Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: DRpzjeGHbiSBuCuat9QiObe2EMs9LxUqrMIBebr31io=
Subject key identifier: CB:73:3A:A4:68:1A:22:D8:E6:65:B7:AA:B9:3B:3E:EF:FE:8A:70:4B
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 0938
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 0937
Signing time: Tue 16 Sep 2025 01:24:26 +0000
Manifest this update: Tue 16 Sep 2025 01:24:25 +0000
Manifest next update: Thu 18 Sep 2025 01:24:25 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: kLBA0rOh1RBuEiHJTC/oHs+0cx/P3OF6PX3vOJQRJsc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2360 (0x938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Sep 16 01:24:25 2025 GMT
Not After : Sep 18 01:24:25 2025 GMT
Subject: CN=68c8bc4a-e093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a6:32:ec:72:5d:67:99:58:63:12:3e:8c:33:
1b:73:bc:24:17:33:99:ad:e5:9b:32:60:bc:2f:6f:
d1:ab:6b:d6:52:30:f3:4a:95:c3:59:44:76:7d:47:
22:b4:da:7d:06:11:d1:fd:0c:9a:ee:08:1c:d8:cf:
93:c5:46:9b:b5:21:43:c5:19:35:2d:78:b2:27:14:
cc:5c:f7:51:cf:d4:e7:48:5a:8e:52:68:b9:7d:77:
99:99:56:70:8c:eb:02:7a:a2:fd:24:f7:f8:a3:9d:
17:49:cb:d0:2d:52:b6:49:35:e6:50:e1:66:68:db:
d1:33:b6:88:bb:5c:56:9b:de:41:3e:34:45:4e:8e:
0c:c9:ba:51:15:38:34:8f:4c:68:99:bb:c9:44:62:
96:2e:05:87:fa:cf:3c:3b:31:9d:6a:b2:47:1b:ab:
d4:ea:7d:39:5b:9e:c1:a7:c7:e0:b5:f3:88:79:02:
88:df:7e:f0:13:d8:15:8a:73:4b:7f:a9:11:62:a3:
56:75:21:48:47:7a:f3:11:40:e9:d9:32:04:a2:9c:
39:f9:ea:60:19:8a:77:4c:c9:50:ad:e7:23:82:ca:
96:d4:e5:ee:a8:05:de:b6:61:d7:c8:e8:72:f2:aa:
e1:8d:a2:bb:4e:39:1d:57:15:f1:8c:3e:4e:f7:f8:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:3A:A4:68:1A:22:D8:E6:65:B7:AA:B9:3B:3E:EF:FE:8A:70:4B
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ae:a5:78:01:d8:b6:85:69:f1:64:e4:af:c5:81:f6:11:6a:
20:dc:8b:ec:cd:0d:11:73:1f:54:bc:2c:02:c5:ad:ef:1f:0b:
d6:87:3d:e7:f0:49:86:61:7f:7c:b9:ea:86:14:cf:ec:af:9b:
3e:89:a5:d1:77:24:ef:79:5e:a4:71:27:7b:42:17:74:20:a3:
2b:cb:e9:7d:59:58:de:4c:8c:ff:24:9f:7e:08:b2:3a:5c:b5:
be:bf:5e:d2:54:b8:82:ff:19:54:c1:aa:b7:83:87:56:08:f2:
d6:33:0b:8b:52:3c:0f:c5:e0:d4:07:d5:64:2c:0b:cf:f7:14:
41:64:08:9b:39:39:61:fd:26:5a:66:f7:8b:68:64:20:6f:31:
c2:97:23:3a:da:e5:52:a5:69:f3:69:f2:8b:0f:9e:09:2a:4a:
14:46:80:fd:eb:7b:73:cb:d2:ad:08:5d:e5:fb:17:0e:9c:19:
54:11:4f:7e:82:9d:2a:c7:a4:f7:1a:cc:68:b5:6e:51:05:17:
0d:6b:76:52:37:39:a0:8b:1b:1d:52:01:18:2b:f9:9f:23:cb:
f9:51:e8:04:43:f8:05:d9:bf:b4:b3:ab:ca:a2:04:01:48:18:
13:b5:d7:2a:2c:9f:1c:b4:81:68:a2:89:c3:fb:a1:d1:5a:9e:
8a:59:42:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:14:20 2025 by rpki-client