Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File: xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier: VvnMqsr2FHOp8hkr2WMgXWOTJvyyMylu6wkYMvxN0xI=
Subject key identifier: CC:CE:D1:53:B4:71:41:96:F2:06:BE:46:19:B7:36:B2:E8:4A:52:5A
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer: /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial: 03C5
Authority info access: rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number: 03C4
Signing time: Sun 27 Jul 2025 03:25:22 +0000
Manifest this update: Sun 27 Jul 2025 03:25:21 +0000
Manifest next update: Tue 29 Jul 2025 03:25:21 +0000
Files and hashes: 1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: jnJz4UFcGRJv74P+tNfHscz52hXsi+sb5vHmlXKC4F4=)
2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 965 (0x3c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8936AR, serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Validity
Not Before: Jul 27 03:25:21 2025 GMT
Not After : Jul 29 03:25:21 2025 GMT
Subject: CN=68859c22-266a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:41:73:89:78:56:af:76:d4:e6:11:73:33:
f3:c0:a9:9d:54:ad:ae:b7:ab:73:d4:54:88:0d:67:
a2:e0:e6:04:83:00:32:f6:88:6d:8e:0b:63:d7:9d:
ce:26:78:12:5f:38:ca:f5:42:f0:e6:dd:79:67:e1:
fe:51:36:de:85:ff:47:70:e0:91:67:b3:94:e1:a9:
44:b4:03:9e:83:38:a2:9b:e8:ab:5a:e5:82:b9:62:
29:b8:23:18:56:88:9c:46:76:31:62:08:5a:45:21:
47:2f:84:90:86:94:6b:51:eb:9a:86:28:81:6b:dd:
60:fc:1a:fd:92:50:37:44:8d:01:f8:c3:1a:b3:de:
72:6f:28:38:b6:a0:e0:c9:a1:5c:fa:2a:39:79:d0:
bd:7c:4a:11:9a:24:a6:6b:57:ff:5c:bd:c0:ae:8f:
9e:97:73:f3:77:c3:92:41:0d:04:5d:e4:7d:78:93:
79:fc:f1:e0:6e:68:39:4d:fe:e4:a8:bc:b9:b1:4c:
37:67:9f:99:19:1a:48:51:e5:7a:43:2a:cb:fa:5c:
8c:20:3c:32:22:a7:59:77:ee:11:0d:f7:fb:a4:88:
b0:c1:f6:f8:e3:3e:11:6a:5b:84:24:14:4b:9d:60:
36:c9:c8:44:d9:38:3e:7a:33:34:43:5a:a0:ab:40:
1d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CE:D1:53:B4:71:41:96:F2:06:BE:46:19:B7:36:B2:E8:4A:52:5A
X509v3 Authority Key Identifier:
keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5c:80:b7:28:d2:bd:c3:cf:0f:8e:4f:a5:26:51:e3:7c:d3:66:
47:be:e8:6c:f2:6e:d1:8a:e1:96:38:7c:6d:31:7e:d4:a1:63:
25:29:41:7b:24:a0:39:c4:c8:85:84:ea:66:3b:6d:06:bf:82:
32:d0:76:1f:a2:4f:a7:29:ab:44:2b:06:69:7c:46:5d:fc:6f:
a5:cb:cf:fd:7c:63:d7:a2:5c:82:4d:af:29:cd:6f:9f:4f:5d:
36:e3:d8:b2:c1:43:81:16:85:ab:12:59:e1:99:d8:9c:8b:2b:
09:e6:15:df:00:6c:4c:a4:b2:10:05:04:32:6a:09:01:79:e7:
69:72:26:25:00:be:61:44:b0:83:7e:68:09:c6:03:3a:85:56:
c8:31:95:f4:f6:6d:14:c4:36:28:70:3e:fc:65:f3:c4:b4:10:
d6:27:37:ac:81:40:8a:0c:06:d1:ff:e1:ff:f4:60:1d:35:0b:
02:80:5f:e9:95:63:f6:64:a6:77:ef:a9:43:12:79:cd:8f:19:
42:aa:9c:49:1c:c3:51:4c:87:f9:4f:15:1f:84:66:dc:7b:0b:
1e:4e:d9:7e:70:ab:e7:af:8e:db:6e:74:6c:07:96:1c:dc:df:
80:03:fb:7a:c2:ba:6d:b1:a8:5f:1a:8a:b4:7d:cf:32:4a:e0:
2d:e5:5d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:23:24 2025 by rpki-client