Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File: 1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier: 37moXtgySArXlBTjvKsdD9PvW1+nShN91JZzgn+/x7w=
Subject key identifier: 14:DD:BA:F8:11:A2:95:4A:6E:C8:98:CF:40:92:4D:F2:3D:02:0A:48
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer: /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial: 03A4
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number: 03A2
Signing time: Thu 31 Jul 2025 03:36:05 +0000
Manifest this update: Thu 31 Jul 2025 03:36:04 +0000
Manifest next update: Sat 02 Aug 2025 03:36:04 +0000
Files and hashes: 1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: 3zEQ2IcgcCQzVhWmq8fA2pE3YP4fWJD4Klnt8mZpjx8=)
2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 932 (0x3a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Validity
Not Before: Jul 31 03:36:04 2025 GMT
Not After : Aug 2 03:36:04 2025 GMT
Subject: CN=688ae4a5-9753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cb:7f:35:29:62:bb:94:60:75:e5:c9:8a:90:
2b:3c:11:4e:ba:bc:84:4b:b0:77:bb:c2:8d:88:8b:
47:ec:05:cc:83:b4:a0:41:1d:e8:bc:35:36:9e:2b:
98:fa:3b:c6:66:f8:4c:4b:b4:19:a9:01:f9:e0:04:
81:52:08:7e:a1:fe:47:ef:b1:2e:1e:a6:f7:a4:f2:
06:5e:f4:5b:5e:72:a1:21:70:e8:ff:8e:af:24:48:
64:f8:83:6d:b1:50:23:63:45:31:9c:7d:80:de:4b:
19:e0:46:5b:73:1d:35:6c:67:a2:68:9c:b0:4b:76:
93:8c:a3:cf:81:52:94:b6:78:b4:a6:93:3a:77:88:
41:9a:d7:de:42:69:35:74:e6:d9:56:33:3a:20:cf:
ad:d1:55:8b:6d:9f:fb:71:2b:58:14:41:38:1f:5e:
46:c1:41:84:d7:36:f0:b3:2b:3e:96:8e:bb:69:b8:
4a:e2:da:85:76:28:3d:e7:a8:8e:4d:23:64:de:60:
16:7d:e1:49:98:37:92:15:f5:e8:af:05:de:d9:10:
c4:7c:a4:0b:34:1f:33:b9:5d:e3:b9:9a:2f:21:b1:
63:5f:59:88:fa:2e:64:f8:6d:e8:38:18:b3:85:bc:
93:d7:6f:2b:5a:51:17:52:2a:be:ca:f6:c3:bb:d5:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DD:BA:F8:11:A2:95:4A:6E:C8:98:CF:40:92:4D:F2:3D:02:0A:48
X509v3 Authority Key Identifier:
keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
48:0b:52:15:ef:83:33:ad:64:23:71:f5:a5:ed:a1:e5:2d:9d:
5b:2f:11:39:d2:be:24:be:43:7f:c3:d3:e5:ef:2f:80:1f:c1:
a2:03:8c:ac:94:40:af:8d:77:17:a7:5b:a7:43:a0:0b:7d:57:
63:15:98:53:b6:eb:a7:e6:bb:15:fd:bb:aa:4e:e5:d2:e2:89:
2b:a6:fa:9b:6f:44:b1:61:ab:2e:6d:91:44:92:60:9d:82:49:
5a:0b:e6:c6:3e:ad:f9:0c:d1:c6:83:b4:be:04:d1:03:88:a2:
9d:7d:c7:dc:be:73:64:fc:ba:5a:7d:06:ae:96:d4:31:6a:20:
fb:82:44:50:ce:2e:e5:63:c0:20:ea:bc:8e:16:5c:73:14:ce:
40:76:e6:e3:d3:66:13:06:e5:55:b3:70:4a:1f:c9:23:fa:7c:
a6:0f:3d:bf:4c:87:6a:a8:24:58:5f:07:34:e6:b8:2e:18:af:
90:2b:3b:4e:66:26:74:f9:8a:56:6a:a1:c0:ea:f9:bd:4a:5f:
7f:e2:be:d1:d9:6b:e2:b0:ab:74:19:1e:15:41:c4:95:b2:b5:
a7:4b:9e:57:d9:4c:98:85:90:ca:cf:0e:30:89:83:bb:ba:96:
26:53:8c:15:2c:18:22:ec:e9:67:76:b0:f6:8e:17:4e:e3:4b:
4f:72:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:15:53 2025 by rpki-client