Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
File: 2XFO6UZLDHro1GvxAWN4ShYPcXI.mft (raw, json)
Hash identifier: AjVekoZzyUZS8XMH1YPXBwBobH1DkNvC6j6JavRyIiE=
Subject key identifier: B8:F3:96:3F:8F:CC:86:72:AB:39:BE:00:5F:5B:88:D7:3A:9A:3C:55
Authority key identifier: D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
Certificate issuer: /CN=F365461DAF/serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Certificate serial: 05
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
Manifest number: 04
Signing time: Sat 23 Aug 2025 05:30:47 +0000
Manifest this update: Sat 23 Aug 2025 05:30:46 +0000
Manifest next update: Mon 25 Aug 2025 05:30:46 +0000
Files and hashes: 1: 2XFO6UZLDHro1GvxAWN4ShYPcXI.crl (hash: GiOPKHj/tv1HB12vmlOJEnhRWJkmWwicmemG4zucAFo=)
2: 100568547E5E11F0A78B849ADAE4EC9C.roa (hash: PvZoBj2A7ENispwmai6nCrzzAnKO2XiSPBgvLBIB2QA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365461DAF, serialNumber=D9714EE9464B0C7AE8D46BF10163784A160F7172
Validity
Not Before: Aug 23 05:30:46 2025 GMT
Not After : Aug 25 05:30:46 2025 GMT
Subject: CN=68a95206-97e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:41:f4:8b:b1:00:e4:fd:a2:58:64:4e:b5:
df:d9:ad:70:b3:d9:50:44:93:6b:39:34:83:54:8d:
ef:e9:81:49:85:f3:30:f7:0e:9d:22:cb:6f:b9:29:
f5:20:2f:20:18:a7:08:fd:7d:47:b6:54:a0:b0:0b:
0d:e2:31:66:d5:3a:c1:9d:93:dd:66:a1:4f:54:a7:
3e:7c:c8:e5:04:fe:95:d5:8b:4c:35:f7:e0:84:3c:
82:72:98:66:12:97:62:43:8e:2f:c8:a2:3e:f0:9b:
ce:2c:ee:22:9e:8d:70:10:9f:51:f1:ff:49:50:0c:
74:4b:c9:db:ec:3d:34:91:28:5d:8d:ff:d5:97:a5:
04:1c:02:47:1d:43:a8:7b:a8:d3:9b:4c:dc:95:71:
35:07:c4:5a:68:1a:84:42:36:fd:17:c5:25:9a:8f:
d8:9f:62:68:bc:42:97:a9:94:93:d4:7a:75:02:7d:
d0:0e:11:80:48:84:41:f3:43:fa:68:8f:ef:66:7b:
fb:59:39:54:ad:5c:15:40:72:52:11:51:59:98:13:
78:bd:17:4a:b9:49:f1:57:d7:31:77:1b:f7:12:2c:
09:cc:e9:a4:1b:8b:52:bd:7d:ba:bf:66:35:91:17:
3e:39:da:0f:3e:36:20:6c:9c:30:21:79:e4:9a:a5:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:96:3F:8F:CC:86:72:AB:39:BE:00:5F:5B:88:D7:3A:9A:3C:55
X509v3 Authority Key Identifier:
keyid:D9:71:4E:E9:46:4B:0C:7A:E8:D4:6B:F1:01:63:78:4A:16:0F:71:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2XFO6UZLDHro1GvxAWN4ShYPcXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365461D/20B3F7527E5D11F0B898BF95DAE4EC9C/2XFO6UZLDHro1GvxAWN4ShYPcXI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:6c:26:7a:32:f9:4e:7a:c2:86:7d:7a:71:40:aa:bb:00:
cf:02:60:48:ed:69:94:58:16:72:ce:a1:af:67:77:a4:f7:ad:
d1:44:6e:0e:ac:9f:9b:ba:55:fc:c7:2d:31:56:83:0c:22:ad:
76:c6:46:ab:35:91:60:66:b7:6c:19:3b:e9:8f:4b:88:fe:e6:
01:f0:2d:32:fb:3d:b4:7b:6b:b9:72:d9:cc:8b:51:b3:79:30:
e2:96:63:23:bd:6e:2c:ec:c8:ee:47:12:d5:ac:13:d7:e9:a8:
c4:f3:b8:b5:27:71:85:61:c6:5b:a0:8d:10:cf:11:94:74:9f:
d5:40:c1:f8:f9:07:60:ed:06:4e:32:55:07:f7:9a:37:b4:90:
81:65:b9:39:03:25:74:dd:a1:14:f7:fa:f2:e7:0e:7b:66:04:
7e:6a:69:a6:3a:88:83:c4:a9:53:cc:ad:14:f8:30:53:de:5f:
0e:25:5b:a1:b0:82:8b:6f:5d:91:f5:44:48:28:b1:a2:17:97:
f7:7d:c8:01:de:a0:df:7f:ef:86:a7:d7:13:e0:5d:f6:6d:1c:
14:3a:e9:c6:b9:9e:c2:9e:b0:b2:67:57:95:ff:d6:d8:0d:13:
7b:88:58:8b:8e:c5:11:81:f3:7b:c2:f4:ba:d8:32:13:34:cf:
85:54:40:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:32 2025 by rpki-client