Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File: rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier: wHT/UZynRq/nNEkCRwLTKy4IXsgBuNOMouQ4oCyL/1s=
Subject key identifier: 44:E8:B8:11:69:ED:D1:F6:F6:73:59:77:89:ED:A8:5D:44:7B:7D:E6
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer: /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial: 08D3
Authority info access: rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number: 08D2
Signing time: Sun 08 Jun 2025 01:28:05 +0000
Manifest this update: Sun 08 Jun 2025 01:28:04 +0000
Manifest next update: Tue 10 Jun 2025 01:28:04 +0000
Files and hashes: 1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: NpnVETmYbktzzcyOwP730OG0keyXp/qFo3w4Zt5SdoI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Validity
Not Before: Jun 8 01:28:04 2025 GMT
Not After : Jun 10 01:28:04 2025 GMT
Subject: CN=6844e725-ba0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0a:98:ea:0c:76:a1:b4:5c:fa:07:c9:1b:d1:
c4:af:09:05:74:58:4a:fd:a8:f1:55:2e:e9:e3:1b:
7a:cd:c3:45:69:a6:d8:84:4a:5b:95:8a:0f:19:ac:
e0:34:9b:cb:77:29:fb:72:e6:74:91:eb:85:35:a3:
9f:7f:a3:41:ad:0f:b3:65:53:36:88:5e:d9:b6:18:
1b:21:20:05:9b:9d:56:a4:00:fa:e1:e1:25:ae:9b:
a7:02:44:cf:26:1d:3b:5c:46:2e:ac:e4:e5:77:66:
79:d3:b5:e5:4b:ee:fa:db:d4:42:1c:28:ff:41:08:
0b:fb:ae:8b:7a:26:c6:ad:16:66:92:44:22:cb:51:
f9:e9:5c:4f:d8:eb:4d:ef:c2:d1:6d:6e:07:db:c1:
7b:a3:18:96:be:74:c1:32:15:d0:d2:8d:6e:39:7f:
dc:dd:c6:85:07:9b:8f:03:3c:85:13:21:15:fb:96:
98:6c:e3:97:97:bb:81:00:fc:97:86:85:bf:47:89:
a7:13:01:f0:9b:b8:a8:df:1e:a9:c0:de:19:72:1e:
b6:0d:cd:ef:d6:0c:bc:70:08:a3:26:fc:5f:33:be:
9d:0a:31:09:a7:7b:fe:86:ce:5f:60:ca:41:4a:93:
6d:ef:63:c6:65:09:6a:53:48:c5:49:29:1f:7e:44:
75:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:B8:11:69:ED:D1:F6:F6:73:59:77:89:ED:A8:5D:44:7B:7D:E6
X509v3 Authority Key Identifier:
keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7f:c1:a1:06:21:ae:9e:b1:9c:a1:b3:0d:c3:57:dc:e0:87:
4c:e0:22:5e:76:22:2f:4e:0c:bf:4c:e8:9a:c1:fa:c6:ab:b7:
b7:1d:41:cc:f2:44:ac:8d:5b:b2:43:ed:8f:83:3f:7b:cc:92:
11:a9:54:f6:56:b1:20:a4:38:54:87:3c:47:c3:7e:ae:96:cd:
4d:e0:ac:bb:2f:52:c7:1f:5e:e0:8c:4b:71:2f:2e:73:77:cd:
a4:2b:df:fb:42:10:a3:b7:3c:40:92:01:26:d4:3f:e9:22:6d:
e7:b4:e6:3e:60:d4:b2:e0:f4:93:87:1c:c6:c2:88:37:a9:e6:
8d:13:4a:fc:f9:73:d3:a3:1e:30:40:10:0e:11:02:1a:f5:2a:
05:31:ad:7a:cf:3d:5b:02:48:db:84:f3:1d:be:02:b1:e4:93:
e2:bc:da:a4:0d:49:21:62:3e:9c:95:8b:d6:ee:17:31:61:0d:
c9:59:54:66:d5:56:75:5f:9c:05:70:4c:a3:3a:29:39:83:4d:
1c:56:50:ff:ed:b2:61:ee:19:24:79:29:26:d0:62:00:53:8d:
ad:19:d0:7e:12:d0:e8:07:21:5b:1b:14:d5:4e:96:e1:6d:20:
f3:b4:56:79:cf:32:be:4f:bb:2e:84:72:e2:75:31:54:ac:95:
3d:75:ca:ba
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCNMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDg2MzdBUjExMC8GA1UEBRMoQUM3NTkzOUNBNzJCOTc0REU0NUUyMTcyMDhEOUUw
NkU3RTFCQUMwMjAeFw0yNTA2MDgwMTI4MDRaFw0yNTA2MTAwMTI4MDRaMBgxFjAU
BgNVBAMTDTY4NDRlNzI1LWJhMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlCpjqDHahtFz6B8kb0cSvCQV0WEr9qPFVLunjG3rNw0VpptiESluVig8Z
rOA0m8t3Kfty5nSR64U1o59/o0GtD7NlUzaIXtm2GBshIAWbnVakAPrh4SWum6cC
RM8mHTtcRi6s5OV3ZnnTteVL7vrb1EIcKP9BCAv7rot6JsatFmaSRCLLUfnpXE/Y
603vwtFtbgfbwXujGJa+dMEyFdDSjW45f9zdxoUHm48DPIUTIRX7lphs45eXu4EA
/JeGhb9HiacTAfCbuKjfHqnA3hlyHrYNze/WDLxwCKMm/F8zvp0KMQmne/6Gzl9g
ykFKk23vY8ZlCWpTSMVJKR9+RHXJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUROi4
EWnt0fb2c1l3ie2oXUR7feYwHwYDVR0jBBgwFoAUrHWTnKcrl03kXiFyCNngbn4b
rAIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4NjM3L0ZDQjQ3QUZBODM5NzExRTlCQUM3OUExQUY4QUVBMjI4L3JIV1Ru
S2NybDAza1hpRnlDTm5nYm40YnJBSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3JIV1RuS2NybDAza1hpRnlDTm5nYm40YnJBSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDg2MzcvRkNCNDdBRkE4Mzk3MTFFOUJBQzc5QTFBRjhBRUEy
MjgvckhXVG5LY3JsMDNrWGlGeUNObmdibjRickFJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPf8GhBiGunrGcobMNw1fc4IdM4CJediIv
Tgy/TOiawfrGq7e3HUHM8kSsjVuyQ+2Pgz97zJIRqVT2VrEgpDhUhzxHw36uls1N
4Ky7L1LHH17gjEtxLy5zd82kK9/7QhCjtzxAkgEm1D/pIm3ntOY+YNSy4PSThxzG
wog3qeaNE0r8+XPTox4wQBAOEQIa9SoFMa16zz1bAkjbhPMdvgKx5JPivNqkDUkh
Yj6clYvW7hcxYQ3JWVRm1VZ1X5wFcEyjOik5g00cVlD/7bJh7hkkeSkm0GIAU42t
GdB+EtDoByFbGxTVTpbhbSDztFZ5zzK+T7suhHLidTFUrJU9dcq6
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:56 2025 by rpki-client