Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File: xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier: hlJ0OdxqQtmbhyUqugoPtxSqyw4glQ6qBhO/w8ZNL9o=
Subject key identifier: EA:0A:40:4E:34:6A:7A:DD:71:A7:43:7C:61:6B:3E:1E:CC:A4:4B:3F
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer: /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial: 04D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number: 04D3
Signing time: Sat 23 Aug 2025 02:53:06 +0000
Manifest this update: Sat 23 Aug 2025 02:53:05 +0000
Manifest next update: Mon 25 Aug 2025 02:53:05 +0000
Files and hashes: 1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: satY+VT1If/feOpIzplgO61KA8IepRWqbYAaLgmwd3o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 Aug 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Validity
Not Before: Aug 23 02:53:05 2025 GMT
Not After : Aug 25 02:53:05 2025 GMT
Subject: CN=68a92d12-5eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:e1:af:7f:eb:a8:9f:6c:75:18:eb:0b:8d:
3f:ef:5b:b9:f5:1b:bf:7f:71:c4:5a:64:5b:10:3c:
29:68:ca:e6:f6:39:30:5a:ba:f3:51:51:3c:75:80:
bf:0e:5d:16:13:77:8b:c2:17:9b:97:f5:6e:3b:a3:
93:13:2e:bf:51:29:8e:93:8a:54:b8:f5:47:e8:8b:
ab:d3:b2:b8:7a:f4:51:22:2e:70:a9:27:3f:1d:a5:
d8:bc:9d:e1:be:b0:3b:a0:06:2b:ec:0e:1d:99:1f:
18:32:f7:61:c7:55:38:4e:7e:6e:8f:09:5e:87:bc:
e2:b3:65:6f:44:04:40:2c:fb:06:68:a8:1f:57:5b:
4f:5f:01:e5:80:12:da:ab:6f:f5:2e:c5:73:26:ee:
d7:ce:dd:e0:96:55:47:36:d9:c8:67:32:4f:80:39:
43:eb:4a:60:51:06:76:cd:08:3b:8d:4f:26:e6:46:
89:50:f8:d3:8a:3c:58:8a:c1:5c:f3:14:95:3c:d7:
16:db:7d:7c:bb:b0:a1:4f:42:f6:46:3c:bd:40:cb:
b2:64:3b:21:f7:62:61:d4:16:d3:55:1e:53:46:a9:
68:3a:93:6e:d5:52:10:b5:35:43:92:c4:cc:8b:6e:
7f:0b:05:5d:c2:a0:b0:1b:3f:b0:85:31:dd:cd:e6:
0b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:40:4E:34:6A:7A:DD:71:A7:43:7C:61:6B:3E:1E:CC:A4:4B:3F
X509v3 Authority Key Identifier:
keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
12:ad:20:92:3d:94:de:6f:66:99:de:a5:ea:4e:28:67:e3:8c:
4b:1e:dd:e3:dd:27:09:a3:1f:a3:b8:68:c5:2b:63:82:b7:64:
85:c3:6c:97:17:29:80:05:b7:84:da:85:2b:0a:4c:f5:97:a9:
2e:5b:f9:cc:e1:8d:03:45:0e:e8:85:39:4d:0e:bc:7f:c7:47:
4a:51:21:e7:38:18:0a:20:fc:6e:b9:b7:b3:0e:5c:62:73:46:
60:6a:df:cd:33:76:0a:48:ca:f9:a0:85:bb:43:4a:d1:d1:27:
db:07:24:7b:54:a7:af:df:df:ff:30:57:fd:d2:ae:2c:00:e6:
0d:b9:6d:f5:6e:68:e0:67:9e:96:61:ec:7d:d3:9d:6e:05:cc:
c0:53:46:fa:c4:af:f8:33:14:96:6d:5d:2a:41:0a:c1:b5:67:
eb:6a:f7:3c:8a:fe:0a:37:9f:e3:71:46:57:f8:51:09:a0:a5:
42:6d:af:2f:75:c6:8f:a1:a6:0a:b2:03:e8:67:7e:f7:64:d2:
ac:02:15:49:32:a7:e3:a3:b9:1c:6a:18:ab:dd:a6:56:ae:e0:
b7:59:16:7a:33:77:9b:4b:47:f6:7a:e9:f7:7c:27:3c:ea:ff:
47:92:b4:92:6f:d4:0d:1e:f6:f1:da:f1:e0:b5:b5:47:8a:6a:
d9:d5:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:23 2025 by rpki-client