Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: rDzSfDN75wI7bSkc2+KUBsr66fnuO7hzr7nlOZ8pGnk=
Subject key identifier: FA:86:9D:CF:42:22:B0:69:58:5D:B9:93:D6:FD:80:09:7D:40:4B:37
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 0251
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 0250
Signing time: Fri 04 Jul 2025 04:14:31 +0000
Manifest this update: Fri 04 Jul 2025 04:14:31 +0000
Manifest next update: Sun 06 Jul 2025 04:14:31 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: TLN2GRNVr5yNl8ARKHNx8lmz2kd6OtC704XnJ0q7CGs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Jul 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 593 (0x251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Jul 4 04:14:31 2025 GMT
Not After : Jul 6 04:14:31 2025 GMT
Subject: CN=68675527-8a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:d3:cc:fe:b6:9e:7e:6b:15:3e:2b:10:e6:
b6:f3:7c:59:e5:91:89:f8:12:32:e4:6f:c1:95:45:
3e:f4:b1:07:ea:cb:8f:11:64:c5:1e:a5:74:9c:98:
f1:94:6c:53:e2:11:43:06:0c:c1:09:3e:04:64:40:
f5:33:a8:ca:a0:21:20:bd:b0:69:b9:bb:4c:fd:ae:
6e:2a:9e:86:79:3b:16:95:fe:db:a4:2d:0d:fc:6f:
87:f2:3b:d8:21:d5:34:af:fd:25:3e:7b:94:8f:72:
d4:11:cd:38:74:c2:a3:09:a2:18:a9:d5:f5:83:16:
f2:0c:d8:9c:8d:31:65:80:16:0b:d6:d5:26:ba:e5:
52:9a:8d:c1:fe:95:36:e8:e3:a6:a5:3a:69:0f:fc:
9c:e8:44:f0:a0:91:73:c0:06:5c:16:e6:4f:cc:04:
8c:c7:ad:cf:b7:6d:0c:22:1c:f4:64:c7:89:fa:08:
90:f3:99:6e:3e:1a:e3:38:d4:71:63:fa:3b:32:6c:
c0:90:80:84:08:03:3f:32:f1:ff:6a:ce:5e:fb:ab:
37:b6:c5:82:e6:a3:4c:54:c3:d3:ff:55:b0:6f:3b:
a0:f5:01:a9:4a:3b:a8:f9:5b:68:0f:6f:ef:76:84:
5a:61:45:26:1e:e5:38:9b:5c:fa:12:dd:36:16:4d:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:9D:CF:42:22:B0:69:58:5D:B9:93:D6:FD:80:09:7D:40:4B:37
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:23:85:75:bc:02:29:ca:a6:58:28:01:c5:c0:99:62:07:71:
7d:02:4f:ba:c0:73:21:1d:41:fd:65:19:64:d3:7e:c5:f3:f5:
69:fb:48:c3:21:67:3b:a7:af:bc:e9:39:ab:a4:f1:9b:1b:3b:
9f:91:63:fc:45:43:62:a1:f4:8e:13:6b:44:1a:1e:6f:1a:78:
46:71:2a:91:b4:18:51:65:8c:f8:54:11:07:18:8a:cf:fd:53:
81:7e:57:83:bb:68:da:51:85:91:b3:33:26:86:24:e3:a7:fa:
61:d2:ff:49:fc:18:71:32:b1:d6:83:eb:fa:6d:29:59:f7:f9:
aa:85:8c:d2:25:86:40:d1:c9:af:0e:c7:01:bb:6c:ff:58:a1:
3a:bc:e0:97:af:61:52:34:0e:24:09:28:7a:71:75:b9:3f:d1:
18:04:22:b4:88:fe:7f:da:98:96:e5:8f:54:fb:a7:45:1a:2a:
f3:7d:fd:88:c6:c7:3e:6e:c2:bd:89:67:d0:0e:b2:a2:b9:2c:
d1:6c:19:d6:b4:9c:21:38:e5:ef:58:79:1d:5c:38:5a:5f:67:
a4:97:80:3b:f3:74:12:96:4f:64:ba:77:70:c9:81:ea:d3:49:
0e:9d:01:c4:02:67:db:42:0e:ce:d1:15:9e:b4:e7:b8:59:79:
be:61:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:23:26 2025 by rpki-client