Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File: r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier: iG9G2uWYmG8G1X9FPKRB7pMt9Y5H11qiShFs+AE7xHI=
Subject key identifier: AD:D8:33:C7:29:64:F6:5C:F6:FB:39:12:DF:FC:2C:87:C8:67:55:A0
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer: /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial: 01CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number: 01C7
Signing time: Thu 18 Sep 2025 04:19:10 +0000
Manifest this update: Thu 18 Sep 2025 04:19:09 +0000
Manifest next update: Sat 20 Sep 2025 04:19:09 +0000
Files and hashes: 1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: 3Ma/lrUVLvbAzstDuAOEY1AZA7uMArxmuu2cCxS8gTM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Sep 2025 00:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 459 (0x1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Validity
Not Before: Sep 18 04:19:09 2025 GMT
Not After : Sep 20 04:19:09 2025 GMT
Subject: CN=68cb883e-fe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a3:92:d4:6e:55:6c:7d:5b:b1:61:2d:9d:4a:
ed:0d:98:d8:0b:75:84:dc:5a:ae:68:93:b7:e3:26:
7c:80:65:ae:9d:b6:aa:12:4e:98:7c:c5:46:44:78:
6d:e8:b7:ee:ab:52:3f:cb:b0:4a:41:fa:ae:42:9f:
87:06:cc:81:7f:c2:74:30:00:7b:8b:49:4b:f3:f8:
d8:32:46:13:d9:8a:15:83:27:e1:4b:74:b6:76:aa:
e0:1a:73:3d:6b:80:b8:cd:18:a9:0f:2b:c2:5d:24:
a9:bd:f3:e6:d6:34:60:5c:20:34:b8:1d:8a:9c:8e:
98:d8:8a:01:b1:f9:5f:cc:72:57:39:1e:1d:ac:81:
36:17:7d:4a:7d:5d:4e:87:4b:c9:42:1b:5f:c8:b3:
54:aa:dd:f3:b7:96:50:27:af:63:f0:e8:e7:51:f2:
4f:cd:52:0a:0d:5e:25:6a:66:99:7c:46:6a:51:b3:
53:02:97:e4:18:70:2c:9c:2f:2a:62:83:eb:3f:b2:
a6:9b:54:63:4b:d9:78:ac:ef:7a:18:0d:ab:08:54:
f1:97:6d:4b:13:50:b8:05:36:78:dc:f3:2e:e7:6b:
9b:3d:97:31:b1:da:9b:bb:cb:06:b2:aa:ec:71:f8:
7b:da:09:7c:6b:bf:17:f7:0c:d6:eb:d0:09:54:36:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D8:33:C7:29:64:F6:5C:F6:FB:39:12:DF:FC:2C:87:C8:67:55:A0
X509v3 Authority Key Identifier:
keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
95:78:43:ae:9e:da:66:14:74:00:81:34:f6:57:40:23:fd:b3:
dc:7a:e8:51:19:cc:a2:0f:e2:25:10:1c:65:4a:95:32:52:59:
ce:a7:3e:f8:c4:10:8f:d3:09:9f:23:05:9e:1d:95:fa:55:48:
40:ed:4b:d2:fa:b3:98:bb:98:d7:74:ed:5d:92:f1:79:03:2a:
5f:9e:a0:99:2d:12:8a:ec:dc:9c:82:8d:75:7d:a9:16:80:1a:
23:e5:0e:73:6e:4f:81:70:37:52:7c:6d:bf:29:e1:dc:d8:33:
26:5c:c5:a4:c2:3e:32:04:0b:06:d6:f8:40:f3:c7:8b:b0:1a:
ef:71:e2:1f:21:09:57:77:3c:f9:99:42:d6:3d:e1:26:8f:a5:
2e:4e:0c:e8:70:55:a7:13:d7:ce:a0:75:eb:d2:26:bb:36:0e:
75:ea:36:93:c3:bc:ca:12:83:9e:c0:eb:c6:bd:42:96:dd:9f:
96:6c:28:b2:e5:e6:56:2e:64:0b:9b:7b:be:4f:66:ec:e3:14:
5e:e0:00:65:77:ab:98:0c:d0:ce:9a:1b:70:81:bd:45:3a:ec:
58:ea:12:a7:a7:70:8e:b4:0b:fd:9e:df:a3:7d:96:ac:6b:22:
a5:25:d6:9a:0a:97:0d:e2:57:3f:c6:da:6a:9d:fb:4c:35:35:
65:00:d0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:00:53 2025 by rpki-client