Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
File: QUU0FvBOj22xFq-_-XGXUae9vPc.mft (raw, json)
Hash identifier: FCFfEdtr824BUxEUhhbShLBv1RolSk8ZvF+RJA8Stq8=
Subject key identifier: 93:72:58:8E:63:7A:0B:9D:14:E8:E8:B1:65:2B:ED:DE:15:23:5E:C8
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Certificate issuer: /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial: 054F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
Manifest number: 054C
Signing time: Thu 31 Jul 2025 02:49:11 +0000
Manifest this update: Thu 31 Jul 2025 02:49:10 +0000
Manifest next update: Sat 02 Aug 2025 02:49:10 +0000
Files and hashes: 1: QUU0FvBOj22xFq-_-XGXUae9vPc.crl (hash: HHOqGnk7pMI4rsZqKUpDLwJNn9KN2GFtz4Qxe+1M1RE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1359 (0x54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AC99EAF, serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Validity
Not Before: Jul 31 02:49:10 2025 GMT
Not After : Aug 2 02:49:10 2025 GMT
Subject: CN=688ad9a7-ef10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:aa:92:5b:2e:5d:f5:aa:6a:b6:7c:ed:76:b9:
19:82:bb:9c:bd:81:1f:62:02:4f:ba:01:4d:bd:fc:
65:91:29:9c:27:44:19:de:79:f9:64:aa:ca:07:b9:
47:ba:65:39:9f:f3:5e:d6:79:3e:ff:3d:f8:cc:ad:
b4:ab:c9:b0:fd:5a:c7:06:ce:df:98:58:78:6e:29:
bb:00:8c:c7:70:51:fb:cc:d6:46:3d:96:4d:f6:eb:
0f:e8:91:7b:01:f9:37:04:b7:e8:62:df:1f:40:f9:
72:42:94:8e:97:04:d9:d0:19:2d:2b:d7:4d:12:3b:
50:fa:fc:78:22:e2:ce:ab:0a:72:b4:3d:00:8a:fa:
70:03:13:ef:85:a5:1a:e0:f0:9d:12:f4:e6:cc:0d:
e1:94:e0:84:44:d1:30:d3:1e:ed:5a:9a:1e:8b:22:
ee:9c:82:38:74:68:46:1d:4c:dc:85:bc:14:fa:12:
d0:13:b5:c3:bc:c5:40:1c:80:9e:d2:ca:09:c6:c7:
7e:f8:3c:55:93:cb:9c:9a:18:6e:b7:b2:5d:a7:7c:
39:07:2f:2e:4d:18:11:7e:c6:a1:cd:8f:77:f8:69:
77:86:b7:db:65:e7:b1:03:d6:45:3e:79:b4:82:2b:
4b:de:6c:25:a6:5e:51:b5:3e:08:fc:56:a0:c4:25:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:58:8E:63:7A:0B:9D:14:E8:E8:B1:65:2B:ED:DE:15:23:5E:C8
X509v3 Authority Key Identifier:
keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
50:50:75:f1:91:18:44:3e:ae:66:6b:4f:b4:08:a5:ba:5b:79:
6b:e4:17:44:5c:19:dc:7d:38:e9:90:b0:c7:38:3c:d1:fe:a9:
c5:b1:e2:20:bb:ed:39:b1:c8:a9:0e:8f:35:ed:e5:36:76:0f:
1b:38:4d:96:bf:ad:ca:8d:19:7e:c9:ef:66:0d:13:a7:d3:a7:
cf:eb:52:03:08:04:94:17:df:89:d2:9a:b9:85:3f:02:74:59:
6f:9a:ac:56:ed:e4:2b:45:80:f4:fa:36:6c:a8:d2:02:3a:b3:
2c:55:ac:fe:c4:24:07:96:81:45:21:94:74:16:1f:5a:ea:67:
a0:e3:fd:d5:3a:b6:de:fd:0a:d2:3f:9a:1d:23:8b:67:fb:0c:
fc:7e:2c:e5:aa:b1:e6:5c:74:3a:6b:13:e5:96:9a:c4:19:23:
4f:94:96:10:1f:85:62:7e:db:c4:6f:2b:9c:40:c0:e8:c9:7e:
39:8c:f7:63:85:a3:0f:6f:97:c9:6c:e5:62:a0:2c:5c:c4:58:
df:02:d9:00:7c:a1:c4:3f:4d:1a:3a:4a:3f:7a:3f:71:97:33:
ec:8d:9e:c1:31:bf:be:20:cb:52:a5:10:e5:65:fb:0e:1f:db:
db:2b:4f:fd:1c:de:c0:29:16:10:7d:46:c2:e7:f0:27:b3:04:
86:91:01:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:24 2025 by rpki-client