Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier: Vjav9H0HC02AZ/ddYSlKp4Rd+4wiftIm303Ps1Yd3Yg=
Subject key identifier: 2E:6B:EA:32:86:10:70:4F:27:E1:36:40:0F:65:6C:06:CA:BE:B1:59
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer: /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial: 0443
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number: 0441
Signing time: Wed 07 May 2025 03:00:31 +0000
Manifest this update: Wed 07 May 2025 03:00:30 +0000
Manifest next update: Fri 09 May 2025 03:00:30 +0000
Files and hashes: 1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: G44lBoWJetf4fXpX3wip62ad2CvmRvw+I8T1u6TfANA=)
2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 09 May 2025 00:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1091 (0x443)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Validity
Not Before: May 7 03:00:30 2025 GMT
Not After : May 9 03:00:30 2025 GMT
Subject: CN=681acccf-57d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:2e:84:9e:4e:72:9d:57:5d:26:6e:de:3a:
fb:5b:a2:0c:99:65:a5:6e:64:07:0e:5b:d3:e7:9e:
dc:c7:98:b1:b1:c0:2c:6c:ed:57:12:ef:59:fe:14:
98:c4:89:ab:c0:16:93:f8:47:25:f2:b8:b1:7f:50:
aa:22:f4:c2:c5:6e:f9:8b:11:6e:5f:5d:0b:95:f8:
4a:0c:74:70:32:c6:87:a9:fe:5d:7f:b6:f9:8e:65:
85:a0:21:f7:ba:ca:27:c2:c8:fb:94:df:5c:c5:4b:
ab:12:83:8a:7b:51:f6:7f:8e:a3:a8:a5:d0:6f:b3:
45:83:ef:f1:92:96:7a:2a:a9:06:7b:5a:02:47:51:
a3:79:65:67:27:40:73:af:04:2c:4b:5c:51:d5:4c:
09:c3:9e:f3:50:1b:35:8b:00:a7:d1:c3:df:9b:58:
70:59:ed:b8:a0:72:4f:02:9d:98:3c:2d:aa:96:b2:
26:5a:67:5c:ab:2f:6c:d9:47:23:db:35:e8:d7:b1:
7b:fc:fb:12:3e:57:18:03:87:6e:ed:0e:e2:98:7e:
c1:29:8d:4d:5b:05:15:1f:9b:b1:95:fe:cd:c5:2f:
27:e3:b3:68:1b:b1:0b:d1:a5:7c:ee:b0:70:77:f6:
c5:c5:2d:10:f3:78:93:fe:68:1f:1c:c5:85:30:de:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6B:EA:32:86:10:70:4F:27:E1:36:40:0F:65:6C:06:CA:BE:B1:59
X509v3 Authority Key Identifier:
keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:14:3c:bb:cb:78:e2:45:53:69:30:80:c5:8a:e1:5c:1c:f2:
cf:4a:03:aa:54:68:ae:54:65:aa:ad:2e:ac:e2:8f:68:ea:aa:
c3:18:41:61:f2:35:43:ac:0e:1f:85:1f:96:cf:ed:ce:9b:40:
99:d2:c1:fb:b3:e0:2e:bd:dd:a0:a0:bb:e2:d3:c1:79:f8:d8:
ec:92:4f:1c:0b:61:e3:f6:e8:0b:79:07:2e:80:bf:05:9b:5c:
28:0e:8e:d5:97:aa:84:f7:53:5a:4d:38:a3:66:dd:ce:c0:1b:
4c:82:7d:fa:de:f1:e5:ef:f1:5e:32:cc:5c:df:c0:f3:9f:96:
4b:dc:2b:1b:6b:0d:4b:de:82:06:8a:f2:f2:97:75:44:c1:b3:
7c:27:75:08:82:08:c7:af:da:d0:01:fe:56:da:4a:29:d2:8b:
02:5f:3d:30:36:79:27:b1:42:df:08:8b:3f:97:3a:ac:0e:66:
32:14:c9:24:44:85:83:3d:b3:2a:df:55:56:3f:62:cc:0c:87:
9c:cb:36:e9:8b:99:3a:f0:bf:23:46:40:4d:4f:91:ce:a8:bd:
fa:c7:f0:4c:65:29:82:83:41:04:e0:1e:d8:26:86:4d:3d:5a:
88:cc:82:35:77:3d:64:04:52:16:07:2a:40:97:a2:aa:9d:3b:
89:88:f7:ad
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBEMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUJBRjExMC8GA1UEBRMoNUQ1QzJBOTZCMkUzNzJCMEFDNDdGNDhEQkRDN0Q3
RkQxRkJEQjEzMjAeFw0yNTA1MDcwMzAwMzBaFw0yNTA1MDkwMzAwMzBaMBgxFjAU
BgNVBAMTDTY4MWFjY2NmLTU3ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDj1i6Enk5ynVddJm7eOvtbogyZZaVuZAcOW9PnntzHmLGxwCxs7VcS71n+
FJjEiavAFpP4RyXyuLF/UKoi9MLFbvmLEW5fXQuV+EoMdHAyxoep/l1/tvmOZYWg
Ife6yifCyPuU31zFS6sSg4p7UfZ/jqOopdBvs0WD7/GSlnoqqQZ7WgJHUaN5ZWcn
QHOvBCxLXFHVTAnDnvNQGzWLAKfRw9+bWHBZ7bigck8CnZg8LaqWsiZaZ1yrL2zZ
RyPbNejXsXv8+xI+VxgDh27tDuKYfsEpjU1bBRUfm7GV/s3FLyfjs2gbsQvRpXzu
sHB39sXFLRDzeJP+aB8cxYUw3o5hAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULmvq
MoYQcE8n4TZAD2VsBsq+sVkwHwYDVR0jBBgwFoAUXVwqlrLjcrCsR/SNvcfX/R+9
sTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFCL0I1MTFGN0U0RjI0OTExRUNBMjc5MTE5MkYxMjIyNDY4L1hWd3Fs
ckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hWd3FsckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUIvQjUxMUY3RTRGMjQ5MTFFQ0EyNzkxMTkyRjEy
MjI0NjgvWFZ3cWxyTGpjckNzUl9TTnZjZlhfUi05c1RJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaFDy7y3jiRVNpMIDFiuFcHPLPSgOq
VGiuVGWqrS6s4o9o6qrDGEFh8jVDrA4fhR+Wz+3Om0CZ0sH7s+Auvd2goLvi08F5
+Njskk8cC2Hj9ugLeQcugL8Fm1woDo7Vl6qE91NaTTijZt3OwBtMgn363vHl7/Fe
Msxc38Dzn5ZL3Csbaw1L3oIGivLyl3VEwbN8J3UIggjHr9rQAf5W2kop0osCXz0w
NnknsULfCIs/lzqsDmYyFMkkRIWDPbMq31VWP2LMDIecyzbpi5k68L8jRkBNT5HO
qL36x/BMZSmCg0EE4B7YJoZNPVqIzII1dz1kBFIWBypAl6KqnTuJiPet
-----END CERTIFICATE-----
Generated at Wed May 7 11:39:24 2025 by rpki-client