Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File: xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier: hzKbm6IW6T1FhGymgO3TNLaxQMgH1u9W28Tyz+1qvg0=
Subject key identifier: A9:BC:C5:07:F2:C4:F4:4B:64:11:39:F8:2C:97:5C:C4:4D:F8:43:40
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer: /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial: F9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number: F9
Signing time: Wed 17 Sep 2025 04:49:02 +0000
Manifest this update: Wed 17 Sep 2025 04:49:01 +0000
Manifest next update: Fri 19 Sep 2025 04:49:01 +0000
Files and hashes: 1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: 4bqDXl6ZJz5BM88k0pNx6H5og3gyVKJChxReDoIgS10=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 04:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Validity
Not Before: Sep 17 04:49:01 2025 GMT
Not After : Sep 19 04:49:01 2025 GMT
Subject: CN=68ca3dbe-ae2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:f8:85:84:00:56:c3:ec:57:66:f7:81:85:
2d:7e:e0:58:fd:0e:43:72:c6:a3:cb:15:93:c3:f2:
d8:4a:60:b3:49:58:12:04:2a:c3:50:75:b4:83:32:
ff:45:8d:4c:21:8a:20:cc:9a:1d:be:12:c2:e6:95:
0d:da:0d:6d:10:ed:a8:f6:87:a6:e4:0e:1f:03:c2:
9b:91:e1:a1:5a:e1:3d:61:df:ac:13:71:7a:8d:a5:
55:0c:9d:e5:f6:b6:05:3c:4b:8b:32:d7:3b:35:2e:
85:06:e3:fc:d8:cd:91:7a:4c:d8:93:c4:2b:15:a3:
98:67:46:d4:d9:90:74:96:5d:6a:76:06:64:0c:3f:
75:3a:eb:8a:a4:a3:73:5f:f2:b9:81:3e:c4:45:fa:
8f:59:2c:67:0f:b6:1d:07:0a:63:f0:54:12:68:97:
c6:b6:d7:80:14:41:9f:fa:05:af:68:c1:4f:0e:6c:
5b:77:d5:19:5d:bd:20:7a:85:c5:2d:67:de:7a:3f:
cd:f6:48:e7:9a:a9:e0:9c:a2:1e:97:d4:41:d5:6e:
f0:d5:71:bf:4f:95:d8:ef:3b:af:29:ab:96:44:35:
b8:26:e7:4d:c7:f3:0c:c4:16:d5:dc:7d:c3:e5:0a:
95:5d:e0:59:4b:34:de:3c:4a:96:5e:24:0e:30:8b:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:C5:07:F2:C4:F4:4B:64:11:39:F8:2C:97:5C:C4:4D:F8:43:40
X509v3 Authority Key Identifier:
keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:71:c3:73:ee:09:05:a5:2c:f3:bc:1c:72:a2:98:fc:e2:84:
8c:61:5e:35:5f:ef:7a:31:88:84:fd:96:c7:61:35:fe:9a:0c:
e3:7c:97:98:e5:60:77:fe:ca:00:35:34:56:94:a5:21:21:8b:
82:4b:a6:7b:82:a8:f5:c1:99:e2:29:ec:83:37:b9:0c:22:23:
45:5a:47:26:46:9d:e8:5c:f1:8e:b9:9f:a8:6c:1c:a9:f4:89:
a2:ff:c1:f5:3e:26:07:6c:58:e9:93:60:f7:5c:32:95:29:1d:
6a:dc:9f:fa:26:36:91:64:90:b5:43:fa:8f:be:92:51:b7:ba:
0b:80:3b:30:7f:28:b1:61:74:44:43:c6:14:c4:24:1b:dc:3a:
97:d1:22:d4:9a:38:40:f9:c8:a4:cd:2a:cc:11:7d:ad:8f:95:
b6:42:0e:63:49:7d:af:db:4c:57:06:fd:bf:3e:d7:7e:79:0f:
70:4a:b4:15:3b:16:1c:cf:c2:0d:50:c8:91:e7:c4:50:06:18:
25:80:dd:d9:b0:d3:d5:f0:3c:42:62:ed:ed:2b:9b:e4:75:e3:
da:f0:69:06:32:65:aa:cd:67:09:aa:7f:d9:14:4f:d9:64:8a:
62:8b:f8:d3:a7:71:2b:55:65:7a:d4:41:c6:36:f0:37:69:d0:
da:da:78:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:19:35 2025 by rpki-client