Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File: CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier: 1QRLlscau2BzohvSeWMiX6ir++TEB2idikmllfRCUqw=
Subject key identifier: BD:3C:97:1D:AD:42:E0:E2:F4:7F:2F:2D:F8:56:83:82:F4:09:6E:EF
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer: /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial: 0401
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number: 0400
Signing time: Thu 31 Jul 2025 03:24:38 +0000
Manifest this update: Thu 31 Jul 2025 03:24:37 +0000
Manifest next update: Sat 02 Aug 2025 03:24:37 +0000
Files and hashes: 1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: xtMZPyWuuH+CZDbGXJbeoxYw8oBXH4ugKtSOtk64BlI=)
2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Validity
Not Before: Jul 31 03:24:37 2025 GMT
Not After : Aug 2 03:24:37 2025 GMT
Subject: CN=688ae1f6-8280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:43:aa:1a:11:51:4d:ac:d3:a2:fb:03:d2:
66:0e:d1:07:d4:1f:fa:13:8e:f9:c9:46:02:03:da:
21:49:87:88:0b:76:bb:68:33:dd:a0:09:3d:c1:3d:
67:4e:db:16:52:7d:e5:f4:bc:7f:bc:fa:f4:41:9b:
90:35:05:96:ed:52:d1:58:a5:0c:47:c6:12:e0:83:
e3:3e:c2:1c:4c:27:73:16:b2:77:89:67:4a:58:f1:
a2:4e:3a:11:d6:9a:a0:d5:65:82:ed:71:dd:db:5f:
cf:e8:15:5b:9e:4c:fd:78:29:bf:91:5b:39:13:36:
53:a3:61:ee:b7:c5:3e:8d:5e:ee:5f:da:05:1a:f7:
06:5f:ec:43:c6:6d:f7:61:d8:ec:92:c0:c1:19:ed:
9e:91:fe:21:d1:72:36:6f:68:a2:90:be:4c:9d:bf:
26:64:d1:82:0d:d4:14:d0:aa:39:4c:61:2e:38:2a:
32:bd:21:87:78:c9:bf:0c:65:76:c6:d6:b5:4f:35:
8c:89:a6:bc:fd:6e:8c:aa:8d:9b:3a:1f:2e:75:d9:
3b:70:73:7a:e5:50:6d:e7:43:44:df:1c:bb:d4:bc:
b8:ba:68:20:b9:a1:a7:66:bb:0c:b4:05:f2:2f:3a:
01:88:d4:fc:a5:0d:f5:fe:5c:29:06:64:b5:0d:5c:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:97:1D:AD:42:E0:E2:F4:7F:2F:2D:F8:56:83:82:F4:09:6E:EF
X509v3 Authority Key Identifier:
keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:c6:a1:e3:a7:35:24:a1:a9:e5:14:ee:da:d7:8c:6c:99:ed:
ca:be:14:9f:16:f0:44:ab:3c:d7:ef:e8:0f:f8:34:14:0f:79:
18:58:5c:28:b3:10:ea:29:26:f2:3e:47:70:ca:b3:8a:70:66:
26:f8:4e:40:a9:0f:9c:5e:a6:97:5c:93:96:29:bd:0b:ab:3e:
91:cb:f7:0c:99:76:09:17:a1:48:a9:a1:0c:91:7f:91:21:72:
62:3a:9c:a0:e3:31:fc:1a:b2:1b:60:7a:db:91:19:1a:ba:97:
3c:43:34:1c:0b:35:08:32:07:3d:94:a2:9e:8f:38:31:c3:38:
a4:95:8e:26:90:f5:69:f8:4b:d5:38:dc:b8:0e:03:6f:af:75:
71:9f:b3:52:6f:77:6e:4d:5f:9d:a4:fc:b8:68:44:75:6d:fa:
07:16:9f:98:60:b0:49:49:b6:cc:ac:4e:ba:75:a6:72:ef:1f:
b5:0d:7b:86:41:3e:9a:47:8a:99:49:86:f3:31:51:82:a6:e0:
1c:5f:84:cc:30:ff:ed:e1:aa:38:32:35:6f:06:41:08:7f:20:
b1:16:4d:d0:25:42:6f:49:c9:da:23:88:13:2e:e2:29:5a:27:
b5:0f:a1:81:e7:1a:c4:f0:85:23:21:3d:fb:db:5b:54:42:3a:
11:19:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:34 2025 by rpki-client