Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: 1iLn56rdtyvJQZOYpSlLAibuhu+QsifM4nsrxxqAlx0=
Subject key identifier: 02:37:DE:28:5B:35:38:76:8E:CC:9C:A7:7C:16:58:5A:1D:01:FB:DA
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 0522
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 0522
Signing time: Mon 20 Oct 2025 02:45:04 +0000
Manifest this update: Mon 20 Oct 2025 02:45:03 +0000
Manifest next update: Wed 22 Oct 2025 02:45:03 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: a3O6xOh6hPZS7gXLruUpjqVN1AKy0WNs0DiqPV78cq4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Oct 2025 00:06:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Validity
Not Before: Oct 20 02:45:03 2025 GMT
Not After : Oct 22 02:45:03 2025 GMT
Subject: CN=68f5a230-bd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:4a:ff:4d:bc:cb:44:4a:1a:3a:b3:0b:dd:
de:da:25:8e:86:17:93:b9:a2:ef:ec:58:9c:c8:29:
34:d2:cd:6d:3e:2c:df:14:43:b3:93:54:c0:ea:8f:
b0:a8:e9:f7:ce:b9:22:2f:e5:84:bb:1b:48:89:71:
23:93:f2:68:fb:a7:0c:0c:ba:79:f4:58:b2:53:4c:
c9:a8:fc:30:8c:b8:d2:d4:10:30:1b:19:f0:b9:cc:
38:13:54:b0:40:59:fc:0b:e2:5d:f6:95:db:ad:1f:
e2:31:34:42:8a:81:ac:c6:a6:9a:62:fd:72:88:ad:
b9:9d:47:c4:03:ab:8b:7f:d7:ff:53:4c:ab:49:06:
db:ff:69:33:67:e9:78:84:4a:a5:29:f0:64:74:9c:
fa:a3:67:50:76:fc:fa:41:09:56:9e:11:56:4f:e3:
ad:fc:5a:13:2f:fe:07:69:3f:10:f4:f7:8a:9f:85:
34:61:6c:b5:91:92:c1:61:be:af:53:e6:92:e7:af:
30:cd:55:9d:18:82:17:78:8b:69:e9:19:6d:80:73:
87:08:2e:65:59:fe:60:be:6f:00:de:47:31:8f:4a:
ab:11:e6:fb:92:b8:b6:17:5d:fe:be:ee:86:5c:fe:
43:cc:cc:1a:6d:0a:3e:3c:47:d1:52:eb:44:50:81:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:DE:28:5B:35:38:76:8E:CC:9C:A7:7C:16:58:5A:1D:01:FB:DA
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:01:1f:70:e1:c7:b8:0f:81:4b:26:50:b6:fb:7d:6d:fc:a8:
74:97:a2:13:3d:f2:62:5f:04:f3:c4:4d:64:bd:c1:84:fc:cd:
ec:b3:9c:79:8d:7b:4a:80:98:60:4d:e9:40:73:bd:b9:b8:a2:
4e:0a:c7:b6:5a:a4:07:54:03:6c:ed:4b:72:6d:9a:ed:c4:f1:
36:92:43:67:37:00:23:82:f6:fc:98:cb:7f:b6:a3:4a:04:59:
17:fe:b2:75:be:84:68:ac:e0:08:37:5e:91:0a:ec:20:67:c8:
09:71:1a:20:45:5f:ae:39:aa:cb:4f:02:a8:ca:9c:86:be:18:
bb:00:43:02:91:61:22:be:1e:35:a5:74:9d:d8:ed:e0:46:78:
f8:c0:1c:a6:44:ab:2e:7f:c0:7b:fc:29:aa:cf:ef:ac:82:54:
c9:ca:45:85:bf:e1:d7:ea:c7:db:1f:e8:9d:1a:c3:4a:29:4f:
c5:29:03:a0:55:a4:b2:27:1a:f1:1c:ae:b0:86:38:a2:f1:f1:
48:23:4c:e1:4a:f7:6e:3c:b9:65:fc:b3:00:a2:7e:21:cb:66:
a4:d9:a3:d6:17:0c:e6:e9:23:d5:44:a7:4e:6c:77:c9:b2:b1:
e5:b8:b6:cb:61:c4:fa:d9:b1:c7:b3:a6:6f:81:18:70:4f:76:
53:c1:2d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:12 2025 by rpki-client