Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: sWR5F0VOH6pLOWNtTx21vhpzl4oXWQua0CMvm4nmELs=
Subject key identifier: 79:F3:9D:EE:58:30:9B:AD:C3:26:31:71:7D:F6:C9:B2:04:00:B2:5A
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 02CD
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 02CD
Signing time: Sun 06 Jul 2025 03:59:09 +0000
Manifest this update: Sun 06 Jul 2025 03:59:08 +0000
Manifest next update: Tue 08 Jul 2025 03:59:08 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: pxx/pMHpBZezR+/xXhBgGITjvnqjOqXhNY5mXXnGsPw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Jul 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 717 (0x2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Jul 6 03:59:08 2025 GMT
Not After : Jul 8 03:59:08 2025 GMT
Subject: CN=6869f48d-12d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:03:4f:56:b4:df:94:26:9c:e9:28:d9:81:
ee:52:d6:03:39:fe:96:c1:2b:48:e7:ef:f4:cd:4a:
21:c0:ad:85:ce:b4:90:33:ad:b5:00:51:58:a5:a2:
1d:1d:44:57:6e:ee:df:ab:f8:f8:3a:98:43:c2:76:
c0:3c:7e:2c:81:a3:9e:19:60:1d:10:cb:c7:72:6e:
8d:e0:18:38:04:5e:32:c0:9b:9a:13:b3:e4:85:b1:
ac:d7:bc:62:26:41:74:b9:73:3b:67:14:16:b2:25:
5c:71:a9:40:08:40:47:9a:b4:10:04:00:b3:fe:0c:
9d:38:45:05:c4:81:6d:89:3a:e6:4f:50:0b:94:e6:
34:4c:0b:7f:72:6e:dd:87:ef:e3:46:77:f3:60:4e:
13:b4:4f:93:ca:a7:60:65:92:23:b9:c0:fa:1e:e3:
8b:85:4f:80:89:7d:52:a5:21:34:db:cb:f7:18:4e:
09:96:0b:9a:a5:0d:ea:8c:f4:fe:10:30:01:fe:97:
fa:67:cd:4f:e6:81:40:0a:37:b8:cb:79:8a:9a:52:
d5:06:8c:3d:91:ba:55:01:ff:a9:a5:ad:71:e5:8e:
dd:d1:54:f4:42:66:b2:5a:a3:1f:bb:f4:f0:44:76:
09:a5:b0:c1:11:bd:75:57:05:5a:e8:86:a7:23:59:
af:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F3:9D:EE:58:30:9B:AD:C3:26:31:71:7D:F6:C9:B2:04:00:B2:5A
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b9:99:ea:f2:ca:e5:24:b2:07:fc:5a:55:7a:be:c4:2f:67:
ad:ba:5c:02:2e:27:29:b2:ec:8d:39:8b:fa:51:f6:e6:e6:be:
2e:50:1e:ae:dc:21:e4:0d:0d:87:f7:19:0a:fe:b2:52:0f:82:
a3:0a:57:ea:a6:5d:21:f1:90:3f:c0:20:5c:69:fb:3f:8e:47:
4b:e9:08:59:6b:23:22:63:aa:a7:df:9a:7d:5f:e5:31:17:be:
82:b3:c9:87:f2:ef:c5:8f:17:f3:fc:14:17:52:cd:9a:b4:6c:
07:83:40:c0:3d:b2:2f:d0:e1:c1:b9:ed:37:74:c0:b7:51:55:
a9:10:ee:d3:e3:ac:05:5c:72:92:a2:72:df:57:4f:38:b0:66:
02:86:ab:0b:54:cb:2a:76:f8:3d:b0:97:a3:17:0e:d3:64:e1:
a6:f7:32:61:bf:81:8e:49:93:53:01:83:1e:27:49:3e:84:b4:
77:6b:a1:72:4c:69:06:66:82:35:53:08:c2:c6:41:5a:8e:9e:
96:e7:b7:10:ee:c8:d3:97:94:26:43:8d:b0:54:d8:3c:1e:14:
1e:b1:0a:6c:8c:75:ab:c5:91:39:ff:97:ab:65:0a:32:61:bf:
ee:0f:29:0b:1c:a9:05:b3:dd:bd:04:7a:7d:a3:1c:61:52:8b:
91:24:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 13:38:47 2025 by rpki-client