Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: nlj75AgU8JGdImvLULrDL8/TgEHresRr++7pT2QBnXQ=
Subject key identifier: CE:A2:E4:43:D5:50:75:1F:D2:6B:50:71:EF:AF:52:FD:40:6A:AB:C3
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 01EE
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 01ED
Signing time: Thu 31 Jul 2025 04:36:00 +0000
Manifest this update: Thu 31 Jul 2025 04:35:59 +0000
Manifest next update: Sat 02 Aug 2025 04:35:59 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: hTLj99n1vKOqBm6RJGwV262rtD2W3rmyxGRoneOsJ+A=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 494 (0x1ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Jul 31 04:35:59 2025 GMT
Not After : Aug 2 04:35:59 2025 GMT
Subject: CN=688af2b0-c922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:61:08:8b:f1:1a:46:66:fb:0a:f4:1e:bc:
2d:20:46:a3:03:76:0b:ba:13:b9:a3:58:ff:70:e6:
80:5c:b2:27:34:04:8f:7a:ed:47:20:bb:af:4b:20:
b0:b4:98:6d:d3:bd:55:09:36:94:d5:2a:d3:9b:ad:
db:df:67:dc:b6:b3:5e:2c:e6:c4:fb:2c:75:97:f0:
87:88:4f:7c:51:c9:66:3d:36:ce:ee:60:e7:a8:0a:
74:41:3a:fb:f2:4b:d2:70:9c:9b:06:db:91:54:2a:
25:88:2b:11:da:c4:17:74:ee:c7:3d:cd:93:1c:bd:
85:22:b6:b8:3b:1f:b6:ca:74:2e:99:f9:a4:cf:f8:
b2:e0:cc:a7:d0:84:27:00:8c:53:8d:d6:06:e7:09:
b8:8c:31:6d:0a:48:b4:1c:eb:a8:aa:dd:f2:43:fd:
e3:72:7e:ee:76:7d:43:50:3c:88:89:02:b2:db:5d:
51:9d:1b:5f:b6:33:a7:0f:e2:a8:a1:79:b2:68:a1:
a4:88:3e:bf:46:20:d5:82:8d:3d:63:39:39:4c:1a:
88:88:41:88:04:bb:03:0e:c2:e8:26:ae:cb:c1:00:
11:16:47:1d:84:79:9d:c9:b9:4a:6a:2a:51:9f:a6:
8e:90:69:9f:00:30:43:8c:a8:7e:10:3c:7b:67:98:
14:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:E4:43:D5:50:75:1F:D2:6B:50:71:EF:AF:52:FD:40:6A:AB:C3
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:24:b3:b3:0d:e0:5f:ec:f5:b1:7d:54:20:1d:f2:9a:63:
a7:97:41:4a:c7:4a:ad:16:1f:c8:80:e6:59:8a:8a:93:c2:c2:
24:12:2e:9a:21:9b:5e:a6:2e:30:da:67:b6:bd:05:7d:be:c6:
f2:36:9b:43:83:e3:3b:6a:31:7c:ef:72:f7:a9:fa:55:4f:77:
e1:0a:97:09:c3:ed:33:1c:80:10:73:81:a5:2e:45:21:e5:55:
56:ae:9f:d0:1f:40:62:0c:b0:3c:0f:b0:dd:74:9e:e2:ba:5f:
ee:dd:64:57:5b:07:63:69:c2:53:3b:bf:75:10:d7:39:42:23:
e2:5b:66:a1:7c:3d:cf:2b:21:c4:5d:95:a7:79:2b:9c:f1:4b:
a1:32:52:f7:d6:4b:7a:19:7b:a7:06:33:3c:c8:57:6a:91:44:
08:cc:4f:8c:e9:83:16:47:7e:4d:46:20:da:c8:ef:89:1e:72:
7e:2e:cf:ef:37:d5:ba:b9:24:ac:f6:b7:b2:dc:5e:97:ed:8e:
4a:da:d8:bf:c4:e0:35:3c:bc:f1:b0:cc:6b:e5:50:0d:10:bc:
b9:1b:cb:5d:00:1b:eb:72:d0:d1:54:ac:33:cf:24:72:b5:7d:
1c:d4:84:f8:1f:3a:63:14:df:5a:8c:af:8b:99:79:4a:e7:82:
0d:5b:2c:52
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJDNEJBUjExMC8GA1UEBRMoRTEzMUI2RDRGOUMzNDFBQjVDOTEwNkZBNzhBNjlD
OUI4ODA5MkIwRjAeFw0yNTA3MzEwNDM1NTlaFw0yNTA4MDIwNDM1NTlaMBgxFjAU
BgNVBAMTDTY4OGFmMmIwLWM5MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNV2EIi/EaRmb7CvQevC0gRqMDdgu6E7mjWP9w5oBcsic0BI967Ucgu69L
ILC0mG3TvVUJNpTVKtObrdvfZ9y2s14s5sT7LHWX8IeIT3xRyWY9Ns7uYOeoCnRB
OvvyS9JwnJsG25FUKiWIKxHaxBd07sc9zZMcvYUitrg7H7bKdC6Z+aTP+LLgzKfQ
hCcAjFON1gbnCbiMMW0KSLQc66iq3fJD/eNyfu52fUNQPIiJArLbXVGdG1+2M6cP
4qihebJooaSIPr9GINWCjT1jOTlMGoiIQYgEuwMOwugmrsvBABEWRx2EeZ3JuUpq
KlGfpo6QaZ8AMEOMqH4QPHtnmBQRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzqLk
Q9VQdR/Sa1Bx769S/UBqq8MwHwYDVR0jBBgwFoAU4TG21PnDQatckQb6eKacm4gJ
Kw8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQzRCLzM1ODEwM0FFRjhBOTExRUU5NkQxQkYwRjAxNzAwMUIxLzRURzIx
UG5EUWF0Y2tRYjZlS2FjbTRnSkt3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzRURzIxUG5EUWF0Y2tRYjZlS2FjbTRnSkt3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2REJDNEIvMzU4MTAzQUVGOEE5MTFFRTk2RDFCRjBGMDE3MDAx
QjEvNFRHMjFQbkRRYXRja1FiNmVLYWNtNGdKS3c4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+LySzsw3gX+z1sX1UIB3ymmOnl0FKx0qt
Fh/IgOZZioqTwsIkEi6aIZtepi4w2me2vQV9vsbyNptDg+M7ajF873L3qfpVT3fh
CpcJw+0zHIAQc4GlLkUh5VVWrp/QH0BiDLA8D7DddJ7iul/u3WRXWwdjacJTO791
ENc5QiPiW2ahfD3PKyHEXZWneSuc8UuhMlL31kt6GXunBjM8yFdqkUQIzE+M6YMW
R35NRiDayO+JHnJ+Ls/vN9W6uSSs9rey3F6X7Y5K2ti/xOA1PLzxsMxr5VANELy5
G8tdABvrctDRVKwzzyRytX0c1IT4HzpjFN9ajK+LmXlK54INWyxS
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:52:05 2025 by rpki-client