Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: /VARplMk2E4h5uxAQdAEqtYEg3zTENgRXk3g3pNANJ0=
Subject key identifier: B8:F4:36:7C:D9:1B:16:56:21:3E:16:3D:BC:1F:70:49:50:A1:48:93
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 021D
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 021C
Signing time: Tue 16 Sep 2025 04:10:23 +0000
Manifest this update: Tue 16 Sep 2025 04:10:22 +0000
Manifest next update: Thu 18 Sep 2025 04:10:22 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: 3MYL2tagW1nk993IPo5G65d5YPKvrGDUjjliMf4NM0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Sep 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 541 (0x21d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Sep 16 04:10:22 2025 GMT
Not After : Sep 18 04:10:22 2025 GMT
Subject: CN=68c8e32f-a731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:15:1b:1d:b5:be:a7:54:ae:c3:97:da:57:
3c:b3:47:77:52:97:7f:21:b3:fb:b8:26:8d:dc:54:
03:da:38:51:42:68:d6:93:d2:b3:95:b8:5b:87:f2:
c9:66:a9:e6:aa:0a:ed:98:53:28:4e:01:74:a5:35:
f5:58:df:e8:7d:84:c5:c9:b0:5c:67:f8:f4:3f:a8:
31:67:d5:a4:89:1d:1b:34:6b:b0:ba:7b:ae:47:a6:
f3:ab:9a:39:9c:b0:b5:ba:fc:33:d4:dd:f2:29:81:
90:ea:95:1c:07:6c:0b:43:fc:ee:9a:98:10:92:2c:
e3:d7:98:dd:8d:88:cb:12:0e:ce:72:83:5e:db:58:
4b:39:c7:86:a6:81:c4:92:1d:a2:06:5e:43:8f:ea:
19:25:80:22:34:5d:cb:44:41:98:17:d4:1f:74:82:
aa:6f:3c:2c:6e:8a:9d:75:90:8d:ad:27:6b:ca:1a:
c2:00:6f:db:2e:17:11:97:0d:b2:f4:0d:74:4d:ea:
85:2b:49:98:75:7a:6a:eb:3d:a9:a2:b4:02:a2:8d:
8b:d8:74:40:b0:36:10:a9:0c:b5:e3:95:c7:d6:da:
bc:61:76:7a:de:51:8c:28:b4:9c:a0:2f:99:df:2d:
68:f6:98:7f:73:03:74:68:be:53:2d:79:17:a2:81:
74:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F4:36:7C:D9:1B:16:56:21:3E:16:3D:BC:1F:70:49:50:A1:48:93
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:ff:3c:dc:3d:41:b7:04:82:eb:41:e2:aa:bc:80:20:9c:c5:
29:d5:d8:1c:d6:f4:39:60:6a:27:94:2c:88:a8:a0:fb:5c:3a:
17:b1:ec:eb:96:74:dd:43:25:7d:29:0d:9d:a3:c7:a9:0a:b7:
06:f7:f5:9a:ba:65:d4:7e:69:2f:8f:05:77:96:ba:ab:58:42:
18:49:70:b1:36:fb:40:95:d0:f1:d4:da:8f:35:30:49:af:43:
da:2b:49:90:a2:04:3b:01:5a:7e:ef:bc:db:81:fc:1a:ac:5d:
ee:94:42:c2:f1:39:46:e8:5f:28:86:ef:aa:67:79:d3:c3:8c:
50:a6:e5:65:9c:e1:69:6e:46:ae:c2:0c:8b:f7:2e:69:67:69:
9f:2c:1e:30:81:b0:ea:12:c7:f8:ee:15:88:c1:16:c4:09:d6:
4a:0b:15:2d:ba:cb:18:81:10:75:dd:e4:8b:27:79:e4:a5:aa:
eb:b7:44:49:f5:1e:49:33:10:9f:53:d8:ac:06:26:0c:93:c4:
c3:99:69:07:33:f1:f2:9e:16:b9:48:67:ca:f7:3c:46:6c:8e:
89:fa:64:d1:98:39:b3:01:4a:fc:40:5d:19:8d:bf:75:1f:62:
e6:8c:4e:a2:6a:1d:72:0a:0d:16:ed:1d:98:c3:72:de:ea:2d:
eb:68:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:14:43 2025 by rpki-client