Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: R7wf1ibIXeIvhlpr4nmiVYaN8Ev41V2k1e+Tpxep8Lc=
Subject key identifier: 4E:6C:10:2A:13:B3:7A:AB:19:25:A5:45:91:C7:A7:A8:21:43:F9:10
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 034D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 0344
Signing time: Sat 23 Aug 2025 03:45:17 +0000
Manifest this update: Sat 23 Aug 2025 03:45:16 +0000
Manifest next update: Mon 25 Aug 2025 03:45:16 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: /XpzQll4SVJqvZoJBKhIO6fJmmiu6pODTT9+kYG58KI=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 845 (0x34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: Aug 23 03:45:16 2025 GMT
Not After : Aug 25 03:45:16 2025 GMT
Subject: CN=68a9394d-5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:08:31:b2:24:d4:0f:d0:fe:3b:6a:1e:b9:
18:b8:49:e7:6d:12:18:93:94:3e:56:5d:ce:f8:f8:
07:0e:b4:5c:5a:01:7c:1d:45:b5:58:43:cf:1d:f2:
34:a3:9f:a5:fa:e6:3e:cd:df:6b:60:7b:2a:97:61:
7b:12:68:f0:67:76:f0:ba:4e:20:7c:ee:5b:cd:48:
5d:e6:83:56:a1:e8:b9:fc:cd:56:3a:e6:0b:14:32:
69:14:a7:4c:a9:15:b9:75:b1:ec:a2:d8:89:58:44:
44:ef:cc:b3:72:34:58:a7:cb:1b:6c:d8:57:19:17:
42:e1:ef:e3:1e:da:20:56:2d:c7:e2:e6:3a:5c:6c:
70:45:43:94:5d:04:c3:1a:14:ff:85:14:73:5b:ac:
1f:a8:4c:0b:91:dc:35:48:bf:85:a2:70:13:2e:7c:
25:17:c1:00:e4:a5:e8:93:9d:10:35:e8:ba:2d:bc:
95:36:46:fe:29:63:f6:69:ca:f9:e9:5c:dc:40:c2:
7c:22:e8:bf:50:bd:2c:92:73:42:bd:fd:99:4f:98:
42:55:11:9c:82:2a:46:62:ce:fa:46:01:98:93:41:
fe:f2:4c:55:f8:12:eb:17:7d:f7:00:02:ef:9d:e0:
11:b6:32:1a:0b:56:5e:f8:dd:1e:87:da:93:16:16:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6C:10:2A:13:B3:7A:AB:19:25:A5:45:91:C7:A7:A8:21:43:F9:10
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:a9:84:7c:71:ea:1b:13:8b:3e:e4:d2:d3:77:93:30:2a:52:
8d:3d:51:f4:07:c2:f5:5c:95:82:63:9f:43:57:08:ab:7d:79:
e6:90:2b:3f:f3:ca:3f:3f:c1:c2:8b:c2:8a:73:25:5e:0c:0d:
22:d2:30:cf:6b:f2:b6:fb:6b:ec:84:b0:d5:fd:db:24:f7:42:
f8:ae:d6:fd:b8:ef:09:a1:8f:68:af:94:a5:63:8b:c5:95:7a:
eb:fd:98:19:ee:b4:d5:af:31:3d:f1:2d:4a:b9:0a:4c:9c:b7:
81:d7:be:72:bb:db:4a:2e:8f:67:80:45:39:08:b4:b5:b5:1c:
c3:49:3a:bb:23:e5:98:22:37:74:56:69:e1:06:96:ed:7e:c2:
7d:5d:a1:ef:21:67:78:48:d6:fa:ea:39:1b:39:f0:b4:0d:f9:
d4:21:4b:f5:68:2c:1f:82:e1:09:44:e1:5d:83:aa:3f:be:34:
3b:12:e8:8a:a7:9f:bc:bd:d2:44:9a:94:b5:10:e0:86:99:c1:
4c:2b:4c:b9:58:1d:fb:cd:95:c7:f8:8f:af:04:25:c8:dd:d4:
0a:2c:f2:d5:06:bb:ec:04:24:07:97:95:12:a3:ea:2b:ae:66:
c3:47:8a:57:4d:cf:dc:ab:e3:c2:f4:e8:d1:1f:98:79:37:80:
38:4d:37:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:40 2025 by rpki-client