Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: TEdWTgU0kA1Kf8ffICuLqdUFmXDMhFJYuBC3ZWifyn8=
Subject key identifier: 0D:8D:33:C7:33:B8:2A:DA:5F:2A:4D:AD:55:B0:8F:CE:4E:AA:03:1F
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 06E9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 06E9
Signing time: Sun 29 Jun 2025 02:01:51 +0000
Manifest this update: Sun 29 Jun 2025 02:01:50 +0000
Manifest next update: Tue 01 Jul 2025 02:01:50 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: evZY0u9plVwV5p/6Zh55+0fkwv23HFZ6p+c4wKnR/To=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1769 (0x6e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Jun 29 02:01:50 2025 GMT
Not After : Jul 1 02:01:50 2025 GMT
Subject: CN=68609e8f-d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:ab:0c:3a:a8:60:d8:4f:f2:08:fb:af:8b:
70:76:ff:1c:2b:98:2a:86:ed:f9:68:43:ec:ce:7d:
4a:19:b9:d9:0e:f2:0c:46:4e:2c:3c:48:9c:48:c2:
01:26:a6:27:ec:a4:5a:95:aa:1c:23:b3:f0:37:59:
ca:7f:8b:71:b9:12:92:71:d0:0a:d1:8d:1a:0c:42:
f4:01:41:31:c0:d6:95:61:28:cc:dd:8a:f9:3b:49:
c8:62:9e:a0:75:99:c9:dc:08:0b:b8:fd:78:a0:d9:
91:a8:db:27:ea:db:88:64:0f:2f:34:29:e2:66:0d:
48:e9:60:03:59:e0:91:43:c9:56:cc:8d:28:94:a5:
1a:ad:76:91:7a:77:86:c0:df:28:90:c7:e3:e2:1a:
4b:6c:67:6a:7f:13:5c:6c:08:a1:80:e4:d6:6f:68:
c7:71:76:c9:c9:99:09:d6:c8:c6:1f:13:db:01:a9:
fc:a9:47:6e:5b:6a:f0:e7:e9:3c:79:9a:01:55:48:
ea:7c:f4:c1:0b:5f:4a:3c:c1:02:f6:13:bf:f7:fb:
79:5a:52:81:cc:6b:63:53:b2:8d:31:32:09:5b:17:
e0:f5:ee:92:54:02:11:e8:92:e3:0f:c4:8c:ea:9c:
7a:3e:c6:b4:a0:fe:35:8f:c6:c2:be:89:58:67:6d:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:33:C7:33:B8:2A:DA:5F:2A:4D:AD:55:B0:8F:CE:4E:AA:03:1F
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a3:06:87:6f:51:2f:40:73:81:ad:0f:fc:0e:4f:3e:38:ca:57:
30:7f:69:55:60:4e:83:39:90:be:51:ea:93:90:4e:38:fb:4c:
bc:12:e8:1c:62:32:bc:ce:1d:1f:f1:f2:1c:3d:b6:ee:41:d5:
d1:51:7a:ee:5b:2d:84:5a:59:f0:e2:07:80:9d:0e:ee:7f:f7:
f1:91:a3:66:51:70:8a:6f:61:f8:a6:3a:09:d5:d1:1c:45:fe:
71:f2:af:76:60:68:61:23:fd:9c:46:57:c9:99:4c:3e:25:98:
61:68:51:f2:59:31:b9:bd:d5:61:b4:98:39:42:7a:3a:85:88:
ad:cf:68:56:3f:43:05:45:d5:8f:19:70:e4:47:64:59:e6:f8:
31:21:54:63:4b:b2:57:f1:99:ab:33:07:85:c0:f6:f4:70:bf:
af:94:29:2b:94:ee:95:7d:10:a7:8c:20:df:60:fd:55:f2:df:
7d:2b:a2:42:0e:a8:b8:a9:36:43:c2:dd:a5:f2:ac:9f:ce:d2:
70:2a:aa:58:48:3f:07:74:0b:d0:40:fd:f6:1a:7a:64:4f:fb:
18:78:eb:bd:91:c6:28:e7:f0:43:31:65:96:8e:d7:10:68:e0:
ac:44:57:36:8e:68:50:cf:d8:68:5c:36:c0:c0:8f:b7:ff:6b:
5a:fd:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:50:24 2025 by rpki-client