Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File: z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier: F83zj9TuKTWxnxhP/jH/qdNw+dqdgSD0kCr7z763jCo=
Subject key identifier: 8E:18:04:4A:ED:49:D6:0E:F5:7A:CC:A3:61:02:05:9E:C8:AA:21:47
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer: /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial: 0DEA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number: 0DE7
Signing time: Sun 27 Jul 2025 01:01:38 +0000
Manifest this update: Sun 27 Jul 2025 01:01:37 +0000
Manifest next update: Tue 29 Jul 2025 01:01:37 +0000
Files and hashes: 1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: B+0eLliSOh/eJAjDWLItnycHeVapMX+/mTgqjpBL5D0=)
2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Validity
Not Before: Jul 27 01:01:37 2025 GMT
Not After : Jul 29 01:01:37 2025 GMT
Subject: CN=68857a72-d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:f8:20:a4:54:8c:62:19:60:fd:4a:a1:7d:
6d:42:7d:38:0f:1e:4c:b2:c3:ee:3a:a7:32:2f:d4:
f5:f0:5c:0f:68:c1:21:5f:26:a8:5b:17:7f:a1:6a:
59:d9:5a:78:3e:2b:1c:32:e2:a5:db:de:93:36:db:
06:dc:a2:44:22:0f:90:e4:97:8c:d7:61:50:5c:f5:
d8:39:60:5c:70:af:b2:4d:eb:6d:15:05:7d:6b:c2:
23:bf:e4:8f:20:ca:0a:c7:3b:32:84:15:31:04:f9:
13:67:95:03:f8:86:ef:83:0e:72:4c:ad:87:ba:b6:
4b:94:24:9e:1f:67:4a:15:7b:46:8c:53:3c:e9:17:
f6:53:f6:00:f1:7b:20:1a:6e:82:9b:33:1a:ac:da:
a1:df:1a:44:61:a5:6b:b1:04:ea:96:ea:5f:ae:f1:
a3:0e:17:22:26:ab:60:15:f3:57:c5:55:5d:63:05:
ea:c9:3c:08:16:b0:c2:75:4a:c2:32:d9:b6:a9:55:
9a:49:35:5b:6b:97:50:1c:11:b6:71:78:4f:bf:bf:
5e:f8:2e:24:0a:80:dc:e9:e3:57:71:c3:96:23:29:
87:06:a7:40:f1:be:66:ca:55:0a:26:b4:8a:04:36:
d2:5b:72:e9:d7:ea:5d:f6:f4:ca:da:ba:21:61:79:
aa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:18:04:4A:ED:49:D6:0E:F5:7A:CC:A3:61:02:05:9E:C8:AA:21:47
X509v3 Authority Key Identifier:
keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:93:bf:ae:dc:20:e0:20:84:12:36:de:97:5e:61:31:7f:e2:
16:11:29:48:9d:30:f6:e4:8a:f6:3e:ec:ac:87:4f:91:22:34:
86:ae:68:d8:7c:bb:21:d6:d8:b8:c6:e4:7c:4b:f4:c8:2c:93:
e3:ac:9a:1a:d5:e8:fa:0f:27:96:ed:5c:7c:ad:dc:22:9d:d4:
75:ae:fd:29:17:12:4f:08:64:4c:b2:d1:7f:1c:f7:f2:dc:77:
40:ef:3f:98:59:47:8a:57:53:cd:0f:b5:aa:c0:96:b0:1b:54:
69:c2:ca:73:a0:64:39:5b:62:51:5a:1f:a0:1b:99:d6:b0:df:
42:75:93:9c:63:ca:3e:0c:cf:27:26:34:36:8b:a5:aa:99:83:
8d:26:bd:49:cd:56:79:3f:2a:fc:98:cb:e4:fe:8d:d8:80:ae:
dd:e1:58:b7:57:cc:bb:e3:15:6c:4e:9e:aa:4b:8f:66:97:d1:
ac:15:18:49:44:2c:0b:4e:d9:0b:48:62:f6:05:6c:e0:f7:74:
e7:00:14:3a:c7:09:16:1d:35:dc:6c:75:f7:00:39:1b:40:6a:
55:88:ae:ef:dc:30:f5:03:4a:61:bb:d8:2a:92:f1:1e:b6:15:
aa:fa:f3:dd:59:72:17:08:a1:74:92:9d:99:bd:6a:7e:cc:c0:
c5:15:a1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:00:27 2025 by rpki-client