Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier: 9AQEFg1vk9L6FRo2k6m63qdSFE8Sj7jbKnnNX+dO854=
Subject key identifier: 89:4B:27:B0:BF:D4:47:BA:FE:D4:59:5F:72:45:A5:F9:65:55:EB:A4
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer: /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial: 0436
Authority info access: rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number: 0435
Signing time: Sun 27 Jul 2025 03:15:30 +0000
Manifest this update: Sun 27 Jul 2025 03:15:30 +0000
Manifest next update: Tue 29 Jul 2025 03:15:30 +0000
Files and hashes: 1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: JvgZ6kYEL+sH5xtzqoIaWbl3RxIbbtwjIydFN376cNo=)
2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Validity
Not Before: Jul 27 03:15:30 2025 GMT
Not After : Jul 29 03:15:30 2025 GMT
Subject: CN=688599d2-136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:32:9a:2c:4d:c4:0b:d4:09:65:0f:87:b7:
6e:90:9e:ae:4c:35:42:af:b7:aa:5e:72:fc:60:64:
38:42:1f:40:62:57:fc:91:34:ce:b4:63:72:f6:53:
a0:05:7e:69:a0:ef:46:27:a0:57:cc:fb:c0:22:69:
e9:c2:e6:bb:b8:6c:b2:1a:e7:d9:2e:a7:75:44:d1:
84:ce:ec:16:87:f0:41:39:b5:e5:01:cf:70:f7:f1:
03:2b:72:30:15:59:6a:35:d5:2c:85:9d:f3:3b:97:
ac:9f:c8:ac:f9:c0:ed:1b:22:6b:aa:51:91:7f:e1:
34:d5:1c:00:40:1c:a9:81:7b:9a:b1:ee:fe:cc:ef:
d5:f8:92:9f:9f:e0:7c:b8:46:b0:b5:05:ba:e6:a6:
6e:69:9a:16:52:09:0d:a3:c8:1a:a6:bb:9e:1a:53:
77:5b:6a:57:02:b2:c8:2b:b8:5b:70:1b:aa:26:25:
95:b5:7b:57:70:91:35:72:0e:e3:65:af:ae:a0:ab:
88:ff:cc:e0:ce:f7:1b:76:82:35:fd:ef:da:7d:18:
69:e3:3a:0b:fd:8c:53:99:02:f3:0e:c1:22:dc:ee:
ed:78:d0:f8:50:d9:95:6f:58:0d:58:04:cb:d3:fd:
61:35:74:81:77:5c:ed:1b:32:6b:07:cc:fc:a0:c8:
4e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:4B:27:B0:BF:D4:47:BA:FE:D4:59:5F:72:45:A5:F9:65:55:EB:A4
X509v3 Authority Key Identifier:
keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:72:ec:11:48:e1:99:a3:db:f7:af:99:5d:10:ad:5d:f2:
e7:c5:27:90:b5:a8:39:55:21:17:ff:fd:7c:47:a4:89:e4:8b:
46:44:ae:27:10:5b:96:d9:0e:db:af:5f:4e:81:ba:d7:74:69:
81:88:b5:f4:02:a3:01:1f:e4:71:1d:d3:df:7c:8a:0f:cd:1d:
6b:7f:c4:db:cd:a7:97:1e:ba:33:06:60:fa:cf:ee:a5:17:fb:
bd:4d:fd:cd:04:de:56:42:5a:00:0f:40:1a:73:b2:b0:c5:66:
20:75:61:fe:83:fe:28:b9:44:6f:4d:1f:08:f8:1b:9d:64:00:
7c:a4:af:c7:3d:81:a4:1d:63:ad:01:34:71:5f:8b:15:c3:1e:
ff:0c:ff:1f:cc:bc:bc:0a:31:b5:66:b9:17:10:e2:f3:aa:d0:
2f:02:c5:16:47:b6:21:39:4a:8a:da:85:1e:78:6d:a7:f5:2c:
0f:fd:1a:ff:ff:eb:2a:b2:1b:84:e7:d1:5c:cf:a1:f1:e0:72:
0f:8f:6f:67:3c:e3:7f:76:0d:53:21:39:ed:fe:8f:35:5b:9a:
94:de:0f:45:d8:bf:2b:f4:02:12:52:5d:3b:8c:02:71:ed:7a:
e0:4d:0d:ed:bb:9c:fa:6b:75:fc:35:c2:b0:45:11:36:d9:d3:
57:1f:59:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:16:21 2025 by rpki-client