Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: RzSUKWx/qc8OrF+P7Udl7oly+gf6fmGKi1MFLvymxOU=
Subject key identifier: 60:9D:F5:1D:01:F0:00:53:7D:8E:04:04:E1:9C:BD:75:2D:07:1D:53
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 0909
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 0908
Signing time: Thu 31 Jul 2025 01:29:36 +0000
Manifest this update: Thu 31 Jul 2025 01:29:35 +0000
Manifest next update: Sat 02 Aug 2025 01:29:35 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: MsuQ0tngbDuYboYR79NFJel84huFF3S+xytBPScFdDk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2313 (0x909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Jul 31 01:29:35 2025 GMT
Not After : Aug 2 01:29:35 2025 GMT
Subject: CN=688ac700-3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:f7:32:42:31:5c:05:e7:82:a3:2c:f4:4e:
d7:f5:82:f5:7e:b0:e4:68:5f:35:c7:23:c4:98:28:
16:61:1f:cb:67:75:03:b1:fb:52:38:65:ac:d0:b6:
9a:28:46:a9:17:64:df:a3:27:f5:29:e9:8f:73:fa:
b5:f3:47:1d:07:9e:5a:fd:ab:2f:a5:60:b7:b4:7a:
32:6a:10:17:e9:11:3e:c7:78:eb:90:65:92:6b:fe:
3e:44:aa:d4:4f:e7:6d:e4:79:2c:7c:2d:22:6e:62:
85:17:1e:ec:47:3b:75:af:79:5a:a2:6a:11:ca:d1:
46:56:af:33:8b:eb:7d:cb:0c:69:05:4d:2f:00:84:
69:21:97:2e:20:8e:d6:d9:5c:ca:75:55:3f:e2:6b:
9c:4b:0d:19:d0:14:74:50:31:bb:00:bf:4e:38:5f:
7c:6f:f1:40:25:00:c9:ca:01:51:2f:e1:ab:49:21:
c4:27:e7:cf:8e:c9:e6:dc:cd:9a:4f:6d:1f:4b:2b:
34:a3:48:bc:36:73:43:2b:94:df:3a:b4:8d:bd:d9:
8f:c6:9f:e5:bb:44:7c:44:7c:41:a7:91:59:a8:08:
77:19:61:fb:4b:d8:a5:87:47:b7:6a:d3:7d:95:cd:
61:80:29:6c:c3:e2:92:7d:cf:7f:3e:2d:2f:ab:ba:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9D:F5:1D:01:F0:00:53:7D:8E:04:04:E1:9C:BD:75:2D:07:1D:53
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:41:11:74:97:76:03:54:e7:b0:21:cc:67:9e:a3:d9:a3:
94:a8:39:91:b1:91:0d:b2:d6:d7:b9:75:77:6d:9a:f6:92:69:
3a:0b:76:86:8f:68:12:d2:73:a4:84:ce:df:da:2d:a1:8d:b3:
a5:af:a6:f4:79:30:2d:fd:84:de:f7:59:a6:bd:9a:96:91:dc:
17:25:2f:50:d1:e2:ef:10:96:9c:b7:df:ee:fd:66:e8:33:85:
e9:4f:f1:ba:ee:76:05:a7:0b:78:c7:4b:0f:ba:52:77:69:b4:
8f:3e:f9:e2:8e:10:94:30:c2:6f:fe:a1:70:35:d7:05:28:19:
fb:6e:42:a1:02:b7:26:00:e2:58:af:db:4f:75:14:89:c7:5e:
1d:50:14:c2:38:00:3f:5f:23:58:5e:2f:1b:40:d3:2b:b5:4b:
06:d1:ba:c0:2a:ec:12:56:01:11:f2:c2:b6:db:c6:6e:21:3f:
11:af:0d:d5:86:ab:cf:f6:90:16:8f:9d:9b:c8:13:30:10:6c:
5e:08:02:c1:91:3d:fc:83:1d:25:06:7c:be:86:19:4e:5f:ab:
1f:5b:12:01:21:5c:67:89:8b:34:30:3b:d5:d5:00:13:1d:1c:
c9:9f:34:3c:98:b8:08:73:32:ec:64:24:85:0b:cf:2b:17:6a:
6d:2e:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:19:15 2025 by rpki-client