Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File: qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier: KDjTcEmcLClG2be6vfq8RqjBNmSAYNKoQmV5+zJj3PY=
Subject key identifier: B5:AE:EB:AD:F6:46:F1:1C:58:89:C3:AA:20:1B:36:8F:66:E7:D5:1B
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer: /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial: 05DE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number: 05DC
Signing time: Sun 27 Jul 2025 02:28:32 +0000
Manifest this update: Sun 27 Jul 2025 02:28:31 +0000
Manifest next update: Tue 29 Jul 2025 02:28:31 +0000
Files and hashes: 1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: 89lxNFz0qyuOb0fhK7ZrsbTn/PkBDA6QlMRqgYl76sY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Validity
Not Before: Jul 27 02:28:31 2025 GMT
Not After : Jul 29 02:28:31 2025 GMT
Subject: CN=68858ed0-69e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:0c:60:06:a2:c4:6d:72:9f:fd:c2:08:4c:
8f:20:79:ac:fa:78:64:63:a0:81:ed:e0:9d:12:4c:
f0:4b:88:cb:19:90:7f:68:b5:6f:39:b0:78:57:ec:
29:58:c7:a9:31:c5:84:0e:bb:21:ef:29:14:27:6e:
0d:94:06:80:f5:f0:c5:fc:bb:ce:7d:1a:42:34:69:
16:84:c4:54:8b:bb:c2:35:44:35:86:f9:39:b4:51:
a6:65:95:af:df:b6:1b:b9:48:3d:56:3a:a1:f0:33:
40:22:62:c6:61:51:e5:e1:2b:b1:9d:99:9b:eb:e2:
b5:52:49:3f:42:1e:e9:19:ec:51:4d:49:2f:4a:f1:
fb:f7:03:fd:c8:81:cd:2d:6d:82:e1:61:f5:11:ac:
4c:f5:7d:d1:11:57:54:59:e4:46:9d:e8:6f:45:58:
73:f1:73:8b:27:74:5e:dc:52:21:eb:d0:b1:ee:9b:
91:7e:ea:93:c5:ca:f9:0d:3d:63:8d:08:30:33:55:
d1:b0:f1:6b:ae:07:d3:23:f8:c9:59:fd:e6:5b:40:
3a:22:67:6e:5c:65:77:5a:3c:1a:56:c6:1f:9b:82:
ee:89:b9:0e:08:ad:16:af:98:8f:be:9c:09:2a:b0:
c2:c2:22:38:2f:40:e4:07:df:f4:45:f8:a7:aa:23:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:EB:AD:F6:46:F1:1C:58:89:C3:AA:20:1B:36:8F:66:E7:D5:1B
X509v3 Authority Key Identifier:
keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f1:88:12:87:11:c5:1e:19:c8:cf:3d:c1:36:2d:d4:95:b1:
7d:89:0a:92:bb:1d:1a:fc:29:72:7b:bb:3d:45:85:32:4d:d0:
79:9b:31:8c:1c:44:a3:39:9a:f5:77:7f:c9:6c:b0:cc:70:04:
2f:99:96:7e:e4:c7:3c:42:95:d3:97:1b:54:bd:f7:5c:16:19:
fa:41:27:1e:83:d8:88:dd:a6:6e:41:c7:9f:e8:0f:c9:b6:a7:
7e:64:bf:1d:a9:50:40:35:17:7f:60:80:dc:2a:71:c9:db:10:
b1:d9:d0:d6:f8:ee:1f:16:81:1a:d6:32:88:e2:5d:46:b1:cf:
a9:a3:ab:c2:f7:83:3e:1e:d0:71:db:bf:60:60:71:91:b0:a2:
68:02:be:41:c1:f5:eb:7a:a7:10:67:67:6a:f9:15:3e:cd:c7:
30:b8:5c:ae:22:80:d3:09:d6:61:0c:b3:5d:be:ce:15:b7:0f:
ec:63:bd:55:b3:42:44:ab:3a:c3:39:2b:cc:de:34:ed:85:97:
34:11:f5:0c:87:71:07:32:78:4f:ee:c3:92:73:ae:da:ae:3d:
ef:37:a9:18:e4:39:ca:c1:33:6c:ef:2e:ae:5a:96:49:6e:7c:
ea:ca:18:ad:7c:4a:a9:cd:22:cc:b7:ad:8e:87:2b:d8:39:22:
e2:fb:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:47:59 2025 by rpki-client