Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: ZkU8nYAEhFx6/vAkuvbI3Ru29rcN8G4vfITzBk1c+xw=
Subject key identifier: D1:CF:E7:D9:90:19:C5:DA:1B:A8:25:36:28:C7:9E:5D:DD:C2:08:85
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 08F1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 08E5
Signing time: Thu 11 Sep 2025 01:34:22 +0000
Manifest this update: Thu 11 Sep 2025 01:34:21 +0000
Manifest next update: Sat 13 Sep 2025 01:34:21 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: 3vkTJm9YnHgIbcE5bdVTnV3uzlX/xCofTvI+saDt74A=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Sep 2025 01:34:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2289 (0x8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Sep 11 01:34:21 2025 GMT
Not After : Sep 13 01:34:21 2025 GMT
Subject: CN=68c2271e-3473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:92:0a:f6:a5:a9:80:e2:84:e8:3c:51:80:
37:6d:37:5e:94:e9:40:29:d3:2c:bd:ae:0c:34:30:
55:3f:d7:48:63:c3:46:52:09:1c:2c:db:4b:06:b7:
4b:81:37:e1:62:19:42:3a:3c:6f:44:e6:0d:32:77:
62:e0:90:ea:59:15:90:da:0a:47:8c:01:4f:55:00:
07:7b:c7:39:00:68:18:9e:f0:8e:48:c1:2b:1d:12:
fd:8b:45:ce:1d:50:56:16:46:e9:af:f6:5c:43:1e:
70:ca:05:8f:96:e2:f7:b6:7d:4a:a3:ef:8a:63:a2:
77:2f:c1:18:a4:5f:07:d3:bb:52:53:37:70:f5:87:
91:1a:6e:0f:33:50:c7:b3:6e:c1:bd:df:42:07:b9:
b6:bb:ec:3c:8c:0f:0a:24:9b:9f:42:5c:c2:4a:db:
d3:ed:4c:2e:86:5c:3d:61:40:46:f3:b6:92:a6:51:
ae:3c:f9:b4:c3:e9:0b:62:8d:4a:09:5e:2a:3b:72:
4c:38:14:5b:1c:38:82:db:fb:64:d2:70:6d:ab:10:
c7:38:d9:04:47:09:6b:93:4e:6c:ac:76:63:5f:34:
83:07:c2:1e:2a:07:70:ee:77:9e:5a:7b:0e:23:de:
65:f3:25:01:1c:c2:89:b5:4b:24:75:af:68:43:5d:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:E7:D9:90:19:C5:DA:1B:A8:25:36:28:C7:9E:5D:DD:C2:08:85
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bc:99:05:b5:c8:ae:4a:b6:b5:c7:db:a1:72:66:d3:f4:75:
94:41:d5:c0:c5:99:1b:c2:50:96:08:4a:96:9d:b9:65:50:97:
3b:a3:74:6e:78:eb:70:9b:10:28:12:71:1b:46:64:95:87:0a:
9d:3f:a8:2a:23:5e:f2:d5:d4:82:52:d8:a2:c6:fb:76:48:f6:
cd:ce:bd:29:7e:72:d8:a3:24:5e:4e:58:a4:b8:ed:64:38:4d:
f9:fe:8f:6e:c4:b9:84:3a:8a:c9:c7:cb:0a:ac:71:11:b5:c9:
0b:a1:6d:80:6c:34:ad:43:fc:c0:af:49:90:6d:f3:21:9c:f4:
61:58:c4:ae:bc:4a:0e:2d:ac:f7:6b:be:85:48:3a:83:5e:55:
27:8a:33:ad:34:1b:d9:19:19:f5:3e:2d:37:ee:8e:b7:5a:c3:
bb:08:70:5f:61:13:72:c1:a5:b7:98:fc:d7:c7:1a:73:a8:21:
90:0e:cd:c0:9e:22:95:de:90:16:48:9e:06:67:6e:89:da:c7:
25:4e:e4:09:82:b2:c5:bd:49:0b:96:65:f0:bf:d7:be:d5:3b:
7f:79:04:a2:59:f3:80:98:f5:c8:b9:cc:4e:02:c4:bf:45:42:
54:7d:b1:c8:38:46:c3:76:f5:8d:da:b6:70:9b:1b:b6:e8:a8:
11:03:d3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 19:35:48 2025 by rpki-client