Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File: JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier: zR5xgW39K17L+WH0qGXmAfNfClleDjIStyvxsTcHdEM=
Subject key identifier: EF:F9:71:5D:97:E8:02:4B:E1:ED:68:BC:21:EE:0C:69:40:95:17:97
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer: /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial: 0234
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number: 0232
Signing time: Thu 31 Jul 2025 04:27:44 +0000
Manifest this update: Thu 31 Jul 2025 04:27:44 +0000
Manifest next update: Sat 02 Aug 2025 04:27:44 +0000
Files and hashes: 1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: Gf6ll1Gm3XVkL2DF/Cjiw3ZFD5+f2oob7KZgOQ1zbis=)
2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 564 (0x234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Validity
Not Before: Jul 31 04:27:44 2025 GMT
Not After : Aug 2 04:27:44 2025 GMT
Subject: CN=688af0c0-7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:6f:72:1c:ca:26:bf:9c:6a:76:3e:73:1a:
c1:1d:34:b0:ef:62:ad:c0:d5:cc:71:1b:27:2e:d9:
32:22:05:e6:b2:71:55:1b:e9:4a:8b:11:fa:33:46:
a0:d3:63:e9:4c:70:b5:50:14:51:3a:46:6d:72:54:
ae:34:c1:aa:76:0c:d2:03:5f:70:a2:42:4d:10:c3:
5f:49:fd:1c:5b:39:66:1c:43:97:55:6b:64:6a:1b:
d6:16:ed:1e:6c:2d:61:43:02:ee:33:75:b4:db:df:
08:46:d6:c8:59:a4:00:ac:b1:93:1f:42:95:f8:1f:
ff:c3:ac:7c:37:63:9b:82:62:d9:87:d6:66:96:e3:
4b:b9:f1:56:f1:6e:6e:de:23:2c:28:7d:58:0f:64:
31:2e:46:69:26:5f:98:e4:03:67:d9:6f:26:ef:13:
3f:73:ab:dc:dd:0c:de:ec:85:48:7d:eb:83:27:b5:
35:5f:64:01:9b:f4:6c:94:95:65:d1:62:15:8c:1c:
5d:ae:af:91:83:f9:17:ec:0e:a5:00:44:2e:9b:4e:
92:ff:24:b2:eb:6b:0b:05:10:e5:2a:63:c3:7f:2d:
54:70:f1:25:9d:89:ee:f3:8d:49:30:39:68:fd:b9:
8c:61:5f:f1:18:3d:ce:91:e6:71:a9:10:b5:06:d3:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:71:5D:97:E8:02:4B:E1:ED:68:BC:21:EE:0C:69:40:95:17:97
X509v3 Authority Key Identifier:
keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:11:12:29:39:3d:34:92:32:a5:21:4d:71:01:71:4d:03:39:
c7:d3:7f:a7:6e:98:7e:ae:f6:f4:4a:9c:1e:1a:cb:0c:84:37:
45:21:78:f3:76:6f:c8:f7:c6:9c:d2:e9:0a:28:38:d1:96:57:
af:e2:ca:3e:bd:e5:9f:44:88:25:21:c1:e1:87:9e:30:8f:4f:
86:d8:d2:b3:c7:4f:a5:7b:a6:75:e0:99:9f:a8:aa:86:e5:43:
de:4c:9b:39:a6:83:bd:ce:43:34:52:fa:39:98:a5:2d:9e:5b:
f5:b4:5e:2e:f3:bc:47:8e:a1:0e:8f:38:37:32:2a:9b:04:67:
35:e6:51:1c:83:98:cc:1b:01:6c:1b:79:92:ed:59:11:a2:65:
3c:03:91:3a:b0:3c:b2:60:f4:25:38:a3:47:49:13:62:6d:0e:
25:f2:46:7e:7a:d8:fc:4a:45:28:59:84:58:a4:36:4d:59:21:
53:85:46:3c:85:60:ae:d5:e7:fc:99:f7:37:fa:16:8a:64:b6:
28:92:89:e1:c7:b9:23:26:28:14:91:d9:e2:cb:23:f4:25:25:
95:5c:6c:70:5a:83:47:e7:e0:78:80:9d:a0:ab:db:24:42:7d:
e3:7a:8b:34:aa:9a:4f:69:ca:d1:63:72:ad:97:97:09:aa:72:
f1:41:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:27:37 2025 by rpki-client