Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File: AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier: CXhgI7Ml7ox26VBSBrygzy6Nwyl/lDRcedObyMP0MSU=
Subject key identifier: 75:9E:E9:F0:5A:9C:E0:7D:10:87:4B:20:EC:C6:73:FC:09:CC:08:CD
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer: /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial: 089B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number: 089B
Signing time: Thu 31 Jul 2025 01:41:38 +0000
Manifest this update: Thu 31 Jul 2025 01:41:37 +0000
Manifest next update: Sat 02 Aug 2025 01:41:37 +0000
Files and hashes: 1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: yzdApj6TfiKjdPc9hoTlOhY0Ojrz3TMbUqN9vESRtlE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C684FAF, serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Validity
Not Before: Jul 31 01:41:37 2025 GMT
Not After : Aug 2 01:41:37 2025 GMT
Subject: CN=688ac9d2-d733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:c6:33:0d:01:1c:17:fd:f7:b5:53:67:1e:
7b:95:5c:f8:28:32:8e:e3:0b:89:5a:da:60:ef:1e:
f7:4f:a6:8b:92:9b:ad:20:b4:98:4e:0b:53:02:74:
08:36:e8:0c:aa:49:af:c6:c3:c6:d8:61:df:84:6f:
ee:bb:0c:1a:74:b2:5c:31:23:7c:36:1a:4e:19:d3:
7a:da:a3:5f:b9:3c:16:ad:3a:74:b6:1d:d3:21:41:
2d:b0:34:69:f4:aa:e3:e7:eb:2e:a2:b3:42:9b:64:
85:3f:ca:16:6a:4b:e0:05:25:a7:80:51:66:01:69:
d4:6b:54:33:e2:44:8f:5b:b4:54:1f:f9:c7:37:a9:
60:12:2c:1b:b0:e2:7f:ac:99:b3:0f:af:f7:f9:79:
aa:b8:c0:6b:57:0b:b4:33:a4:ea:a3:57:70:14:1a:
0c:42:f6:2a:62:2c:10:1e:0c:3b:b0:88:4c:a0:62:
44:f3:46:17:61:30:a7:ce:52:f5:c1:67:6b:82:90:
6e:c7:70:13:04:c8:90:7e:19:1b:d4:6f:bd:44:37:
e7:a2:a6:aa:df:61:03:23:df:f9:eb:ea:58:6a:e5:
16:4b:06:ce:51:4e:0a:cd:ee:15:1a:f3:95:b1:48:
2d:9d:d6:c3:da:e1:b3:ce:18:da:af:90:d9:9b:b4:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:E9:F0:5A:9C:E0:7D:10:87:4B:20:EC:C6:73:FC:09:CC:08:CD
X509v3 Authority Key Identifier:
keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:87:e7:7f:e7:99:e2:a9:6a:b4:f2:5e:89:aa:5c:52:18:06:
69:23:bd:0c:73:82:9a:2d:1d:66:2a:f1:e4:a1:bd:90:6e:f2:
20:89:01:3d:85:bb:55:61:32:e8:02:5a:b0:24:0c:90:18:e4:
11:62:c5:24:fc:62:86:b6:bd:90:e2:66:e7:6a:6e:d6:06:77:
0c:01:08:67:d4:15:57:96:06:4e:e8:fe:6f:22:71:9c:7b:d5:
3c:15:0a:63:03:1d:dc:fc:74:3f:65:59:3a:fa:95:40:e7:5e:
51:5f:51:7c:a1:05:af:89:d7:51:dd:85:3b:52:3f:40:02:c9:
f7:74:25:1f:d1:49:74:c7:42:b6:98:f7:79:5b:f3:26:7f:ab:
b0:44:c6:15:94:8a:ad:72:fe:6c:86:03:c4:2d:e9:f5:5c:10:
27:96:be:5c:b5:7e:65:88:51:a8:ad:9c:27:44:37:0a:16:bc:
67:50:08:12:c8:8e:24:8f:3b:03:1a:25:92:0f:c1:79:70:04:
b0:56:05:97:6b:c1:a5:98:74:79:b3:c3:d1:da:e6:51:ee:68:
31:1a:11:3b:24:4f:3a:49:63:41:ac:be:53:65:72:eb:c6:c2:
32:4a:76:8a:5b:08:ad:88:80:4d:50:ab:91:15:9a:4c:43:51:
31:15:8c:e9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzY4NEZBRjExMC8GA1UEBRMoMDIzMTYzODFGMzkxQzlDMUMxQjY1MDc5MkJCMzdF
RkU3OEY1REQ5MzAeFw0yNTA3MzEwMTQxMzdaFw0yNTA4MDIwMTQxMzdaMBgxFjAU
BgNVBAMTDTY4OGFjOWQyLWQ3MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVJ8YzDQEcF/33tVNnHnuVXPgoMo7jC4la2mDvHvdPpouSm60gtJhOC1MC
dAg26AyqSa/Gw8bYYd+Eb+67DBp0slwxI3w2Gk4Z03rao1+5PBatOnS2HdMhQS2w
NGn0quPn6y6is0KbZIU/yhZqS+AFJaeAUWYBadRrVDPiRI9btFQf+cc3qWASLBuw
4n+smbMPr/f5eaq4wGtXC7QzpOqjV3AUGgxC9ipiLBAeDDuwiEygYkTzRhdhMKfO
UvXBZ2uCkG7HcBMEyJB+GRvUb71EN+eipqrfYQMj3/nr6lhq5RZLBs5RTgrN7hUa
85WxSC2d1sPa4bPOGNqvkNmbtDDnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdZ7p
8Fqc4H0Qh0sg7MZz/AnMCM0wHwYDVR0jBBgwFoAUAjFjgfORycHBtlB5K7N+/nj1
3ZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2ODRGL0IyOEUyOTBDRDQ4MzExRTk4OTQxN0YxQ0Y4QUVBMjI4L0FqRmpn
Zk9SeWNIQnRsQjVLN04tX25qMTNaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FqRmpnZk9SeWNIQnRsQjVLN04tX25qMTNaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzY4NEYvQjI4RTI5MENENDgzMTFFOTg5NDE3RjFDRjhB
RUEyMjgvQWpGamdmT1J5Y0hCdGxCNUs3Ti1fbmoxM1pNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANh+d/55niqWq08l6JqlxSGAZpI70M
c4KaLR1mKvHkob2QbvIgiQE9hbtVYTLoAlqwJAyQGOQRYsUk/GKGtr2Q4mbnam7W
BncMAQhn1BVXlgZO6P5vInGce9U8FQpjAx3c/HQ/ZVk6+pVA515RX1F8oQWviddR
3YU7Uj9AAsn3dCUf0Ul0x0K2mPd5W/Mmf6uwRMYVlIqtcv5shgPELen1XBAnlr5c
tX5liFGorZwnRDcKFrxnUAgSyI4kjzsDGiWSD8F5cASwVgWXa8GlmHR5s8PR2uZR
7mgxGhE7JE86SWNBrL5TZXLrxsIySnaKWwitiIBNUKuRFZpMQ1ExFYzp
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:20:24 2025 by rpki-client