Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: YJcR/FgiCwGp39igcNXI//Jjix9rT56lsGvnjWLzxzg=
Subject key identifier: FE:B3:EC:22:B1:94:78:51:EC:A1:27:08:6F:0B:C1:FC:34:29:17:4E
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 04E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 04E8
Signing time: Sat 23 Aug 2025 02:51:07 +0000
Manifest this update: Sat 23 Aug 2025 02:51:07 +0000
Manifest next update: Mon 25 Aug 2025 02:51:07 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: Mifa0XQ5k+7OJafkr7ZnTsIQWIGjvQGR8bdUEcKrkmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Validity
Not Before: Aug 23 02:51:07 2025 GMT
Not After : Aug 25 02:51:07 2025 GMT
Subject: CN=68a92c9b-c1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:69:fe:9f:c0:84:43:3f:ed:59:ac:4e:ce:df:
68:3a:29:5c:56:18:7a:43:60:0c:a3:f7:b1:27:96:
db:b1:50:6d:1a:e9:ea:8e:43:8d:f8:ae:16:43:47:
77:95:4f:af:94:f8:f5:3b:be:82:8c:e2:48:c3:59:
7a:a6:ec:1b:35:14:0a:e5:63:7b:7b:d4:9a:1a:f7:
80:bb:ff:9a:1b:7b:fc:8c:c8:00:f6:12:99:41:a6:
d2:f0:57:f6:d3:c0:2a:65:28:b6:22:13:5c:df:8d:
17:b1:db:09:26:2e:15:e4:c2:29:d5:9b:45:b5:9d:
89:aa:36:c8:10:81:2a:1c:39:60:b8:dc:5c:61:4b:
05:06:c0:8b:67:e3:76:29:a1:8b:4f:5e:e7:2d:c3:
f8:04:a8:f0:9a:a5:93:9a:a5:99:c8:d4:61:fe:c1:
8a:a6:d8:ab:8e:23:a6:80:93:3a:7e:8c:dc:7a:ff:
ef:cd:80:8c:2e:32:06:d3:a9:7c:0d:01:67:db:7d:
9c:f5:5d:33:94:c8:df:6b:3a:3e:e0:a3:b9:bf:1c:
63:b4:2a:5f:dc:a8:a7:f8:a9:7b:48:02:6f:b5:78:
05:37:27:ae:7b:64:b7:67:61:d2:6b:89:74:26:19:
a6:74:23:66:79:c6:40:a1:56:2c:7c:23:07:2d:b9:
5b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B3:EC:22:B1:94:78:51:EC:A1:27:08:6F:0B:C1:FC:34:29:17:4E
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7a:f4:21:e1:f8:a4:24:74:21:26:cc:b7:33:3d:20:10:c6:
2f:c2:ef:02:a1:f5:2f:5a:28:13:1a:7f:22:f5:9e:52:00:da:
99:30:36:90:e4:a1:fc:72:74:02:ac:5d:3c:5a:8f:cc:0f:8c:
18:d6:a5:cf:69:71:e3:41:1b:b9:de:22:e3:9b:08:50:bd:08:
90:59:ca:9d:2b:92:8f:6f:87:d0:34:42:c8:ff:01:30:12:56:
7c:a8:fe:8f:e7:7f:69:6b:ef:99:d0:7d:d1:6a:ea:fd:ab:54:
a0:3d:76:80:da:66:9c:b7:58:16:cf:14:89:70:70:b4:4b:1d:
9b:fa:65:f4:7e:e8:79:37:3a:b7:b8:4d:eb:90:05:9d:4f:cc:
ae:20:fb:ef:b6:10:a8:97:97:0c:c1:27:74:ed:a6:b9:91:9a:
57:f6:11:81:e5:56:20:60:45:e0:d5:ed:10:6a:d6:bf:10:c2:
33:c3:67:9b:4e:8b:32:ee:60:1e:c3:8f:a9:21:2b:a5:17:60:
e4:e2:ee:f9:1b:f0:7e:57:38:ac:0c:e2:f8:1d:0f:c2:4d:b4:
1e:f2:68:4c:af:92:08:e4:8b:e7:d4:48:09:29:19:45:e5:76:
1c:1b:2f:7c:96:54:f4:be:5e:e7:a6:8b:66:b3:d6:75:97:a0:
c8:e5:26:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:21 2025 by rpki-client