Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File: XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier: O0jvuaq5p/ib+8T+CLL4ij4BAY8qTmtYM74DgMFkTMY=
Subject key identifier: 87:37:54:36:C1:1E:C3:DE:8B:58:E8:8F:4E:16:C7:FD:7A:62:35:9F
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer: /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial: 041E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number: 041C
Signing time: Sat 07 Jun 2025 03:10:20 +0000
Manifest this update: Sat 07 Jun 2025 03:10:19 +0000
Manifest next update: Mon 09 Jun 2025 03:10:19 +0000
Files and hashes: 1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: Q1OoiB+cKbjLTjDjV7x/CWSHBeLpBAt9xZge9+nEgoA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 03:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054 (0x41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682615AF, serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Validity
Not Before: Jun 7 03:10:19 2025 GMT
Not After : Jun 9 03:10:19 2025 GMT
Subject: CN=6843ad9c-3e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:d0:99:eb:db:00:42:bb:95:ff:5f:4e:37:
ff:49:2e:2f:d0:85:dd:0a:c9:04:15:3b:d6:70:ba:
61:e7:bb:99:5b:c5:30:61:e7:1d:5d:0e:57:ce:a9:
69:c8:1c:be:c1:8b:f7:f6:0b:e4:b6:f9:f4:fe:d9:
71:a3:a5:cc:c7:3b:29:cc:81:74:d2:ce:96:e3:65:
6a:f7:13:2b:9e:dc:13:ce:40:92:41:05:9e:7e:73:
05:55:9b:ef:e4:75:b2:9d:6e:38:87:fa:86:53:8a:
3e:ac:c9:3e:7b:f3:a2:1c:15:e6:f0:af:06:3d:c4:
c1:dd:8d:7b:0e:12:34:ed:56:8b:b4:ed:0f:c5:68:
4d:c2:33:e8:74:75:5b:aa:05:77:36:89:02:7b:e1:
90:f5:46:3c:e4:30:4c:8b:66:4f:80:2d:49:b9:3f:
aa:a4:e6:d7:2c:89:10:b0:1e:ed:82:10:fe:f7:8a:
5d:b2:fe:31:e4:f3:9b:e4:5f:b5:c2:ce:a7:c7:b5:
89:be:db:76:22:ec:4f:cb:fd:6f:f8:d8:34:66:96:
29:67:09:c9:31:5c:1a:df:32:64:61:81:06:bb:62:
e6:88:3d:67:f1:db:15:4b:33:50:a0:20:22:0d:b7:
31:72:85:df:d4:2e:2a:8a:c5:86:60:e6:9e:c1:34:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:37:54:36:C1:1E:C3:DE:8B:58:E8:8F:4E:16:C7:FD:7A:62:35:9F
X509v3 Authority Key Identifier:
keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:22:78:09:ae:42:6b:6c:fd:93:ea:b3:31:23:d3:b4:e5:
38:dc:b2:28:4a:ee:16:76:23:85:e9:ac:f3:91:2f:31:8f:a5:
0c:70:49:cb:f7:4c:78:96:ab:4d:5c:f8:39:49:55:e0:10:cf:
92:d1:82:ec:8c:9b:e5:36:54:20:88:4f:2e:de:2c:b3:1b:c9:
be:a1:83:54:68:f6:79:ee:ef:f1:c3:45:a5:70:3e:47:b2:b0:
ad:c0:0e:e9:b9:9b:22:bb:94:c0:c1:6d:71:ef:51:34:7a:d1:
e3:6a:19:92:71:05:b5:51:a6:b0:29:0b:d5:db:b0:6f:4a:01:
e3:c1:46:5b:66:9b:de:9f:a7:dd:3f:18:fd:8e:03:c1:0f:09:
fd:37:d8:53:45:84:5e:b4:ac:e2:f9:fc:db:a4:47:39:a9:3f:
20:73:88:20:ed:aa:95:c7:62:48:69:39:88:14:93:d3:ff:27:
21:3c:a9:b9:b0:af:cf:ed:48:f9:e8:68:42:9e:70:54:59:4e:
a3:8d:f7:34:20:18:62:b5:ad:2e:a4:6d:b9:00:86:9b:02:be:
a3:79:64:da:f0:5e:3c:68:30:e9:24:6c:cd:53:6b:1d:df:2e:
0a:a9:ea:7f:79:29:24:e7:c7:88:de:4a:5d:74:a1:62:a4:49:
47:de:10:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:31 2025 by rpki-client