Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File: XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier: kJReMvnUSDFIX6TKpJVBm7bqEDsuzRiBAIoYcew2XHc=
Subject key identifier: 2A:C5:13:E2:DE:14:6F:15:62:5D:B1:93:E7:3B:79:A0:1C:AD:F2:B3
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 0401
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number: 03FF
Signing time: Fri 09 May 2025 03:09:21 +0000
Manifest this update: Fri 09 May 2025 03:09:20 +0000
Manifest next update: Sun 11 May 2025 03:09:20 +0000
Files and hashes: 1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: 9Hxgjs7laD2PdWag1pJP4U59hEsgnAffFRm+2xEgze8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1025 (0x401)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Validity
Not Before: May 9 03:09:20 2025 GMT
Not After : May 11 03:09:20 2025 GMT
Subject: CN=681d71e1-9b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:8f:37:63:95:69:da:c8:b2:90:e9:e0:db:
e8:9b:8e:ea:c4:29:ad:55:ed:a8:5a:4a:94:53:fe:
b1:1b:31:59:41:9e:44:c9:f9:3c:5d:74:b7:f7:01:
d6:0c:1f:31:9d:72:4d:77:33:9f:df:29:72:0e:a0:
42:c1:e6:ac:b9:bb:d5:7d:89:eb:c8:a3:8c:89:1b:
d6:4a:4f:a1:6b:9d:03:a5:c7:9c:21:aa:b3:71:c2:
e3:90:45:81:9f:6a:21:ac:88:ea:63:45:db:1b:be:
8a:18:6c:36:31:45:d2:86:f2:34:4e:7f:5e:31:c1:
76:9d:3d:20:b6:26:83:b7:72:6b:8f:b3:be:de:88:
50:f1:98:8e:29:b5:86:7f:5f:14:2d:17:91:42:72:
81:02:ca:14:0f:c2:b5:73:82:fc:1f:d7:a0:a1:0e:
44:fa:ea:48:c9:95:e1:8c:4f:a6:f9:ed:19:86:3c:
fa:4e:6d:fb:b1:93:e4:15:f2:40:da:78:4c:87:a9:
0f:85:07:ab:78:2d:01:da:d8:f9:6a:1c:19:d6:2e:
23:44:6c:89:c1:93:eb:0f:9e:77:6b:55:9a:3a:74:
9f:a9:21:39:c4:32:f1:43:32:4b:0f:64:f7:51:c0:
f6:d6:97:db:5f:01:d1:cd:db:84:5e:74:32:25:23:
70:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:13:E2:DE:14:6F:15:62:5D:B1:93:E7:3B:79:A0:1C:AD:F2:B3
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:8a:fd:70:33:9b:99:0b:f5:38:75:95:f7:0a:00:bb:6a:57:
82:af:94:9d:64:42:09:fc:dc:7a:c9:8a:21:a3:16:be:8a:da:
08:03:2f:ee:85:d4:e1:1f:4f:0c:c0:b6:c3:53:13:06:6b:74:
8f:ae:6e:b3:ab:b3:b2:02:85:68:6b:a8:cd:7f:d0:2b:86:a3:
2e:f2:47:3f:e1:cb:18:c1:18:a9:4e:4a:5f:a8:22:fd:9c:a4:
7d:5f:71:c2:cd:7b:7e:26:ad:e1:a7:3f:c6:e8:e5:f4:b1:4e:
57:31:4f:77:38:fc:21:00:de:f6:69:ea:f2:00:ec:5f:40:e2:
a4:05:9f:b6:99:12:97:88:e8:bd:f0:c7:47:57:9d:f3:98:6e:
e1:d7:4e:21:9b:17:55:cd:b3:b0:6d:c0:1b:6c:18:d0:55:9b:
68:33:fb:e9:d9:df:46:32:4b:b1:32:00:b4:ff:94:25:96:fb:
f6:05:83:d7:d2:0d:fc:8f:9c:64:b5:68:57:5b:46:48:65:05:
30:90:39:a1:d4:46:17:94:19:6a:30:0b:12:ad:99:ac:ee:2a:
a8:0c:ff:4a:17:29:c8:ff:77:d9:ed:11:30:e7:cd:c0:b5:92:
c6:f8:e4:7e:30:e4:d7:e7:54:68:19:9d:a3:d3:37:df:4e:2c:
d7:86:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:09:47 2025 by rpki-client