Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File: xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier: VQfVeF5i2qB8VGlY2LcKB4lZvKBiJEhl7qXIKLCpmJM=
Subject key identifier: 6D:50:B3:51:80:D0:02:4C:49:85:B0:7E:D0:07:B4:B9:4C:7D:08:03
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer: /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial: D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number: D4
Signing time: Mon 12 May 2025 05:00:23 +0000
Manifest this update: Mon 12 May 2025 05:00:23 +0000
Manifest next update: Wed 14 May 2025 05:00:23 +0000
Files and hashes: 1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: GeAhKwBjTUAFLfLCAte30mlMpfiBxGYnC/yo0PcwojY=)
2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Validity
Not Before: May 12 05:00:23 2025 GMT
Not After : May 14 05:00:23 2025 GMT
Subject: CN=68218067-54f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:d9:30:ce:cc:9f:33:f0:b0:04:86:71:98:
3d:92:73:06:a0:1f:09:e0:d5:89:e2:76:33:90:76:
a9:38:f8:dd:7f:87:08:6c:03:72:08:95:a3:22:ec:
be:cc:92:9a:66:c9:36:90:b6:d8:63:8d:7b:f1:39:
ba:9a:e0:29:4b:a6:8f:ba:dc:da:55:7e:3e:25:5d:
8a:2a:76:30:fa:ac:3f:b2:bf:15:ea:64:2c:52:37:
52:1b:d6:bd:d1:f6:6d:3e:7b:c0:bf:4c:f4:e2:d8:
43:e2:ed:77:af:3a:4b:f2:4f:b9:3a:69:2c:07:6c:
cb:55:fb:e4:44:8f:1e:f6:ba:a0:c0:a2:8c:e4:e5:
fe:f9:3c:bf:2b:dd:c7:da:e8:7e:b7:4b:da:7b:87:
03:6f:a3:08:8a:f3:2b:0e:1d:ed:b0:6e:f0:94:09:
ca:41:80:8c:9b:0b:06:8a:31:83:98:c7:57:8d:e8:
7e:d8:55:af:62:30:d8:d2:20:14:77:41:80:ef:21:
f8:63:78:30:f5:37:10:69:ff:5e:6f:2b:cc:cc:56:
b5:26:5f:b5:15:cb:bf:69:93:31:6d:12:a9:21:39:
8b:6b:6c:2f:b8:38:58:65:53:87:d8:56:3d:4f:1d:
a0:cf:5c:03:96:04:a5:33:e1:5d:7c:af:b9:4f:50:
6e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:50:B3:51:80:D0:02:4C:49:85:B0:7E:D0:07:B4:B9:4C:7D:08:03
X509v3 Authority Key Identifier:
keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
79:ca:e4:f0:5e:f4:ca:47:82:8e:8d:de:32:7c:2e:2b:02:d5:
0b:64:cc:fe:5e:63:77:c7:6a:6d:bb:1f:46:ec:2a:fa:2c:d8:
b0:ef:ea:be:3e:8c:5f:0f:7f:95:21:16:f5:96:72:37:65:d7:
f0:56:ac:88:e2:75:44:57:e6:8f:eb:4b:18:49:ce:39:3a:61:
bc:40:3a:4e:df:e7:50:b0:e4:5a:79:b6:2a:6a:0b:1c:3d:f4:
00:fc:26:68:7c:14:a7:74:2d:9e:b9:1e:5d:60:fe:a7:fc:fa:
ce:23:1b:85:6b:65:e4:9a:9d:33:d5:db:a2:cd:1b:dd:dc:3b:
e1:43:6b:ef:ce:bc:25:d7:40:ee:d6:6a:14:ae:2a:d6:f1:34:
c5:93:f8:75:b9:70:41:8e:bc:44:c4:dd:7a:2a:0d:90:98:7a:
64:86:71:de:b1:03:31:94:96:d0:78:1e:d1:95:64:a8:a6:1d:
01:80:c8:9c:f8:eb:eb:e0:a6:47:fb:5e:72:b5:1c:b9:bc:ec:
6c:29:a0:cd:8f:95:a3:54:22:c9:bb:c7:bd:21:7f:29:fc:5e:
e2:18:29:71:fc:73:a2:8f:02:1e:00:66:ac:9b:eb:d0:05:c4:
c1:91:b0:91:91:e2:ef:03:99:5e:a1:6c:1a:1e:d4:a5:28:79:
04:51:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:50:49 2025 by rpki-client