Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: DZlmYZBEXV/lk9eoDpWbG6un35RwWDJ94o/fIQ1Hn6I=
Subject key identifier: 9A:F1:2E:AF:AD:72:1C:C5:4D:1A:81:CD:07:84:87:5E:7A:DB:CF:88
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 0501
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 0501
Signing time: Wed 17 Sep 2025 02:42:20 +0000
Manifest this update: Wed 17 Sep 2025 02:42:19 +0000
Manifest next update: Fri 19 Sep 2025 02:42:19 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: zELQRFc3iXByR/zaBNnRp31R/mL1a79VHiGN+ZDBcVc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 02:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Validity
Not Before: Sep 17 02:42:19 2025 GMT
Not After : Sep 19 02:42:19 2025 GMT
Subject: CN=68ca200c-74d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:d6:f5:1e:4f:8f:69:e9:ea:7c:fc:1a:e2:
7d:15:39:b4:ef:63:44:54:a6:fe:56:1c:ef:a2:e6:
b7:cf:95:a8:e4:e7:16:4f:58:c3:72:b3:2a:41:31:
f4:3c:1d:9b:a0:f5:38:23:c9:b1:71:14:d2:6c:6e:
4a:0c:c3:3c:78:5f:28:10:8a:58:e4:c8:61:35:cb:
94:00:56:63:7c:f7:34:cd:f1:b1:18:18:51:69:fc:
a8:58:99:21:2a:ff:14:70:32:2c:e9:e7:35:98:e7:
a3:92:8c:95:90:f7:eb:17:11:b5:7b:2b:cb:a6:6d:
50:73:85:6b:5a:59:8c:ef:47:20:b6:d2:2d:1b:5d:
02:f4:5b:6f:48:53:44:99:a9:79:ec:86:ba:ff:88:
2f:bb:8d:37:5d:64:55:78:cf:8d:b7:1e:a9:21:1e:
f1:75:29:a1:03:f8:56:89:f2:33:46:18:fe:0a:96:
c6:df:0c:ef:9c:65:1b:ef:8e:1b:19:0b:77:36:07:
8e:5b:e0:31:82:3b:cc:9c:3f:21:1d:3a:82:68:d8:
74:e4:97:63:a7:c1:8b:fb:b7:4c:93:62:02:35:d1:
e1:77:c0:38:d9:64:c6:c8:fe:a8:8a:c3:3a:13:55:
c4:2e:af:58:03:da:f3:39:cb:91:6b:e3:a2:de:3c:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F1:2E:AF:AD:72:1C:C5:4D:1A:81:CD:07:84:87:5E:7A:DB:CF:88
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:ea:88:d5:fc:02:ac:73:05:6f:8b:da:c7:36:ed:ac:d8:
48:1e:f6:5d:a0:91:a8:8f:56:68:99:54:dc:30:b7:1b:05:5f:
29:d7:03:7b:5a:90:ba:9a:6f:34:9e:f9:d3:21:0d:be:ad:40:
47:2c:15:48:62:e0:f2:2d:8a:f5:85:01:97:89:84:ae:57:29:
0b:f6:d7:bb:a9:3a:da:3a:c4:15:0d:48:22:19:d4:a9:de:74:
4f:2b:e0:f7:dc:fa:9c:a0:da:83:c9:b3:6b:22:09:8f:5a:7a:
c0:8b:9b:f4:1d:61:ea:23:c9:4d:c9:2d:b4:87:48:ac:41:16:
c8:11:91:8b:97:b9:50:c0:a6:a6:49:d2:f2:13:27:ff:10:6a:
03:de:97:ab:ab:f5:03:6a:11:a2:31:be:1b:60:43:89:76:bd:
24:7c:73:04:ae:39:02:c4:81:e9:86:44:58:e1:17:bb:82:39:
27:06:a8:4a:e9:f4:9c:27:72:e5:37:f3:f5:1a:18:87:2e:5b:
e6:fe:af:68:f8:8f:95:69:89:27:12:39:58:29:61:c7:84:ce:
41:bb:9d:d4:ac:2e:0a:65:50:68:bd:48:04:65:5a:aa:22:7d:
e3:8b:e5:60:ef:fa:12:a3:d2:bf:54:e5:6b:7c:35:d9:08:76:
1f:19:17:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:05:31 2025 by rpki-client