Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File: zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier: U5Bv/HnXCGHQsNSDkBSTQhWJYPfP1fXvJYZVFEs3lew=
Subject key identifier: FD:47:62:F7:29:09:8D:20:12:EF:11:64:D5:8E:5B:89:B5:F1:E8:22
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 04B0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number: 04AF
Signing time: Thu 03 Jul 2025 02:53:25 +0000
Manifest this update: Thu 03 Jul 2025 02:53:24 +0000
Manifest next update: Sat 05 Jul 2025 02:53:24 +0000
Files and hashes: 1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: yK9pMp0L7BA4ZFuVRBwFGIaCriFWeL+3xGVSeVcX1ug=)
2: 556100D6A66711EFA35CD16B762E951A.roa (hash: qJSjsy2o5hJTJDSiAXFVbbjMVoTEJfrC1/c4KDsNvP0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Jul 2025 02:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1200 (0x4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Validity
Not Before: Jul 3 02:53:24 2025 GMT
Not After : Jul 5 02:53:24 2025 GMT
Subject: CN=6865f0a5-8ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:57:ae:a8:dc:4e:d9:b2:f0:bf:e3:78:92:
9e:61:9a:df:8d:37:d6:ec:ca:ee:e2:32:62:7d:ae:
6c:29:58:45:8e:36:19:42:75:09:d5:da:0a:b6:4c:
a7:4a:8f:90:be:5d:e7:9e:5c:fc:57:11:87:bc:67:
39:77:c9:18:33:22:eb:cb:99:65:68:8e:6b:47:d7:
bd:cf:50:b9:46:43:3e:db:ab:5c:84:65:54:af:2a:
1d:e2:c1:a5:00:47:b9:20:56:15:2e:7a:07:d6:c5:
fe:a7:81:da:36:d3:9a:e9:72:f8:84:b0:51:54:70:
77:ef:f9:c8:98:09:6b:00:82:d7:be:75:61:89:9b:
05:54:bf:a5:fc:d1:db:4c:2b:74:38:5b:f7:01:cd:
d2:3d:18:8f:0f:d9:fc:0a:84:9d:1e:8d:33:c4:b2:
0e:82:10:7f:f5:eb:be:03:2d:72:df:d7:a5:c1:73:
03:d1:30:52:6b:c9:55:8d:ea:8b:93:bc:95:ec:90:
63:11:7e:65:00:0f:e3:32:46:b4:bf:86:0f:72:d7:
96:a2:a6:83:22:62:0c:a9:32:51:e3:88:d4:d3:60:
0e:ca:11:8b:f7:08:b6:9f:91:fe:fa:fb:82:76:71:
49:9f:38:98:ad:fd:10:8c:a2:d6:37:07:6b:18:44:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:47:62:F7:29:09:8D:20:12:EF:11:64:D5:8E:5B:89:B5:F1:E8:22
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:0f:b0:8c:75:26:63:94:d9:bf:4a:23:a8:71:ec:18:29:f3:
36:16:79:0b:2f:6a:b6:df:ae:50:c5:27:d4:d8:3b:67:e0:ae:
ef:44:bf:aa:f7:c9:8a:1a:89:80:1e:1d:f0:e9:3a:b6:e5:13:
ac:99:54:53:95:d2:12:be:40:12:48:2b:c1:b1:a9:b0:5b:9b:
76:93:81:d7:22:34:a2:25:cd:86:f7:a7:83:08:57:2b:bc:c5:
c4:b0:31:ce:55:39:97:2a:00:77:c7:40:2c:b3:9e:b6:e4:87:
79:51:5e:04:92:a9:f8:0b:25:e7:ad:73:cc:e5:b5:71:cf:6d:
1b:a2:c4:aa:c4:b5:b5:f7:45:d4:5d:68:cf:a3:c8:ba:11:d3:
46:a3:33:8f:e2:3c:88:91:db:ab:27:e1:b0:70:50:0e:ff:cb:
3a:1d:52:15:3a:7f:4f:fd:af:fa:ef:2f:93:76:9c:88:35:94:
dd:e1:0c:e6:08:18:a0:2a:c0:f5:53:35:f7:2d:45:3a:60:44:
99:d9:f5:35:fb:8c:c2:52:d2:f7:e6:3d:40:2f:af:65:ff:38:
3e:00:71:19:e8:db:b0:c0:b2:7a:a7:ca:07:4a:dd:74:0c:bd:
14:7c:2e:53:5f:8d:4c:61:6c:08:9f:40:dc:08:29:c8:12:62:
6e:76:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:31:15 2025 by rpki-client