Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File: XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier: pJzVLxYdyvpezwfPS9g7FFgX8VNBGluwr1N1s1SVxkk=
Subject key identifier: CF:08:E4:FD:79:EB:76:FB:ED:8E:01:D0:FF:E3:AF:97:FE:62:25:56
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 0436
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number: 0434
Signing time: Mon 30 Jun 2025 03:10:20 +0000
Manifest this update: Mon 30 Jun 2025 03:10:20 +0000
Manifest next update: Wed 02 Jul 2025 03:10:20 +0000
Files and hashes: 1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: GquJyw5Tq8DU1iGp7u49J/sSjbk7j0DYW6S/1hMKQCk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 02 Jul 2025 00:06:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1078 (0x436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Validity
Not Before: Jun 30 03:10:20 2025 GMT
Not After : Jul 2 03:10:20 2025 GMT
Subject: CN=6862001c-246d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:f6:9a:d0:89:55:05:94:50:17:42:2b:11:
7f:00:50:3a:73:94:18:24:f0:0b:50:83:2c:f9:c3:
fb:09:ad:fd:5f:fe:40:cd:59:7a:5e:e4:25:de:80:
11:37:da:1a:c9:00:22:fe:ea:94:64:2f:8a:5b:c4:
eb:1f:6f:97:9a:9c:f7:90:f5:64:cf:83:bd:9d:2c:
75:21:e0:5b:ec:b3:a8:7b:0a:c0:bf:0d:a1:e5:2d:
34:19:eb:41:01:e9:31:88:ef:0b:5e:47:a5:b3:2a:
9e:e8:3b:c0:a9:7b:e6:91:ec:ec:6e:f1:c5:b6:ff:
1a:97:70:23:7d:da:eb:53:5f:b3:af:73:98:82:c4:
90:ca:d1:64:db:bf:70:24:54:58:40:6b:53:b8:3e:
ba:89:2d:bc:fe:1c:ac:2d:22:e7:ff:6c:05:99:09:
87:87:11:ff:b1:df:7c:d1:e0:6b:00:79:9e:30:2a:
0f:a0:02:bc:f7:04:7b:70:90:67:dd:82:c2:67:cc:
97:63:d7:40:d4:1b:09:70:54:a0:2f:e5:33:ab:cb:
d4:37:88:98:3f:bf:fb:26:17:1f:76:ad:c2:5b:84:
61:a7:b7:35:93:59:50:78:20:46:4c:db:b0:97:c7:
fa:53:9e:19:47:e6:0e:bb:6d:cc:62:d4:94:3e:db:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:E4:FD:79:EB:76:FB:ED:8E:01:D0:FF:E3:AF:97:FE:62:25:56
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
58:f9:c6:67:be:99:3c:1b:01:de:5a:6c:92:69:64:cf:7c:e8:
3e:ba:2f:f3:c7:84:d2:da:75:74:8b:2d:af:bd:72:50:67:d2:
59:84:b6:1f:0d:a3:0e:71:bc:bc:3f:d0:04:78:ee:5e:e7:9f:
b3:36:5a:1b:ed:02:d1:40:2f:95:c1:12:88:65:63:53:d4:cc:
1d:69:ce:c1:a3:be:1e:66:b5:e2:21:a5:2d:72:c6:dd:5f:22:
cc:67:ea:2e:95:89:75:20:8a:a0:58:09:78:5f:e0:64:7c:12:
82:ba:49:d0:86:e9:a3:73:6b:01:16:fb:39:27:8f:34:a4:13:
cf:dc:e2:d2:77:b0:19:ef:15:32:b1:67:da:ae:48:7f:6f:fc:
77:38:82:d2:e8:c8:b3:f4:87:b0:1a:6d:b0:d5:ef:fe:e4:65:
0f:db:c7:38:4c:e9:f3:aa:66:4f:94:83:80:d0:3b:1b:0c:f2:
ef:ac:92:a7:d3:9c:6f:c3:33:9d:01:e3:97:ba:f1:8d:6f:1f:
da:38:aa:cd:80:fe:7f:6e:93:35:74:b5:5e:3e:13:f7:a6:93:
c3:25:07:27:ed:77:14:89:74:b4:3f:8a:d3:ca:b9:85:64:ff:
07:db:ee:b3:bf:c3:86:00:d9:82:3f:5d:3c:01:30:62:3c:10:
43:d3:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:48:07 2025 by rpki-client