Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
File: xzPtGnZ0IO71PgVhh4EL45NKpSA.mft (raw, json)
Hash identifier: K1KljnleVQI9ksVesAGh9HwnEKzCI6lLGohG8gY7GlM=
Subject key identifier: 86:1D:5E:46:E5:ED:CB:09:1B:3E:C7:DC:02:68:4B:0F:1B:3C:34:DC
Authority key identifier: C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
Certificate issuer: /CN=F36E8BF7AF/serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Certificate serial: 0332
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
Manifest number: 0329
Signing time: Sun 27 Jul 2025 03:49:43 +0000
Manifest this update: Sun 27 Jul 2025 03:49:43 +0000
Manifest next update: Tue 29 Jul 2025 03:49:43 +0000
Files and hashes: 1: xzPtGnZ0IO71PgVhh4EL45NKpSA.crl (hash: uV+wbJPq/Lqum2KYWh+0YZGS5HTQ+KO71urBt+1DoSQ=)
2: 3B9C0E80353211EF900BF8A1762E951A.roa (hash: MElZ7ONbYF4j1b7yLCYGG8hDaXP7MrOVtbEMu319Jmg=)
3: ABF4D51E353111EFA677899D762E951A.roa (hash: yT0hru8iHgEWTgBifTCuUqU1fmi51TY4WdhFSmOp3EM=)
4: AE6AFD92353011EF959AA994762E951A.roa (hash: vSgA9/geIa/jjYfuxFpaP7EurXT4Nf4QWhe78zClV7I=)
5: E4EAD8C4353011EFBA2CCD98762E951A.roa (hash: Afj2XOaT1THQy02YkhBrihtMAAj3OFu2AXPVcjK91qY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Jul 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 818 (0x332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E8BF7AF, serialNumber=C733ED1A767420EEF53E056187810BE3934AA520
Validity
Not Before: Jul 27 03:49:43 2025 GMT
Not After : Jul 29 03:49:43 2025 GMT
Subject: CN=6885a1d7-f153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:d5:d6:31:84:33:53:01:51:71:e6:b5:b2:
b6:7d:21:77:8b:81:4c:03:5d:97:c8:24:95:92:06:
4b:71:18:14:d2:dc:ec:9f:43:96:e6:13:05:af:5a:
fd:7d:be:03:4c:c0:a7:c1:f1:cb:99:82:4e:a8:18:
98:d8:85:3a:ad:da:09:4c:94:01:4b:44:ff:79:50:
42:6d:6d:ed:e3:e1:99:55:76:36:53:48:1f:37:ab:
c8:88:73:e7:16:75:61:ad:f9:d2:1e:6d:f3:74:45:
95:ba:82:91:41:61:7a:0c:25:fd:0f:4f:39:48:da:
44:20:00:5a:61:a9:fe:35:63:35:fc:bf:cf:ec:e3:
f0:21:bd:a5:dd:82:8b:94:c9:d2:3f:af:0e:de:1e:
14:0c:e0:d0:c8:19:ef:4c:d9:a3:cd:d4:8e:e5:fc:
72:b1:f8:b6:3c:d0:d2:e0:ef:d4:a5:67:9c:22:7b:
de:c9:05:7a:cd:18:b5:f8:ce:f9:bd:13:d1:0a:c5:
ee:6e:8b:44:39:80:5b:da:43:b5:11:5b:5d:5e:7e:
77:3a:82:c6:7d:a1:7b:8a:6f:06:3e:ac:11:93:96:
a7:0b:69:eb:68:7c:e6:f9:ef:b4:4d:19:3c:b7:96:
98:1a:7e:ec:ae:1d:fc:e0:51:db:31:ff:54:f1:27:
b6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1D:5E:46:E5:ED:CB:09:1B:3E:C7:DC:02:68:4B:0F:1B:3C:34:DC
X509v3 Authority Key Identifier:
keyid:C7:33:ED:1A:76:74:20:EE:F5:3E:05:61:87:81:0B:E3:93:4A:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xzPtGnZ0IO71PgVhh4EL45NKpSA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8BF7/EEE6EFAC0AA211EEAA1E21434AD9E6FC/xzPtGnZ0IO71PgVhh4EL45NKpSA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:5d:3a:04:9b:d1:5a:63:cb:0b:19:a8:eb:b5:22:52:2d:c8:
44:dd:03:94:f9:10:f1:10:01:f2:53:5a:3f:19:81:f1:02:bc:
79:be:d9:93:24:13:62:3a:c6:72:7f:cb:c1:87:1b:d7:a0:51:
26:03:c9:95:1d:c3:dd:22:9a:4a:f1:7d:e4:b0:f1:c7:83:c2:
87:52:da:41:73:27:2f:aa:3b:ae:ef:73:3f:3a:1d:a7:84:cc:
74:bc:fe:0d:1e:a3:73:3d:a1:e0:3d:0f:a8:72:c1:38:5a:71:
51:fe:61:27:f6:d5:56:a1:e2:0f:9a:2d:ff:5b:cd:4a:61:70:
84:f9:19:ea:d5:d0:d7:80:53:16:bc:3e:96:81:3e:32:e7:f2:
27:93:2e:33:aa:c3:2d:6c:36:4f:0d:73:9b:86:32:ae:9b:e9:
96:09:82:d9:96:8b:cc:f8:e2:13:05:bb:93:aa:31:95:3b:e2:
5b:80:76:d8:4f:09:81:63:9f:1f:5c:bf:6f:96:26:fc:38:20:
ae:42:b7:68:fb:bb:1e:c5:7f:99:7f:b0:55:b6:d4:0e:b6:b0:
6b:84:86:69:90:f1:8f:ae:41:f2:4c:da:bf:21:4b:df:c6:3a:
f5:7b:ca:ed:23:95:11:f1:09:9a:ed:a4:dd:f5:e6:7b:c7:33:
20:47:eb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:54:08 2025 by rpki-client