Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
File: XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft (raw, json)
Hash identifier: 7p2usHw7rVyEi7xE5CIht9W3koaoI+MfRvFlAR5WXZk=
Subject key identifier: 0D:5F:2B:C2:37:DB:4B:1E:D2:E2:DF:0C:C6:20:DA:9C:1D:2A:7E:F6
Authority key identifier: 5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
Certificate issuer: /CN=F36539AEAF/serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Certificate serial: 0149
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
Manifest number: 0148
Signing time: Thu 31 Jul 2025 05:02:53 +0000
Manifest this update: Thu 31 Jul 2025 05:02:52 +0000
Manifest next update: Sat 02 Aug 2025 05:02:52 +0000
Files and hashes: 1: XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl (hash: KFg56lr0e3DRY3e0kQ2l0mXSzrrTNAxHC0eFErzsL+s=)
2: 653C9AA074DB11EFBADDB69E762E951A.roa (hash: 29Tl1qn/Uain4MhwRocZy2PFbVTKXBbVbDJYu8ZXsyM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:08:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36539AEAF, serialNumber=5E226753840D64BAEB023B59416C991F39771EFC
Validity
Not Before: Jul 31 05:02:52 2025 GMT
Not After : Aug 2 05:02:52 2025 GMT
Subject: CN=688af8fc-6efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:68:b6:03:7f:59:87:a7:bf:d8:0d:19:53:a6:
62:1a:be:7d:3b:fc:e5:7e:79:0b:c3:82:e4:dd:29:
95:1e:af:bf:6f:f9:20:ce:7d:62:9d:35:7c:9c:aa:
ba:bb:51:af:7a:93:e5:c9:fd:b5:4d:f7:29:ae:53:
b6:7b:3c:32:c5:b9:62:e0:9f:a8:30:8f:cd:c9:6d:
55:43:73:75:ac:84:47:fc:58:58:bf:d0:78:62:8f:
6a:21:70:f0:67:68:d8:d2:63:e0:58:83:ea:ea:0c:
10:23:9c:c8:80:f5:2b:1e:73:08:86:ae:fb:31:0b:
80:50:04:0f:8b:af:2f:28:35:5f:09:04:96:fa:73:
8f:49:a4:af:c2:38:39:6e:12:56:12:e9:b3:91:70:
ce:9b:4a:b8:67:dc:54:12:38:40:32:6e:40:12:b1:
a5:35:23:8e:47:89:0c:69:12:e2:ad:bf:ca:a7:c3:
64:18:c1:df:1b:8d:0a:90:bc:82:b7:5b:29:72:64:
1e:1b:66:bb:2e:08:bf:2a:9d:e3:28:d1:1f:a5:d6:
2c:82:47:81:96:47:52:de:3a:55:b6:0a:b2:00:fb:
2f:3e:49:dc:ef:7d:09:e0:17:01:bb:15:96:bc:41:
a8:18:1a:68:54:1c:58:1a:77:da:99:34:b0:1a:45:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5F:2B:C2:37:DB:4B:1E:D2:E2:DF:0C:C6:20:DA:9C:1D:2A:7E:F6
X509v3 Authority Key Identifier:
keyid:5E:22:67:53:84:0D:64:BA:EB:02:3B:59:41:6C:99:1F:39:77:1E:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36539AE/C4044E8A74DA11EFBCFA7F9A762E951A/XiJnU4QNZLrrAjtZQWyZHzl3Hvw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:3f:25:cc:3b:ec:82:de:be:56:c0:9c:05:d5:24:c2:ce:40:
dd:d0:c4:5f:a6:bc:50:cc:d3:9b:da:a7:8a:86:7c:d5:c9:9f:
41:e2:51:e3:e7:bc:89:c5:2c:c3:c5:95:41:ba:18:33:08:9c:
ea:55:2d:b8:99:d3:62:fe:35:cb:fe:2e:f4:df:21:39:0d:39:
48:3d:26:8e:45:31:7f:02:dc:b4:88:9b:6a:4c:de:ad:b0:f5:
00:99:3c:e3:a7:0c:87:b8:e5:b8:d4:ae:a6:a2:3a:7a:28:bb:
db:6e:dd:3f:b0:ee:76:1f:ee:de:92:33:44:b4:33:0f:4f:a0:
9b:95:9b:74:99:67:51:2e:78:b1:50:bb:0c:e7:e4:2d:34:be:
0f:59:27:b8:e2:1f:97:a5:a5:39:34:7e:40:e0:f5:bd:18:5e:
21:ac:12:d5:54:0e:34:6c:9e:41:4d:e6:38:9b:57:1a:9b:6d:
b6:75:32:25:08:c2:41:89:ce:ca:7f:8a:7e:a3:8d:2b:a5:c9:
49:cd:c7:08:43:ee:44:b2:eb:44:24:1b:79:cd:26:c8:c6:7c:
f2:b8:00:e6:5d:50:cb:4e:19:52:ca:77:b5:ab:c6:23:c4:1b:
8c:b4:cd:8a:ce:97:33:7f:ce:3a:b6:5e:b8:83:c0:5a:46:12:
58:a4:cc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:21:33 2025 by rpki-client