Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File: zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier: DzQWswuk+o1kIHdNAflsp3v15or6E3rerGatWBXMatE=
Subject key identifier: 24:76:43:08:2D:E9:0E:D3:18:BB:14:5F:EB:A3:FF:1B:CE:55:EF:A5
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer: /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial: 04FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number: 04FB
Signing time: Wed 17 Sep 2025 02:43:09 +0000
Manifest this update: Wed 17 Sep 2025 02:43:08 +0000
Manifest next update: Fri 19 Sep 2025 02:43:08 +0000
Files and hashes: 1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: t/55U+0zw4EW/7pCBeuc3aEhxx1mwE2V0WgvwFaWpd4=)
2: 556100D6A66711EFA35CD16B762E951A.roa (hash: qJSjsy2o5hJTJDSiAXFVbbjMVoTEJfrC1/c4KDsNvP0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 02:43:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1276 (0x4fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Validity
Not Before: Sep 17 02:43:08 2025 GMT
Not After : Sep 19 02:43:08 2025 GMT
Subject: CN=68ca203d-098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:ef:21:c2:6e:94:7b:98:0c:21:ce:80:48:
5a:74:6e:31:36:26:c6:56:6f:c8:8f:bc:9e:c0:2d:
ac:14:f3:4b:36:33:2e:d4:50:9e:20:ae:fe:d8:67:
7c:86:a0:85:48:76:4e:28:d0:93:59:c0:8f:9c:86:
cd:21:8b:02:01:6a:ea:82:69:6e:87:8a:24:49:af:
85:34:3b:8b:b6:76:ea:b3:86:ff:3e:aa:89:0f:d1:
d1:fb:05:01:de:9c:91:09:d7:e2:03:98:81:75:97:
40:53:61:a5:0c:9a:36:c0:41:54:ef:e9:2d:12:3f:
88:e0:4e:56:c6:bc:ac:64:c7:28:c3:40:f2:61:4b:
79:ca:6b:56:27:46:50:97:5c:ac:8a:79:d5:08:f4:
a1:54:e2:64:c0:ed:5d:3c:2a:ed:86:d9:79:3e:59:
e9:02:36:29:d1:21:5a:2f:7f:42:21:84:5b:cd:ed:
69:3c:7f:ce:5d:64:5e:bc:fc:2b:c0:01:21:6f:1f:
9f:a2:b4:48:8b:a5:52:22:44:3a:e4:94:b4:98:69:
bd:d5:46:56:8f:4f:df:09:52:33:6f:c0:a7:26:57:
16:65:be:3e:d1:38:ac:80:31:10:cf:6b:fe:35:ee:
fe:92:8f:4c:c1:38:f8:be:14:99:4b:a4:dd:3b:38:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:76:43:08:2D:E9:0E:D3:18:BB:14:5F:EB:A3:FF:1B:CE:55:EF:A5
X509v3 Authority Key Identifier:
keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:01:fd:16:e0:7b:08:1f:00:6c:7e:05:e6:10:be:4f:f7:
df:e9:9f:d0:6a:74:33:45:19:86:2c:1f:1d:20:2a:a2:50:71:
5f:c3:3c:71:a1:b8:7f:81:b2:cd:23:99:46:43:71:16:93:0a:
52:d8:87:f5:85:5a:83:50:90:08:37:c7:a4:ee:36:01:21:bc:
ca:14:63:e0:1d:a0:5b:d0:41:16:8f:db:89:cb:b8:c2:1c:16:
13:19:f2:3a:c2:35:01:ae:25:e2:6c:e0:b9:66:ff:fb:a0:78:
5d:82:24:29:86:bf:18:9f:51:3a:c4:83:c6:4a:92:c7:e3:39:
f1:2f:08:90:be:c7:29:b9:04:0b:a5:3c:72:a3:1c:8b:e5:c7:
ab:68:69:8a:95:15:9f:0e:e3:6f:04:d3:c3:a0:8a:06:f4:f5:
e1:c1:b9:14:ea:9b:52:23:6e:9c:a1:be:ea:c6:66:ef:72:a8:
71:01:71:9d:26:09:62:32:dd:83:c5:e5:ac:93:c4:70:2a:ba:
94:07:ac:08:ba:8e:32:1f:86:85:16:bd:57:e5:17:f2:bd:ea:
d2:22:97:f9:13:e1:9e:8f:5e:42:40:59:6f:a7:79:e5:b3:42:
3e:8d:a9:20:41:d5:5e:c2:24:be:ed:ef:d9:a3:58:aa:36:35:
0d:a5:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:49:54 2025 by rpki-client