Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: K3ezXJUk8KVUU8igD8MR8jb3CWNbNRCxnRQq2k+Qm24=
Subject key identifier: BF:92:D0:E9:5D:F8:F7:A4:6F:62:69:7E:93:7D:5D:D1:9D:FA:67:D5
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 02E9
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 02E9
Signing time: Sun 06 Jul 2025 03:54:39 +0000
Manifest this update: Sun 06 Jul 2025 03:54:38 +0000
Manifest next update: Tue 08 Jul 2025 03:54:38 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: NdzMBsYSHiNzSat7/P7LpRrLuW/pG6O+0OjWwepFiNM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 745 (0x2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Jul 6 03:54:38 2025 GMT
Not After : Jul 8 03:54:38 2025 GMT
Subject: CN=6869f37f-d31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:3f:a1:a7:56:42:1d:ed:0b:ce:ec:1c:17:
b6:9e:1f:7c:28:98:3f:40:75:ed:13:63:78:b6:38:
ca:4b:54:36:a1:62:4b:54:6b:21:61:7f:90:f4:63:
7c:40:33:d5:c0:88:1a:4f:19:66:f4:0d:29:00:84:
1c:6d:05:b4:bb:dd:c0:d0:7e:d7:8a:fc:09:d8:71:
63:84:75:7d:3d:87:9f:4d:e3:25:98:1e:38:08:10:
2e:8a:ed:7b:8c:26:12:84:e8:4c:1d:9a:2c:be:ea:
72:aa:8e:36:d2:62:d8:f8:b9:ec:68:a5:0a:c6:52:
c9:93:bb:4c:1e:c1:5b:86:b6:00:c4:e3:17:59:c8:
7a:91:1d:36:d5:a8:7e:2a:aa:d1:1c:97:4f:87:2a:
a5:98:40:47:68:97:e2:ec:24:20:39:54:9e:8f:ae:
b0:4e:91:34:d6:2b:3d:e9:30:cf:1b:fb:d1:38:54:
d4:ca:a7:35:0b:01:8d:6a:e5:26:eb:b3:57:07:74:
b3:24:6a:53:89:ef:46:24:f6:35:7d:cb:c3:09:9a:
f7:b5:90:f2:f0:c2:df:d0:bf:fb:8b:ca:58:02:d9:
02:a4:6a:aa:c6:ed:b9:82:07:38:50:b9:2a:60:9b:
b3:af:35:ab:61:de:42:f7:f7:56:2e:ac:82:e6:63:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:D0:E9:5D:F8:F7:A4:6F:62:69:7E:93:7D:5D:D1:9D:FA:67:D5
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
10:cc:cb:d2:76:59:c7:d4:2f:b6:d2:1c:1f:85:02:09:c9:b5:
15:f8:c8:82:fc:3e:6a:13:0f:87:58:d4:73:14:42:99:5a:9f:
11:91:b9:d2:1f:ee:66:58:6e:2e:76:58:c3:7b:93:4c:7f:25:
be:05:08:0a:af:78:4d:f5:60:a3:62:72:46:ca:fd:9c:e3:ce:
1a:f5:23:af:76:e9:66:c4:e1:2e:55:21:d2:30:9a:42:f6:9e:
93:81:d3:0e:ae:a1:48:1b:c1:5b:06:c0:aa:77:df:b8:d3:e9:
ec:2a:27:7d:02:01:53:b5:b5:9e:cf:8a:77:a1:f7:a5:e3:54:
c9:79:d1:fd:2c:ce:ea:cd:23:1f:93:40:0c:b1:c5:f8:84:57:
80:e7:c4:8c:1f:72:83:89:4b:1d:e7:0c:da:ed:37:1e:f6:ce:
58:4e:9b:91:f0:56:d5:31:7f:6d:33:30:5c:71:08:2e:5a:44:
b1:c4:63:bd:85:a2:f5:38:09:94:17:e0:22:92:4e:09:87:54:
73:2f:26:88:7b:9c:71:fa:d9:6d:86:07:be:c4:b6:86:de:57:
e6:71:c2:33:57:20:54:5e:55:6f:86:24:3d:7b:6d:56:f2:63:
a1:94:2e:e6:9f:de:12:43:3f:4c:9e:26:58:a3:5b:a7:ca:da:
1f:9a:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 13:51:42 2025 by rpki-client