Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File: xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier: i2GuVp+jj5y+1t5+LQ49dgcs9ycvWouHoh894iShoCs=
Subject key identifier: 47:2F:4C:47:FB:F7:78:F4:0B:80:AB:EE:CC:A7:5A:69:F7:B9:47:6C
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer: /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial: 0D65
Authority info access: rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number: 0D65
Signing time: Thu 31 Jul 2025 01:03:13 +0000
Manifest this update: Thu 31 Jul 2025 01:03:12 +0000
Manifest next update: Sat 02 Aug 2025 01:03:12 +0000
Files and hashes: 1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: gDVB/cj5f0BREV6J4k3/aQJALnBmfiiau3BM0Tnp7D0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 02 Aug 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3429 (0xd65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Validity
Not Before: Jul 31 01:03:12 2025 GMT
Not After : Aug 2 01:03:12 2025 GMT
Subject: CN=688ac0d0-9416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:59:c8:a8:e5:88:22:8a:6e:f8:27:e8:64:
3c:76:3a:ad:e5:70:95:a7:ab:35:9c:6b:55:c0:c8:
56:ec:c9:3d:a8:78:e0:40:6c:be:04:f9:40:c0:84:
ab:5d:17:31:95:e2:73:75:a1:39:da:1d:c0:87:4b:
0e:be:59:f8:a1:ae:61:22:d4:41:16:90:27:34:42:
c4:fe:c4:5c:f0:3b:22:1f:19:d2:88:1d:a2:4d:f3:
31:be:8d:6c:49:4e:60:b8:72:2a:91:6d:59:ca:cb:
24:b4:10:1a:fb:f8:78:b3:47:d0:77:f3:13:40:b8:
45:de:a9:1b:72:8c:38:99:7f:a8:5d:62:db:c5:cc:
9c:8d:6d:0e:eb:c2:e9:50:be:51:5f:8c:0b:ef:35:
cc:6e:7a:3e:d5:1c:39:6a:81:d8:5f:87:a1:16:95:
e7:b9:c8:76:37:74:a8:82:91:1b:95:b4:ff:70:be:
ea:b2:96:a0:cd:2b:0f:70:f4:46:83:32:9f:48:a7:
8b:96:29:6b:c0:0c:5d:8e:26:9e:f9:fc:82:68:47:
ec:0b:1e:2c:01:8a:81:e9:25:a8:26:5e:5a:c3:4d:
5d:74:84:44:b7:89:35:da:02:13:62:ce:82:02:fa:
4d:67:07:f8:12:1a:55:2c:74:c5:0a:26:50:10:e6:
2d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2F:4C:47:FB:F7:78:F4:0B:80:AB:EE:CC:A7:5A:69:F7:B9:47:6C
X509v3 Authority Key Identifier:
keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
92:a4:1c:c5:64:10:33:cf:ae:d2:fc:c3:da:93:62:4b:f9:4c:
cb:54:bd:96:90:26:9a:70:aa:a2:ce:e1:5f:25:ec:96:d3:67:
46:6c:30:ec:b6:d2:6c:85:16:e1:21:cf:fa:da:0f:4e:9f:49:
e7:79:67:f3:17:cf:83:5b:16:57:9f:7d:e2:41:f4:07:e9:18:
1f:c2:1e:27:83:06:4f:29:57:0c:a5:6b:79:06:0b:dd:7f:7a:
38:b9:f8:c8:27:35:ae:06:47:f3:2e:77:c8:4a:5d:1f:aa:68:
1d:f5:1d:62:c8:8c:c2:3f:c1:13:41:3d:70:31:86:2a:59:bc:
aa:bb:db:39:30:7a:a5:3c:7f:40:af:34:67:2d:33:87:3f:0d:
54:df:3a:7e:01:bb:a8:be:60:fd:c3:bc:64:d0:3f:9d:ae:a4:
5c:4a:e7:41:0a:cb:2f:75:f6:91:3e:5f:e5:75:e6:7f:2e:8d:
7c:3f:7d:bd:2d:7b:d0:2b:e9:38:b8:b1:49:75:c0:0e:ea:67:
1a:65:0f:00:ae:d1:4c:ef:7e:95:ee:f5:e2:d2:2f:e8:b5:98:
76:c5:ca:71:bf:51:5a:60:dc:84:a9:ea:41:22:35:e4:26:50:
b9:fd:e7:40:c3:cc:7f:61:f2:dd:10:15:71:b9:0f:40:ca:e8:
eb:c4:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:16:26 2025 by rpki-client