Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier: ft2PVE7P0jdRFI/ZYbD2TBSb2nO45RZd1kg8LRN3cE4=
Subject key identifier: 90:2E:A7:5A:29:F5:80:22:0A:E9:0E:78:32:6A:7B:24:19:4D:80:CB
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 0302
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number: 02F8
Signing time: Sat 07 Jun 2025 03:47:29 +0000
Manifest this update: Sat 07 Jun 2025 03:47:28 +0000
Manifest next update: Mon 09 Jun 2025 03:47:28 +0000
Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: A+nTc5xgi4ZIp6B+V7WjEvTxxtYj2ZcnuaK+wKOy3Xg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 03:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Jun 7 03:47:28 2025 GMT
Not After : Jun 9 03:47:28 2025 GMT
Subject: CN=6843b651-c46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:47:c7:22:0b:60:28:d4:01:ea:b2:a3:af:
86:ee:37:a1:22:1e:fb:5d:75:b0:4c:6a:09:32:ea:
43:f0:0f:31:67:a4:f5:bd:cf:c5:13:68:60:9e:88:
35:4e:1a:58:01:ae:9f:f3:92:9b:3c:f1:04:9a:fe:
6b:fe:f5:8e:1c:73:7e:77:23:e5:80:53:2a:a8:1e:
e3:be:38:e6:4c:13:44:9c:f7:5a:83:f9:ce:e2:b0:
d3:ac:72:b5:64:a2:62:6a:86:40:71:83:0c:73:bd:
e9:c2:ad:11:74:27:e4:0c:0c:a7:b3:dc:ef:cd:c5:
50:0b:8d:87:bc:5e:92:37:5a:a3:45:90:ef:d8:5c:
db:76:73:3e:20:31:22:41:a4:2d:8e:7e:68:11:0d:
19:fa:fe:32:18:21:10:ab:15:d3:6a:59:b4:06:ae:
3b:ea:df:62:72:91:81:97:28:7c:01:1b:e4:36:79:
3b:5b:a1:06:06:ba:01:e2:6f:72:97:9f:33:20:cc:
e5:12:33:e9:36:e3:86:c8:c9:1f:c5:fb:b7:92:85:
3b:2e:38:2f:ae:d9:cc:9b:c4:6f:81:56:94:92:6d:
61:b5:eb:3d:5c:28:0d:31:fa:65:49:f7:ab:7b:d2:
3a:da:52:9e:75:0a:0d:b5:fb:c6:87:3e:ca:d3:f3:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2E:A7:5A:29:F5:80:22:0A:E9:0E:78:32:6A:7B:24:19:4D:80:CB
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
71:26:33:a6:41:c3:96:9c:95:42:55:2e:c7:41:60:9e:01:77:
26:0b:f1:be:75:88:e6:3b:ec:df:0c:2d:55:32:40:3d:49:4f:
7f:b0:62:09:21:1c:e0:b5:c6:a7:2a:fd:6f:5e:2b:bd:27:e2:
d0:1d:5f:82:3c:56:40:60:dc:22:4b:77:69:55:dc:cd:fa:2f:
ca:6a:d1:62:85:c6:11:41:27:03:c3:bf:76:f5:c3:b6:a5:f8:
b5:cd:52:c3:0e:f7:ba:ae:b4:fb:65:35:d1:b6:ff:d2:64:f6:
8c:df:e6:09:d8:4a:5d:ff:cc:6c:66:44:9e:38:c6:32:a1:48:
3f:08:7a:92:fc:0a:51:63:7f:39:a6:c6:11:f5:3b:ca:12:e6:
2c:b6:3d:4b:46:c6:99:e9:d5:8e:ed:d8:f6:91:08:56:e7:7f:
bf:a7:97:2a:0a:89:bf:b9:73:66:fa:de:96:fe:06:d2:a1:6b:
5e:af:a1:9f:19:60:a8:0d:2f:13:bf:f8:62:f8:d2:7a:b5:88:
37:a9:8d:7a:69:7f:48:86:96:b6:d0:ab:05:0f:92:97:6c:ce:
1f:fd:87:d2:f8:99:56:3f:5d:e0:9d:e3:dc:58:33:97:1c:32:
43:08:73:4e:bc:be:18:76:33:da:69:dd:78:6e:c6:74:ce:1d:
e2:6a:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:13:46 2025 by rpki-client