Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: sO2nMTlyPCgpUnJ3FoMLqBDOf9zBHXD+tt4ZS4/5DSY=
Subject key identifier: 97:C4:38:5F:E1:AC:0C:54:85:9B:CF:28:CC:F6:06:DF:7B:22:9F:48
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 02B5
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 02B5
Signing time: Fri 13 Jun 2025 04:01:15 +0000
Manifest this update: Fri 13 Jun 2025 04:01:14 +0000
Manifest next update: Sun 15 Jun 2025 04:01:14 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: yVt6UIRo/Gk6V1WBkVGlldYmUStAS3tNn8IqtUtx4TY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: Jun 13 04:01:14 2025 GMT
Not After : Jun 15 04:01:14 2025 GMT
Subject: CN=684ba28b-2f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:7f:24:f7:c1:b9:71:30:c8:d7:37:c7:82:
64:01:bc:f0:b8:ed:63:0b:c7:8f:2f:72:ee:12:a8:
fc:18:85:1f:7e:be:2e:9f:9c:86:65:92:7e:80:3d:
d2:1b:7f:ef:d0:81:7b:da:e2:65:43:ce:29:b3:32:
6f:bd:82:c8:73:56:d5:27:8b:90:01:44:36:03:bf:
5d:c6:5e:33:64:fe:65:5b:70:b7:c6:a4:18:df:98:
6d:be:df:e0:27:5d:80:3d:43:c1:00:6e:3a:75:4a:
de:75:04:70:85:20:70:8e:02:3f:ac:9b:a7:79:37:
f4:c7:00:1e:bc:98:06:e5:a0:1d:13:e8:2f:a0:33:
3b:f6:49:c5:8d:35:a3:7c:91:76:f7:23:1d:66:e0:
8f:18:e3:f4:59:5c:7e:e9:6a:00:c7:82:ce:7d:8a:
e6:4e:db:bb:90:17:95:52:b4:dd:ae:10:88:7e:f2:
dd:e7:17:b5:d9:27:07:51:dd:a0:c5:d3:dd:20:b8:
aa:a9:61:88:ee:5a:1c:5b:b0:52:40:46:12:00:c0:
40:e0:db:48:4f:59:eb:37:ae:d9:75:90:83:79:51:
4f:42:39:1a:b8:a2:97:85:8e:62:c2:95:87:0c:27:
a6:c0:3a:52:89:64:df:81:de:02:5d:49:bf:2b:62:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:38:5F:E1:AC:0C:54:85:9B:CF:28:CC:F6:06:DF:7B:22:9F:48
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cc:00:04:de:76:38:e3:fd:59:6a:df:aa:ad:a3:db:6b:fd:
e1:2b:d1:52:89:2b:db:78:ed:ff:58:bf:e4:d7:73:49:15:ca:
bb:64:9d:41:68:6e:12:43:5a:ec:d0:6b:ef:5f:a6:41:5f:e3:
f2:e0:dc:f7:b1:1a:af:b4:93:07:95:38:2b:fd:f8:35:2b:f6:
26:38:45:52:2c:9a:e5:40:e7:85:ee:7f:87:fb:da:2b:b3:fd:
fb:f8:27:4d:e8:ec:1b:af:28:f7:20:f2:e9:fa:e0:44:b2:82:
f1:65:d4:d0:94:08:ea:f6:ec:a5:5c:ad:4f:97:10:6a:4e:cc:
bd:cd:52:26:30:ee:df:8c:d5:13:2a:9c:28:49:28:4a:4c:ef:
75:1d:1c:76:7e:c0:70:96:bd:9c:98:0d:ed:c6:b8:9b:c6:70:
19:f4:cd:16:15:08:e5:ee:c5:05:a5:2f:fe:61:10:c7:e6:89:
fc:1d:e8:8e:1c:7a:a8:ac:8d:9e:6f:be:85:67:eb:27:e3:dc:
11:d4:e6:cd:92:33:da:c2:ab:c0:5a:28:93:04:64:b1:f5:dc:
c9:85:70:8d:5a:a8:d4:38:10:69:d4:75:59:ff:40:01:ce:90:
87:5b:5e:4d:74:56:36:d9:23:54:0d:de:79:51:d5:00:7d:1e:
a3:c2:9c:3d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICArUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNTA2MTMwNDAxMTRaFw0yNTA2MTUwNDAxMTRaMBgxFjAU
BgNVBAMTDTY4NGJhMjhiLTJmODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDviX8k98G5cTDI1zfHgmQBvPC47WMLx48vcu4SqPwYhR9+vi6fnIZlkn6A
PdIbf+/QgXva4mVDzimzMm+9gshzVtUni5ABRDYDv13GXjNk/mVbcLfGpBjfmG2+
3+AnXYA9Q8EAbjp1St51BHCFIHCOAj+sm6d5N/THAB68mAbloB0T6C+gMzv2ScWN
NaN8kXb3Ix1m4I8Y4/RZXH7pagDHgs59iuZO27uQF5VStN2uEIh+8t3nF7XZJwdR
3aDF090guKqpYYjuWhxbsFJARhIAwEDg20hPWes3rtl1kIN5UU9CORq4opeFjmLC
lYcMJ6bAOlKJZN+B3gJdSb8rYmPjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUl8Q4
X+GsDFSFm88ozPYG33sin0gwHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5zAAE3nY44/1Zat+qraPba/3hK9FSiSvb
eO3/WL/k13NJFcq7ZJ1BaG4SQ1rs0GvvX6ZBX+Py4Nz3sRqvtJMHlTgr/fg1K/Ym
OEVSLJrlQOeF7n+H+9ors/37+CdN6Owbryj3IPLp+uBEsoLxZdTQlAjq9uylXK1P
lxBqTsy9zVImMO7fjNUTKpwoSShKTO91HRx2fsBwlr2cmA3txribxnAZ9M0WFQjl
7sUFpS/+YRDH5on8HeiOHHqorI2eb76FZ+sn49wR1ObNkjPawqvAWiiTBGSx9dzJ
hXCNWqjUOBBp1HVZ/0ABzpCHW15NdFY22SNUDd55UdUAfR6jwpw9
-----END CERTIFICATE-----
Generated at Fri Jun 13 13:14:24 2025 by rpki-client