bd:90:f2:95:fb:ac:02:5d:24:30:2f:89:e4:1b:
87:c2:5d:a4:3d:87:99:3b:ca:ee:3c:e0:e3:37:e8:
aa:6b:41:aa:e5:46:82:63:20:b3:10:35:d9:de:25:
69:c3:93:a4:52:59:6e:b0:f8:00:a1:59:c8:ba:e8:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:6A:E3:09:EA:79:4D:6D:86:81:5A:A6:83:7C:8F:88:3C:44:75
X509v3 Authority Key Identifier:
keyid:25:B6:4B:76:1E:B7:C8:D4:EE:C1:C8:6E:FA:A3:79:B0:3B:D2:00:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JbZLdh63yNTuwchu-qN5sDvSAGE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/9B16B9A8813911E9AB932A1AF8AEA228/JbZLdh63yNTuwchu-qN5sDvSAGE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:0c:4e:81:ad:b8:78:ec:03:33:96:a7:61:8b:9e:57:ba:
9c:ed:2e:45:dc:96:9e:1d:fe:71:47:6b:98:a9:09:2c:1e:4b:
6b:09:f9:33:f2:1c:1f:30:67:5f:96:57:bb:0b:72:ed:22:c8:
f9:63:15:71:f6:a8:c5:d1:6d:a8:24:d4:5c:99:e8:5d:1f:e0:
5a:a3:fd:87:e1:3f:a4:a1:60:4c:1d:f3:fc:6f:c0:87:d9:e3:
55:76:e6:d1:71:fe:aa:e1:58:be:37:d0:7e:a6:ac:06:81:7c:
c6:1f:5b:97:1b:b4:a5:4d:06:cf:76:67:c1:c3:4f:18:73:2b:
ec:91:b3:16:7e:b4:e7:8b:5f:c9:d6:5f:32:8c:57:ba:c8:72:
d8:39:8e:ca:89:3e:a2:35:18:6a:36:32:7e:4c:6d:71:e2:dc:
fe:27:ad:da:9b:26:95:0b:e5:f4:16:9c:e9:70:88:40:0d:32:
72:f2:80:43:50:66:89:8c:c2:57:38:2e:56:75:3b:4a:4f:b2:
94:ac:a0:4a:23:6e:30:48:98:c1:89:30:90:97:48:8f:ed:cb:
c2:e9:81:42:74:e2:d2:54:8e:36:aa:21:c0:f8:80:13:9d:de:
a9:19:e9:72:b7:7d:ff:47:33:11:2a:7a:b2:91:1b:e2:25:f9:
ea:2a:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:19:22 2025 by rpki-client