Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: i6jqp+YubD2D4rzjy+RTjynEEN5NcDtaEtU/SJprgHc=
Subject key identifier: 5B:28:08:9D:A9:A2:0A:82:B8:2B:E4:43:9B:8F:46:47:74:31:70:61
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 0366
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 035D
Signing time: Wed 17 Sep 2025 03:32:24 +0000
Manifest this update: Wed 17 Sep 2025 03:32:23 +0000
Manifest next update: Fri 19 Sep 2025 03:32:23 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: LNGtItbZFDl0N0FBiX5CHtmZiba/eyqngdEBVd8JGpA=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Sep 2025 03:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: Sep 17 03:32:23 2025 GMT
Not After : Sep 19 03:32:23 2025 GMT
Subject: CN=68ca2bc8-a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:a7:e3:fe:1a:d2:4c:0e:79:e9:0b:00:92:
3c:d9:68:88:8a:b2:1d:06:01:3a:cf:28:4d:8d:32:
d1:04:7d:da:a0:85:80:4b:9d:1b:fe:3e:dc:88:ee:
3f:14:39:9f:7e:e8:bf:21:e3:c4:c7:6b:f3:b2:54:
c9:0e:bd:bb:48:6b:9f:f2:38:4f:45:27:16:0b:f6:
b3:31:78:dd:e1:ac:f4:05:96:36:a3:6b:8c:57:53:
20:45:84:95:1f:1d:8a:5f:aa:81:f0:dc:58:00:95:
f8:4c:a3:2c:e5:6f:73:c7:40:1a:07:97:5e:3a:c2:
e3:88:d2:ce:15:4d:0e:b1:84:2f:28:8f:cf:55:f3:
e0:26:70:e8:97:04:a1:1d:f3:d4:62:81:8f:20:25:
e7:d0:61:28:93:47:67:b7:77:f4:1b:9f:d8:66:11:
a4:91:94:52:d5:86:7b:89:fb:44:07:69:d6:65:a6:
cf:04:69:f6:7b:53:00:7e:eb:dd:4e:f1:6a:bf:1a:
47:07:0f:ef:13:f2:08:ed:db:6c:c8:5d:52:17:c9:
ca:b1:ae:86:ef:83:2f:77:98:76:83:7a:e6:ee:8f:
b1:a5:19:c8:c0:97:e0:70:c0:34:40:2c:80:2b:5e:
bb:0b:aa:1c:55:56:75:56:f1:93:1f:12:ea:21:0e:
02:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:28:08:9D:A9:A2:0A:82:B8:2B:E4:43:9B:8F:46:47:74:31:70:61
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:a7:c3:cf:35:95:39:4b:b9:ec:13:2e:2c:9b:4f:0c:92:9b:
da:8d:41:7a:a3:51:83:81:00:25:6b:d3:89:f9:7e:20:13:a9:
b8:ff:27:fe:7f:c9:5f:87:bc:8f:f9:ac:99:a9:08:73:8e:c4:
2f:0c:6a:ea:4d:17:0f:d3:de:5a:10:47:37:d2:c3:30:51:23:
7f:91:dc:43:43:bb:6e:61:a9:d4:73:a5:9f:70:3a:e0:8b:16:
51:44:3e:2f:e0:e7:a0:88:7b:e6:21:d9:d4:d6:1d:88:b8:37:
6c:21:51:5c:d6:4c:d9:71:4c:67:f1:e0:2e:2f:97:d3:11:a2:
b7:08:e5:98:e6:0a:62:37:02:1b:3f:e1:16:76:04:a9:77:33:
3e:3c:7c:20:10:85:c3:6d:4b:13:bf:3b:79:69:bb:f5:0d:ab:
66:2a:43:1c:8d:38:6e:3e:46:37:52:ee:7b:f5:39:b8:8a:b4:
44:0e:86:1b:c6:08:ed:19:9c:08:23:73:54:3d:0d:05:be:42:
4a:85:6b:9e:44:01:86:33:b3:31:01:87:48:a4:22:45:ad:26:
05:10:d5:46:2f:a2:64:c3:bd:bb:95:cd:d0:86:43:45:e5:56:
e4:d9:bf:8c:69:59:59:3d:d8:f9:82:b5:6e:05:ec:22:1e:03:
d1:97:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 01:07:44 2025 by rpki-client