Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File: xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier: +LwFkrxRkaVRxx47meTq/bmeiBiuI9Jy55lmyej+y8k=
Subject key identifier: 77:05:4E:4A:27:25:81:AD:72:0A:68:44:05:6B:3D:BE:D8:93:00:5C
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer: /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial: A9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number: A9
Signing time: Sun 29 Jun 2025 05:10:19 +0000
Manifest this update: Sun 29 Jun 2025 05:10:19 +0000
Manifest next update: Tue 01 Jul 2025 05:10:19 +0000
Files and hashes: 1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: XFf0B0vvUNr90neL5SlpvlU5fb7qiWipd8i16Z27Jco=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 01 Jul 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Validity
Not Before: Jun 29 05:10:19 2025 GMT
Not After : Jul 1 05:10:19 2025 GMT
Subject: CN=6860cabb-ee03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:6e:f1:06:8b:c3:46:4c:14:ff:af:51:57:
8a:5f:3d:17:65:ee:16:65:02:1e:0e:8a:c0:d3:36:
1f:a5:20:fb:5a:fd:0a:bb:57:2c:f2:9d:dd:b7:8f:
18:d0:26:56:c6:81:c9:8f:4a:b3:65:1d:66:ac:9d:
00:91:ee:16:f7:51:42:fe:4e:4f:64:30:85:68:29:
df:38:c3:9d:bc:65:31:e2:04:78:4c:f1:47:73:22:
fc:f5:2e:80:aa:53:26:cc:e8:1b:af:c9:1b:85:72:
06:9f:04:a0:4b:0a:f3:27:63:ce:55:57:3c:36:12:
8c:7a:c0:cc:0f:b1:a4:4b:44:b0:eb:a7:83:b0:3c:
0f:e9:64:a3:3d:68:ab:09:37:59:23:5a:e2:92:75:
31:10:3b:6b:3f:b5:31:ad:ca:e9:df:b4:69:52:65:
cd:df:83:ec:f6:f0:b8:32:3d:43:3c:61:65:3a:c5:
5e:6d:e4:2b:47:ec:be:c8:15:a2:be:a9:3e:19:4d:
3b:e9:71:5e:21:3a:49:4d:b9:89:20:5b:2b:c4:6f:
81:dd:a1:c9:3f:5b:21:8f:db:32:69:4a:6b:99:1d:
d8:ae:21:6a:e6:32:a7:30:87:f5:59:ce:1c:8e:2c:
9c:c1:52:24:f3:45:af:16:91:ab:0c:90:a9:b4:51:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:4E:4A:27:25:81:AD:72:0A:68:44:05:6B:3D:BE:D8:93:00:5C
X509v3 Authority Key Identifier:
keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8e:00:52:b9:a6:ce:27:fe:5b:08:ae:e9:ac:2b:21:40:b0:ad:
e5:5a:9c:b8:08:7f:2a:fc:71:ad:94:5a:23:52:5d:b5:81:d3:
74:b5:70:cf:be:61:6c:c9:07:81:89:6b:dc:60:69:57:2b:f7:
3e:d8:e5:f2:3a:31:85:1b:38:f2:35:2d:c2:d7:6f:c3:96:6e:
6a:a5:b9:8f:4c:18:47:be:3b:40:a7:0b:96:83:7c:89:23:8b:
bb:2d:fb:e7:c5:51:e0:8e:5a:9b:ed:c6:e2:b3:4b:47:d7:a2:
fe:a7:44:66:1c:b8:03:64:c7:58:ac:db:d1:58:a5:92:5b:fa:
04:2d:4d:ca:96:2a:22:e2:d3:c8:46:bf:99:10:09:0b:13:1c:
41:ca:31:50:bf:6b:80:d1:ce:97:c8:ca:51:9b:1b:53:ea:6a:
3b:05:e9:d9:22:74:fa:60:c4:fe:ae:9d:13:81:0f:5e:43:16:
37:a6:0a:cf:60:3d:49:91:3c:5a:79:c3:06:b9:5f:94:0e:5f:
d5:71:64:86:ca:6d:9c:e5:50:42:e2:12:e5:57:3d:b5:0e:50:
8e:3b:48:ad:18:05:3e:51:38:5a:7a:e4:f7:79:36:ae:0f:46:
6a:2e:80:d0:4e:8a:16:5d:18:bb:4f:8e:28:30:91:a8:2c:d9:
19:5a:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:10:38 2025 by rpki-client