Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier: w7orhFCZjmS9nQPkxf1Sc1DxwZiYed6HTUPLM18pLrI=
Subject key identifier: AC:2C:C9:89:04:83:5E:91:A1:C1:AF:E2:B4:29:E9:9A:4F:D5:BC:D2
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 031B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number: 0311
Signing time: Tue 01 Jul 2025 03:47:44 +0000
Manifest this update: Tue 01 Jul 2025 03:47:43 +0000
Manifest next update: Thu 03 Jul 2025 03:47:43 +0000
Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 4IPpjToMQvWyLwWM5GORmNnZrV+Y/J/GkaVZZWoXV9g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 03 Jul 2025 03:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 795 (0x31b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Jul 1 03:47:43 2025 GMT
Not After : Jul 3 03:47:43 2025 GMT
Subject: CN=68635a60-cc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:eb:ed:04:e8:3c:03:bf:cd:6b:d6:9d:c1:
ca:40:c4:ee:14:07:73:da:7f:88:59:97:7d:07:c1:
3b:de:74:5b:80:b9:1a:98:32:49:fd:f9:5f:8c:37:
da:c8:dd:e3:3a:90:71:3c:09:e3:07:bf:b8:06:2e:
cb:08:ec:da:26:ab:03:4b:a5:62:fa:c6:26:45:08:
75:2b:e4:cd:cf:6b:8f:d5:1f:2e:30:5b:e3:b1:db:
f3:17:e4:31:e3:89:07:de:2c:85:70:3b:c0:7b:e9:
f3:54:80:98:46:ef:c0:f8:58:ea:53:8a:54:5a:8d:
17:08:36:f6:01:f6:24:c2:d5:61:13:ef:d8:cd:50:
bf:ed:df:12:b0:e4:4f:26:79:f7:ea:40:0a:81:61:
0c:6a:dc:6b:24:29:74:1d:57:b1:68:47:4b:0f:6f:
a6:d7:7e:16:f6:28:ac:41:32:a7:d5:13:db:ae:5b:
0c:46:d0:d6:98:d4:4e:63:d0:c9:4e:38:6b:53:13:
1b:2e:93:a1:bd:de:ed:ac:c8:50:6b:53:7e:84:b8:
4f:38:e1:92:54:43:42:f8:96:3c:a2:b7:68:ab:98:
5e:26:af:ad:23:0c:d7:cc:e6:4b:07:2e:0e:25:cf:
4c:8b:9d:79:cc:da:43:15:37:ed:f4:90:4c:1e:7f:
6b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:C9:89:04:83:5E:91:A1:C1:AF:E2:B4:29:E9:9A:4F:D5:BC:D2
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:d4:be:26:ed:a6:40:f0:93:74:76:0a:62:78:79:e4:41:9f:
ea:e4:a9:92:95:e5:96:76:20:97:dd:e8:f7:7b:75:b1:9b:df:
94:af:7e:7d:92:8e:8d:44:64:a9:9b:79:0e:9e:d1:4c:75:01:
0d:4d:21:bc:fe:f1:6f:0c:0a:06:bf:d0:47:e9:4f:5e:24:58:
26:c1:97:10:9f:d6:4b:f7:e8:8e:0d:7b:c0:6a:61:34:be:14:
20:b3:92:41:47:90:64:7e:76:c2:78:c0:2a:c1:06:8f:6f:60:
99:bd:78:fe:48:23:69:46:cb:53:69:87:3a:67:d8:5d:3d:2d:
6c:65:c7:f9:18:41:35:d7:65:06:2a:5e:1c:0a:b4:c7:df:af:
58:d9:bd:3d:51:62:7c:c2:e7:f3:f6:9d:5b:e0:5b:56:26:f8:
5f:f1:aa:26:f1:dd:ce:2f:35:af:80:2e:df:44:16:70:7b:dd:
72:ae:0e:85:18:c1:4d:6c:23:89:17:df:26:c6:4e:42:cb:22:
43:ff:13:3d:cb:bb:8f:7f:78:ee:44:ed:1f:55:42:64:e1:dd:
b8:af:71:0f:d4:b7:47:22:80:6d:8a:6a:53:6f:fa:30:be:3c:
e8:f8:20:1e:5c:7f:3d:03:75:55:23:ce:b1:12:dd:39:5a:04:
81:55:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:53 2025 by rpki-client