Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: z/YXnwZm0OtngPLGbkvl+fQDMTDhGu3C92geOv6eZ44=
Subject key identifier: 6D:E3:99:03:53:E8:C8:69:5E:C6:C8:4B:F6:99:F8:FE:79:43:84:5F
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 021B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 021A
Signing time: Mon 12 May 2025 04:13:44 +0000
Manifest this update: Mon 12 May 2025 04:13:43 +0000
Manifest next update: Wed 14 May 2025 04:13:43 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: htHFh/HRcm40nokqe18OaB6mix3KtICZ/Ma4LWw+ynk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 14 May 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 539 (0x21b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: May 12 04:13:43 2025 GMT
Not After : May 14 04:13:43 2025 GMT
Subject: CN=68217578-e0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:b6:24:ef:7e:37:d0:f7:c3:c2:e7:de:3f:
57:a9:89:4d:b6:65:c3:ef:50:b7:17:22:79:f5:78:
af:f6:06:b4:cc:ad:ee:17:c7:95:ae:64:74:b7:0d:
4d:d3:01:47:a0:08:60:0f:c6:aa:bd:7a:08:7a:16:
75:10:14:d5:89:68:e7:4d:77:db:97:e6:0f:19:aa:
31:a6:a1:e6:06:e9:a5:00:d4:02:78:54:2c:9a:db:
38:e2:a5:4e:60:92:d7:4a:2b:70:ed:ba:4b:1f:d4:
6d:4d:9b:8b:a9:d2:86:6d:b5:25:36:b4:2c:53:1b:
84:b8:91:67:81:57:22:26:4a:5b:58:2b:28:ed:c9:
91:9a:e2:39:e6:d0:76:1f:65:05:59:fb:c3:d4:34:
a6:d9:69:11:61:50:a9:62:39:e8:3e:1e:e3:e6:44:
46:89:79:98:2f:31:ab:56:0e:5d:db:6d:fd:10:52:
f0:52:8e:b2:d5:2d:86:e3:ba:3e:ce:46:bb:df:42:
cb:25:c6:57:a2:61:cb:96:68:a6:96:6f:c3:bc:e6:
fc:ae:0e:ee:72:93:74:6c:3f:f9:e7:c6:12:69:c8:
c3:9a:23:3d:78:b2:8c:df:c0:b3:07:e2:29:d1:c5:
4a:4e:c2:21:2c:34:95:4b:a5:31:e6:d9:6c:5f:ed:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:99:03:53:E8:C8:69:5E:C6:C8:4B:F6:99:F8:FE:79:43:84:5F
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
08:0f:1b:18:a3:14:9d:d9:9f:06:85:4a:7a:e0:2b:30:69:d4:
5a:dc:ec:72:dd:6f:c7:59:f6:86:ae:42:3a:10:d0:2f:af:d5:
cc:6c:a3:c9:c5:51:f9:95:cd:ea:6f:d3:b5:7b:30:a6:33:62:
39:f1:fb:50:b1:07:4b:4f:d5:a2:33:1a:4d:6e:40:ce:d9:fb:
9a:23:2c:32:35:7e:50:9e:78:94:18:7b:3d:31:87:2c:48:c9:
7e:c5:0f:95:48:54:c5:3f:11:2a:65:3a:4a:0e:7f:87:b6:8d:
ef:e9:0a:7b:99:47:76:0d:06:37:49:3b:94:b3:7f:2d:2b:87:
6c:11:96:b3:d5:52:f8:21:04:ea:f0:4a:ac:5d:5f:35:7a:54:
3f:d3:72:86:9a:34:90:4f:b3:4a:24:f3:e9:d4:85:89:e8:0e:
4c:e1:eb:82:e4:a1:5f:95:5c:db:ed:93:73:e1:65:ba:d0:2f:
7e:4c:19:d6:15:fa:90:51:5b:ab:96:4c:0f:fe:ba:2c:17:6c:
a6:3f:99:ef:d3:42:8b:c1:38:d4:e9:7a:f5:3d:83:20:39:d3:
af:ef:6a:49:46:64:a6:5e:d8:b3:b3:6c:ec:4f:d7:f2:67:c1:
ed:21:a1:40:7d:9e:57:c1:ab:1a:aa:34:0c:fc:38:e6:95:d6:
f9:83:7a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:04:57 2025 by rpki-client