Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File: XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier: dULMKB8QEWB0+5e+uqNUQTNrCnaCU3vxbFGeXW8D5Rg=
Subject key identifier: 64:AC:3A:97:E3:CE:73:8A:08:93:03:2F:8D:00:07:A9:4E:FD:84:7E
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer: /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial: 045B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number: 0459
Signing time: Mon 30 Jun 2025 03:07:11 +0000
Manifest this update: Mon 30 Jun 2025 03:07:10 +0000
Manifest next update: Wed 02 Jul 2025 03:07:10 +0000
Files and hashes: 1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: SqnVocxADTiee4UyudVb6o6KkhNjmmKpJM9vH8daz4g=)
2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Validity
Not Before: Jun 30 03:07:10 2025 GMT
Not After : Jul 2 03:07:10 2025 GMT
Subject: CN=6861ff5f-6273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:e8:de:68:25:29:38:c5:29:73:4a:19:f2:
62:28:e3:a6:05:e5:39:56:00:47:06:71:ca:c3:62:
5c:72:a8:3d:1e:72:56:21:e2:59:68:d1:7a:c9:76:
ed:fd:a9:c5:98:e5:a4:17:e5:e9:6f:7b:08:71:06:
0b:85:9c:c2:a2:f0:b3:bc:e6:6b:12:94:3b:00:5e:
51:60:5e:9e:fa:2d:b1:8a:93:b2:3c:ce:58:d2:d4:
7a:02:f7:83:65:c9:71:7c:42:fc:d9:22:f5:43:23:
8a:9a:94:cb:ec:d6:e3:21:92:0d:f7:71:dc:ca:41:
55:85:60:42:b9:40:91:ed:48:63:a6:81:e2:a4:2f:
3e:c4:58:e7:84:aa:ad:09:09:62:42:9e:14:1c:4c:
26:42:ca:4a:89:03:8a:d7:90:23:07:68:b8:e4:97:
db:3b:90:84:65:62:f8:68:df:e1:20:cd:26:48:94:
d1:b1:10:23:95:f9:3e:60:dc:4e:78:28:cf:fe:a2:
4d:a7:bb:0a:91:f8:88:53:8a:6e:02:6f:0d:39:b1:
df:f6:56:f0:5b:61:4f:be:96:f5:19:8a:67:2b:fa:
36:63:13:8b:8b:bb:33:ba:b9:cc:95:0e:05:51:75:
3d:5e:cc:30:f4:31:e0:9e:08:a5:79:92:c0:33:52:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:3A:97:E3:CE:73:8A:08:93:03:2F:8D:00:07:A9:4E:FD:84:7E
X509v3 Authority Key Identifier:
keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d3:b4:be:4e:20:fd:1c:4d:f1:c0:7e:58:35:91:4f:36:3e:
5e:be:53:3d:a8:fb:6d:f4:bf:ad:6c:40:2d:69:fc:f2:68:84:
51:56:a4:49:16:0b:0a:13:57:4a:8e:4a:0c:c2:b7:07:5e:65:
f0:b5:7e:6e:ca:df:dc:8a:ef:bb:31:39:e2:f6:2e:d4:94:e7:
6b:8d:03:0e:f2:5e:87:54:8b:0b:25:3b:58:3f:8e:15:19:f7:
d1:62:d9:93:cd:7f:0a:8c:08:d5:1b:ca:1f:0d:62:07:8c:f0:
7d:de:6f:9e:44:f7:52:39:9e:b8:33:7a:71:23:0f:67:4b:ee:
d5:d2:b5:2b:10:5c:9f:db:7f:d2:95:48:91:f0:a7:d8:98:d2:
a4:0f:a6:37:cc:5c:e7:1c:cc:86:fd:53:84:fc:24:ae:81:9f:
f7:60:f9:b0:3e:d0:09:ad:0d:6f:7a:6a:1c:6a:54:a0:18:17:
2c:58:c5:89:e8:0d:2d:6b:b4:98:93:e9:4b:7c:97:85:d7:f6:
8c:69:da:31:c2:17:57:4c:7c:99:27:88:00:11:d9:3f:3e:1f:
1c:66:9f:d5:8e:ba:ff:03:c9:48:4c:33:7b:85:d4:7c:db:5f:
ea:74:9b:51:58:7c:fd:b6:7e:37:6e:2a:bd:19:dd:82:88:9b:
c5:45:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:58:13 2025 by rpki-client