Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier: ClplCjDqfZYY1zKXsQcwSfluVHkV7RxVhpVNnaYbZOE=
Subject key identifier: 52:BB:30:74:09:2B:1B:F5:25:BB:92:E5:F3:49:B4:1E:A3:B2:80:20
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer: /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial: 0499
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number: 0497
Signing time: Thu 31 Jul 2025 03:04:53 +0000
Manifest this update: Thu 31 Jul 2025 03:04:52 +0000
Manifest next update: Sat 02 Aug 2025 03:04:52 +0000
Files and hashes: 1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: JzHx3oG4/XyIFyEz5HkDWCR4WmTKPWoAmajBhXTFpzc=)
2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1177 (0x499)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Validity
Not Before: Jul 31 03:04:52 2025 GMT
Not After : Aug 2 03:04:52 2025 GMT
Subject: CN=688add55-2baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:d2:91:c4:8b:4b:87:72:ff:ab:ae:18:82:
21:b3:b3:db:11:7e:9d:d7:f7:28:ff:5b:0a:09:6b:
73:6f:8e:59:94:52:14:74:53:31:20:31:0c:e5:c2:
2c:c8:5d:cc:33:7d:72:52:ed:d1:f9:8a:78:bf:1e:
59:4c:d8:9a:48:b8:12:46:d9:e8:37:a2:53:4b:5b:
dd:3b:3a:3a:a8:3d:f5:fa:27:e1:c9:48:50:a5:0d:
c7:77:63:b7:2f:a9:9a:e3:ef:57:82:9f:0c:94:5a:
ea:53:40:c2:2f:8a:f8:22:3d:f8:02:4d:d6:2a:86:
fe:1d:7c:5e:e1:8f:f9:8b:bd:4c:17:63:e1:d0:90:
df:99:bc:8d:6c:f9:45:2c:72:d7:31:82:ad:1d:d0:
64:ea:93:4a:9f:7f:a0:27:1b:42:7d:66:60:87:64:
77:a7:db:f8:7e:de:f1:99:3d:b2:8b:1e:dd:07:f0:
39:1a:ef:f6:53:9c:a7:c2:b3:32:da:0d:75:47:c4:
bf:de:7c:86:2f:59:97:3d:9e:48:7b:d7:51:5f:38:
77:26:cf:c5:39:35:af:b9:0b:3b:53:86:f9:e2:58:
f5:98:fa:aa:57:93:0b:79:d9:3f:f5:9f:66:5c:4e:
69:93:79:84:23:5e:ad:86:f3:95:6c:f9:c1:6c:23:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BB:30:74:09:2B:1B:F5:25:BB:92:E5:F3:49:B4:1E:A3:B2:80:20
X509v3 Authority Key Identifier:
keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:b6:32:42:e1:dc:f5:a1:cd:79:7a:22:75:c4:1a:e5:27:c9:
21:38:77:0a:f8:45:26:8f:38:e6:58:c1:ab:4e:fd:67:d1:05:
eb:e6:6d:00:fa:cc:59:b0:3f:35:5c:01:e5:5f:7d:7b:bf:86:
67:86:8f:de:68:69:b6:3b:5a:87:b2:f7:cc:d8:b8:0e:41:00:
a4:7f:82:d0:d0:41:28:e4:9c:ff:e5:29:5b:82:cb:9d:6f:8f:
fe:ee:ad:01:8c:09:97:a1:99:8b:25:f6:c2:b6:9c:7a:3b:7f:
3f:cf:f9:2b:a4:35:94:55:91:58:0d:c9:07:ad:ab:ea:d2:d8:
71:e4:2f:43:32:d8:b3:6c:e7:7f:0b:c4:20:7c:0c:8e:3b:66:
09:20:11:10:be:7b:20:08:88:e7:77:9b:09:3d:8f:42:f7:35:
4b:48:1b:f9:53:f7:36:d0:9d:61:f3:be:19:95:18:64:81:33:
93:34:63:01:bd:75:f0:e1:d7:b2:4b:58:c6:41:eb:55:4b:39:
1d:7f:63:67:1c:ab:14:f6:4d:b5:ea:3c:58:14:d9:be:2d:a4:
f2:9d:3f:0f:40:a7:20:74:69:6a:7e:59:e9:7c:a2:54:cf:a9:
05:cc:62:f5:63:9a:a0:7f:c7:5a:89:c5:36:29:f6:79:8a:e1:
56:81:00:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUJBRjExMC8GA1UEBRMoNUQ1QzJBOTZCMkUzNzJCMEFDNDdGNDhEQkRDN0Q3
RkQxRkJEQjEzMjAeFw0yNTA3MzEwMzA0NTJaFw0yNTA4MDIwMzA0NTJaMBgxFjAU
BgNVBAMTDTY4OGFkZDU1LTJiYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPuNKRxItLh3L/q64YgiGzs9sRfp3X9yj/WwoJa3NvjlmUUhR0UzEgMQzl
wizIXcwzfXJS7dH5ini/HllM2JpIuBJG2eg3olNLW907OjqoPfX6J+HJSFClDcd3
Y7cvqZrj71eCnwyUWupTQMIvivgiPfgCTdYqhv4dfF7hj/mLvUwXY+HQkN+ZvI1s
+UUsctcxgq0d0GTqk0qff6AnG0J9ZmCHZHen2/h+3vGZPbKLHt0H8Dka7/ZTnKfC
szLaDXVHxL/efIYvWZc9nkh711FfOHcmz8U5Na+5CztThvniWPWY+qpXkwt52T/1
n2ZcTmmTeYQjXq2G85Vs+cFsI7U1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUrsw
dAkrG/Ulu5Ll80m0HqOygCAwHwYDVR0jBBgwFoAUXVwqlrLjcrCsR/SNvcfX/R+9
sTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFCL0I1MTFGN0U0RjI0OTExRUNBMjc5MTE5MkYxMjIyNDY4L1hWd3Fs
ckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hWd3FsckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUIvQjUxMUY3RTRGMjQ5MTFFQ0EyNzkxMTkyRjEy
MjI0NjgvWFZ3cWxyTGpjckNzUl9TTnZjZlhfUi05c1RJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUtjJC4dz1oc15eiJ1xBrlJ8khOHcK
+EUmjzjmWMGrTv1n0QXr5m0A+sxZsD81XAHlX317v4Znho/eaGm2O1qHsvfM2LgO
QQCkf4LQ0EEo5Jz/5Slbgsudb4/+7q0BjAmXoZmLJfbCtpx6O38/z/krpDWUVZFY
DckHravq0thx5C9DMtizbOd/C8QgfAyOO2YJIBEQvnsgCIjnd5sJPY9C9zVLSBv5
U/c20J1h874ZlRhkgTOTNGMBvXXw4deyS1jGQetVSzkdf2NnHKsU9k216jxYFNm+
LaTynT8PQKcgdGlqflnpfKJUz6kFzGL1Y5qgf8daicU2KfZ5iuFWgQCJ
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:46 2025 by rpki-client