
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
File: Rd8OHH-lNNrKIJKaup5jKPur-1E.mft (raw, json)
Hash identifier: Y1iSCRVJu0Rc+lPezTzrMcnBtf3UMFuhc/PBpuzYhoo=
Subject key identifier: 47:38:27:3B:AE:7B:C7:C0:E8:E6:AC:8F:62:14:02:04:35:F2:A8:58
Authority key identifier: 45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
Certificate issuer: /CN=F36EE1C1AF/serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Certificate serial: 0471
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
Manifest number: 0484
Signing time: Wed 17 Sep 2025 03:01:01 +0000
Manifest this update: Wed 17 Sep 2025 03:01:00 +0000
Manifest next update: Fri 19 Sep 2025 03:01:00 +0000
Files and hashes: 1: Rd8OHH-lNNrKIJKaup5jKPur-1E.crl (hash: 63goq6PX9FhYPjPEvBFu5yWI+l1feDtjhwt9+M0k5gw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1137 (0x471)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36EE1C1AF, serialNumber=45DF0E1C7FA534DACA20929ABA9E6328FBABFB51
Validity
Not Before: Sep 17 03:01:00 2025 GMT
Not After : Sep 19 03:01:00 2025 GMT
Subject: CN=68ca246d-3dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bc:5a:20:81:27:7a:28:e1:4b:32:17:40:da:
0f:d4:13:20:22:12:29:08:b6:a0:57:fe:fe:d3:e8:
0c:66:b5:d7:8b:27:1e:c0:e4:f2:43:55:3c:4c:fb:
a8:70:ba:7d:06:c2:1e:48:70:2f:a7:ae:bb:69:52:
e1:1f:56:9d:af:73:c8:95:ee:43:4b:ec:81:ea:94:
3e:ef:c1:d2:55:17:14:03:ec:a2:cf:d3:85:bc:2b:
09:c0:c9:43:23:39:6a:44:6d:f0:20:80:88:3d:f5:
90:9e:e9:e9:1a:91:b7:bc:15:25:bf:c7:b3:39:40:
ff:79:64:1f:43:09:4c:32:b9:bd:44:b2:7f:39:f8:
87:63:18:3f:c8:cb:06:8c:3a:e5:81:57:d8:d4:f3:
75:a8:4a:fb:0c:94:74:33:8a:b3:a5:f7:21:44:65:
d1:6c:2e:f6:1b:db:fb:08:46:81:8e:56:a3:43:04:
a6:30:63:4e:03:da:ea:3d:30:fd:2a:e3:df:f9:20:
ab:63:a3:1f:0f:d6:36:cb:e9:07:8e:18:1b:8a:83:
6a:2b:a2:39:94:6e:5b:13:72:08:58:3b:3e:e1:d0:
af:df:aa:5b:c7:09:32:de:ec:30:dd:7c:1a:4a:90:
35:93:3e:b2:3b:90:f7:dc:f6:f5:b6:2c:d2:7a:71:
8b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:38:27:3B:AE:7B:C7:C0:E8:E6:AC:8F:62:14:02:04:35:F2:A8:58
X509v3 Authority Key Identifier:
keyid:45:DF:0E:1C:7F:A5:34:DA:CA:20:92:9A:BA:9E:63:28:FB:AB:FB:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rd8OHH-lNNrKIJKaup5jKPur-1E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE1C1/050BE1D635B311ED9721E3F0F1222468/Rd8OHH-lNNrKIJKaup5jKPur-1E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:87:d6:e4:3a:6f:3c:c8:27:11:fe:38:a3:af:11:b9:f1:
66:17:5c:18:bc:fe:22:8e:3b:c1:c4:db:9e:1f:9b:1d:ae:62:
13:28:60:ef:54:84:7a:f9:8a:f8:fa:40:98:d4:f8:08:9c:3c:
96:c5:be:21:d4:41:c8:78:a6:77:f3:7d:21:9f:7d:d0:41:15:
d8:a7:e5:de:5d:9b:04:11:a0:73:ea:25:8a:fe:f1:4a:80:52:
ff:39:ec:02:ff:78:96:f8:8e:01:bd:63:fe:fa:5d:3e:6b:3e:
24:23:c8:16:c8:c2:f1:1f:1c:46:71:e1:2c:5a:17:ec:62:06:
ce:78:c7:e8:0d:59:30:05:7f:a2:f3:da:e5:0d:0a:04:85:55:
ea:09:5e:a0:f3:c5:34:f3:73:92:d5:cc:ae:f5:f0:1a:4d:85:
c4:8e:14:40:af:ec:7b:ec:8c:4c:8c:fe:46:4b:c6:45:fc:53:
c4:d4:eb:48:77:51:13:55:a6:34:6f:23:97:55:b9:88:9c:3c:
64:9c:84:ae:32:c1:ce:68:5e:13:18:df:a1:38:3f:70:30:68:
80:46:93:82:28:d6:ff:c1:aa:7e:6d:95:07:c6:f7:c3:53:0c:
56:77:df:eb:41:ec:1d:75:80:7f:b7:18:58:4f:ee:a1:0f:fc:
bb:83:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:27:27 2025 by rpki-client