Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File: Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier: 5VpboEPngg+1GPqOaNcB5ac6UjM9pGKf81Huet2F3+s=
Subject key identifier: F8:48:DF:32:19:F1:31:64:35:6C:90:05:59:C7:1E:17:0B:A0:F2:3F
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer: /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial: 0445
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number: 0444
Signing time: Thu 31 Jul 2025 03:16:12 +0000
Manifest this update: Thu 31 Jul 2025 03:16:11 +0000
Manifest next update: Sat 02 Aug 2025 03:16:11 +0000
Files and hashes: 1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: 60+hY1LM5y3eEBJD4v7c3MYZLzlTzfvBsBKsEBlSkPc=)
2: E3F54648303711ED9A084DD9F1222468.roa (hash: gFeaumPVCdd6tZ5UsCnpNw/LwtGf891vKHW1FGcYpBY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1093 (0x445)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Validity
Not Before: Jul 31 03:16:11 2025 GMT
Not After : Aug 2 03:16:11 2025 GMT
Subject: CN=688adffc-9aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:40:a3:23:1a:07:a6:4e:91:95:9b:3a:ef:
cc:a3:07:17:d3:80:7a:8c:bd:8d:c0:6e:b9:26:51:
bc:cb:99:54:66:23:bd:57:57:94:be:54:eb:84:30:
e1:5b:0b:39:7a:b2:2d:00:5d:9d:88:c6:c5:cd:a8:
84:3b:e2:22:f2:e5:0d:04:9b:95:c4:0b:4b:36:65:
3b:a3:58:ff:8f:48:44:d4:dc:a5:b1:28:c8:cf:aa:
5e:01:1b:fb:cb:76:59:d1:0d:f0:2e:23:39:b0:8f:
65:3f:2b:7d:5c:d2:57:1a:e0:36:c2:17:13:11:fd:
35:04:c7:f3:4b:1e:36:22:d5:c6:8d:77:5b:c4:c4:
92:2b:a8:a8:9d:88:5a:b7:7c:3d:8b:6c:d3:bb:4a:
af:07:65:b0:34:36:8e:67:8f:ed:cf:88:5c:be:58:
ea:21:71:20:85:1a:9d:b2:b0:a0:3b:55:85:15:94:
d3:b5:11:f9:a4:f5:8a:a9:0a:e4:ba:c6:e9:d4:67:
7e:d7:7e:40:3f:3f:a1:3f:5c:1e:4a:90:0b:78:90:
d3:7d:17:e4:cd:df:65:55:65:0f:03:c1:13:5a:83:
9f:93:ca:4e:45:77:e0:76:c4:63:fa:68:9b:ef:99:
d5:79:bb:ef:fa:4a:5a:83:e3:48:c7:da:67:eb:fa:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:48:DF:32:19:F1:31:64:35:6C:90:05:59:C7:1E:17:0B:A0:F2:3F
X509v3 Authority Key Identifier:
keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
25:9d:b6:b8:7f:a8:17:92:1d:ad:19:30:a7:41:02:e4:70:03:
62:8b:25:11:8f:b5:2f:07:53:76:8a:6f:60:71:c6:8a:3f:d7:
2c:2d:29:87:e5:cb:fb:09:56:5b:c4:39:fd:e9:d8:6b:f3:d4:
d4:a1:80:c5:7a:e2:5e:e7:51:9f:4f:49:8d:10:b9:86:01:e3:
85:98:8e:97:14:fa:94:f7:50:8a:40:3a:73:b4:b2:72:eb:3f:
8c:d6:ee:56:ce:d5:29:20:61:80:1f:3b:69:db:2c:9e:4a:93:
db:8d:31:85:27:c4:60:8e:46:98:32:de:5f:a9:b6:32:f8:09:
57:b4:57:2e:37:5c:7e:1e:ef:22:9e:68:de:15:5a:46:37:44:
3a:00:81:a3:cb:9b:bf:6a:d2:65:03:41:5d:a4:12:1f:0a:83:
fd:f5:3e:50:43:a8:1b:73:bf:46:4e:3b:90:92:e9:5e:42:59:
76:6c:3b:c8:cb:bd:bd:e8:25:4a:7a:34:23:a8:e4:cf:85:69:
27:6e:ac:d9:14:bd:aa:e7:4d:c8:7e:50:38:bb:2e:ba:0c:58:
c6:cd:19:40:12:82:27:27:53:49:aa:dd:3d:b1:90:58:52:02:
3a:f7:c3:0b:d7:6e:66:3e:45:d6:53:6b:6b:84:ea:1b:2e:f7:
b9:22:14:80
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBEUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUE3ODhBRjExMC8GA1UEBRMoNjdDODJFQjNBMkIxREFCNzM5OTFGQTIzQTEyOEEy
NTE3NTJGMzM1MjAeFw0yNTA3MzEwMzE2MTFaFw0yNTA4MDIwMzE2MTFaMBgxFjAU
BgNVBAMTDTY4OGFkZmZjLTlhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDL/0CjIxoHpk6RlZs678yjBxfTgHqMvY3AbrkmUbzLmVRmI71XV5S+VOuE
MOFbCzl6si0AXZ2IxsXNqIQ74iLy5Q0Em5XEC0s2ZTujWP+PSETU3KWxKMjPql4B
G/vLdlnRDfAuIzmwj2U/K31c0lca4DbCFxMR/TUEx/NLHjYi1caNd1vExJIrqKid
iFq3fD2LbNO7Sq8HZbA0No5nj+3PiFy+WOohcSCFGp2ysKA7VYUVlNO1Efmk9Yqp
CuS6xunUZ37XfkA/P6E/XB5KkAt4kNN9F+TN32VVZQ8DwRNag5+Tyk5Fd+B2xGP6
aJvvmdV5u+/6SlqD40jH2mfr+sh9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+Ejf
MhnxMWQ1bJAFWcceFwug8j8wHwYDVR0jBBgwFoAUZ8gus6Kx2rc5kfojoSiiUXUv
M1IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBNzg4L0FDREEwNjM2MzAxRDExRUQ5MkM5NzU5NUYxMjIyNDY4L1o4Z3Vz
Nkt4MnJjNWtmb2pvU2lpVVhVdk0xSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1o4Z3VzNkt4MnJjNWtmb2pvU2lpVVhVdk0xSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUE3ODgvQUNEQTA2MzYzMDFEMTFFRDkyQzk3NTk1RjEy
MjI0NjgvWjhndXM2S3gycmM1a2Zvam9TaWlVWFV2TTFJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlnba4f6gXkh2tGTCnQQLkcANiiyUR
j7UvB1N2im9gccaKP9csLSmH5cv7CVZbxDn96dhr89TUoYDFeuJe51GfT0mNELmG
AeOFmI6XFPqU91CKQDpztLJy6z+M1u5WztUpIGGAHztp2yyeSpPbjTGFJ8RgjkaY
Mt5fqbYy+AlXtFcuN1x+Hu8inmjeFVpGN0Q6AIGjy5u/atJlA0FdpBIfCoP99T5Q
Q6gbc79GTjuQkuleQll2bDvIy7296CVKejQjqOTPhWknbqzZFL2q503IflA4uy66
DFjGzRlAEoInJ1NJqt09sZBYUgI698ML125mPkXWU2trhOobLve5IhSA
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:12 2025 by rpki-client