Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: lNGNP0R4gzeSZbQ6UD85D5qGK9QC711lKm+2Y0nvtm8=
Subject key identifier: AE:EC:B5:F6:87:6E:80:24:35:ED:0A:DA:B5:66:F3:F8:5B:B5:98:69
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 0302
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 0302
Signing time: Thu 31 Jul 2025 03:57:54 +0000
Manifest this update: Thu 31 Jul 2025 03:57:53 +0000
Manifest next update: Sat 02 Aug 2025 03:57:53 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: U1Jy6O2arwvbZWrw3u4UzlTTii0qE5lX5CSlzEarE34=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Jul 31 03:57:53 2025 GMT
Not After : Aug 2 03:57:53 2025 GMT
Subject: CN=688ae9c2-888f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c2:62:3e:ee:45:36:e5:16:44:0c:da:61:f7:
dc:9c:ec:e3:04:bc:89:c9:29:99:92:fc:6e:9f:b3:
3b:2d:fd:8d:e4:6b:1b:88:42:a0:a9:54:9d:ee:3c:
2a:25:a4:c1:d5:ff:13:48:af:6f:b1:44:18:13:8b:
2e:4b:a1:fa:99:93:3c:3f:1a:93:08:5a:92:32:4c:
c2:1b:46:86:b0:eb:e5:b0:31:76:a3:18:7b:a3:8f:
c0:41:52:cc:1f:e9:ff:b8:8f:d4:2e:36:bd:fb:c6:
7d:9b:a5:b9:84:81:88:e7:42:de:8a:77:d0:13:f6:
0a:69:3e:03:1a:74:8d:8f:b2:d6:11:96:13:04:a6:
31:47:8e:c6:2d:1b:79:85:69:b4:1b:b0:6c:7c:2d:
00:79:fc:33:41:11:03:fc:0c:4a:30:56:ba:b7:b9:
17:a9:78:f2:aa:ab:db:be:54:f5:6f:74:78:11:54:
cc:bc:9a:8f:e0:f3:69:7b:28:21:9b:a8:2e:23:77:
cb:e0:cd:5b:4b:29:b1:ec:f9:7e:c9:72:ee:55:50:
0f:e0:92:db:49:9e:5c:91:7d:33:b7:04:13:29:40:
83:44:a6:11:54:f9:ae:a6:d1:4a:2d:05:2e:44:70:
b7:24:d4:76:63:99:e0:05:fb:2a:18:2d:a6:cf:a0:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:B5:F6:87:6E:80:24:35:ED:0A:DA:B5:66:F3:F8:5B:B5:98:69
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e3:ee:dc:a5:c7:88:8d:84:7f:c9:df:26:3f:39:62:86:87:
2a:e2:fc:30:f8:90:2c:51:3c:b8:9a:fa:9a:67:45:2c:0f:ed:
14:c6:7f:eb:00:54:4f:67:84:52:7b:52:ca:91:ad:f2:c8:3e:
34:6e:89:3a:94:d6:40:fa:64:13:90:95:b1:9e:44:dc:54:68:
7f:2a:34:38:47:42:46:30:6c:2b:31:52:fc:0e:6a:a1:ab:89:
1a:a3:f0:21:73:1e:31:99:ce:ef:0d:b7:1c:9d:45:a7:c0:64:
10:ff:76:5f:3f:7d:b7:85:78:8c:08:7f:fe:35:97:88:d0:9c:
8b:81:1a:36:bf:26:a4:62:bb:5b:af:52:e3:ad:8f:0c:b6:a1:
7b:1b:9e:38:27:2b:c2:1f:5b:40:7b:47:39:eb:88:04:52:03:
59:8d:2c:bf:5d:17:a6:d3:64:c8:b6:7d:46:96:ab:95:3b:0f:
0b:d1:64:6a:31:05:f2:09:6f:f9:1e:a4:cb:6e:7f:c4:eb:65:
84:8d:00:90:c5:23:dd:30:2e:51:d6:b0:f9:f7:ae:f0:be:17:
e4:1b:8a:3f:0b:d8:16:b8:8b:a4:82:f9:e8:c4:c9:23:5e:67:
ac:e1:3a:42:aa:aa:ce:45:b5:c7:56:2f:bd:ad:a6:56:cd:f0:
e6:60:a0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:06:13 2025 by rpki-client