Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
File: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft (raw, json)
Hash identifier: q0Auy/2mG3/z9vqa47z3+0tgNQ3yZOa5mYB2kEtxjNs=
Subject key identifier: C5:E2:B9:5F:B5:5A:49:CB:AF:B3:22:54:0A:00:B4:10:43:DB:8A:19
Authority key identifier: 80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
Certificate issuer: /CN=F36DA96DAF/serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Certificate serial: 02AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
Manifest number: 02AD
Signing time: Thu 31 Jul 2025 04:09:29 +0000
Manifest this update: Thu 31 Jul 2025 04:09:28 +0000
Manifest next update: Sat 02 Aug 2025 04:09:28 +0000
Files and hashes: 1: gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl (hash: vZ+ooS275FD9ubQlo8TGn+DMD57DyT+Bib1aMXF/Ccc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687 (0x2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DA96DAF, serialNumber=8030777C74D1AF1289810E44F5FECC9CF0973A0E
Validity
Not Before: Jul 31 04:09:28 2025 GMT
Not After : Aug 2 04:09:28 2025 GMT
Subject: CN=688aec79-5609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:a2:29:aa:b6:15:93:b5:44:04:83:42:0c:
b1:6b:c1:de:bd:0c:74:9c:43:c1:e3:61:35:cb:a0:
67:a5:a2:bc:10:60:87:c5:79:ab:94:70:8a:6d:e0:
61:ff:83:e4:49:bf:9f:57:a9:44:4d:da:6a:36:4a:
ca:b1:54:d3:95:e2:ca:3c:16:14:72:88:58:b1:8e:
c4:d9:c3:13:52:9a:52:15:68:41:98:b8:f8:2f:e4:
81:d4:77:20:d3:0a:cc:7c:ec:1e:7f:48:04:5e:8b:
8c:27:26:ab:4f:24:79:aa:5f:34:e0:62:08:4a:52:
f8:6a:48:1b:cb:f0:98:3d:8e:09:0e:3f:b4:03:8f:
ac:73:8b:02:b4:4e:1e:67:fe:ea:8b:16:7d:5c:fe:
0d:92:68:fe:03:5a:95:89:8d:1e:b0:ca:10:86:e5:
34:7f:f1:92:64:69:c1:93:f2:4e:8c:fe:99:c1:6a:
0c:31:c1:7f:19:37:aa:3c:8f:df:33:41:11:8e:fb:
dd:93:3a:c3:90:a6:08:33:2d:97:a7:25:b1:f8:3a:
4b:6b:e1:b4:0d:80:38:b2:5c:1d:93:e1:b4:a2:d9:
46:28:bc:e1:09:46:77:8f:33:be:07:08:87:22:46:
8b:f5:31:ec:da:a8:88:11:09:d3:c0:bd:23:e8:86:
bc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:B9:5F:B5:5A:49:CB:AF:B3:22:54:0A:00:B4:10:43:DB:8A:19
X509v3 Authority Key Identifier:
keyid:80:30:77:7C:74:D1:AF:12:89:81:0E:44:F5:FE:CC:9C:F0:97:3A:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/790A042C66CD11EE953ED1704AD9E6FC/gDB3fHTRrxKJgQ5E9f7MnPCXOg4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:06:a1:8d:03:f6:be:1b:e7:d3:c4:11:8e:a7:7f:de:52:37:
5c:b3:fb:c9:b7:1e:22:6f:d7:c3:2e:07:c1:72:de:59:1f:0d:
f4:b6:67:20:ee:72:ff:35:0d:c3:ea:09:92:2a:f6:5a:0f:28:
e1:8b:33:28:e3:b9:4e:41:8e:da:6b:9a:d9:05:a7:23:1e:76:
56:e1:da:bf:db:a1:df:8b:ec:05:e5:31:80:d0:d7:d1:f8:80:
fc:2d:09:41:e3:f9:c3:75:9d:68:80:39:90:45:db:1e:c8:d3:
39:8e:7c:76:48:2a:bc:3e:2b:3f:48:28:6c:81:d9:a1:97:0a:
e1:ba:4d:66:42:7e:82:4d:32:20:d9:0a:b6:40:27:8c:8f:4e:
b0:81:45:ac:40:49:6e:ad:5a:f4:ab:bf:a5:c8:30:14:1b:45:
a1:5b:50:ab:1b:10:27:a9:5c:7f:e1:95:92:3c:95:e6:be:50:
d3:6e:86:3b:2d:f3:34:83:da:54:7f:d9:55:f7:22:5a:ff:17:
78:31:16:dd:6e:51:d0:0a:af:ae:e8:cc:07:6f:67:ae:c5:69:
68:f5:e5:03:de:32:dc:fb:56:77:2f:fb:37:fd:05:62:21:9a:
29:6c:09:29:7e:f0:27:34:9b:55:1f:0d:3c:c9:dc:83:71:29:
12:49:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:10 2025 by rpki-client