
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File: xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier: 2TO9qiMUBKR2+MPtqdh6ZVuvosOl+f5fI8JoXyXXS6I=
Subject key identifier: 23:C9:5C:F6:02:78:42:1F:29:7C:2C:43:2F:E9:F9:74:2E:2C:CA:77
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer: /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial: 0484
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number: 0484
Signing time: Fri 06 Jun 2025 02:54:47 +0000
Manifest this update: Fri 06 Jun 2025 02:54:46 +0000
Manifest next update: Sun 08 Jun 2025 02:54:46 +0000
Files and hashes: 1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: 1uIQGJq6ICMoOZsnbFbFkkVga1Id9okjumuSOCuPV+g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1156 (0x484)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Validity
Not Before: Jun 6 02:54:46 2025 GMT
Not After : Jun 8 02:54:46 2025 GMT
Subject: CN=68425877-9bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d9:04:47:61:f5:44:20:2a:d2:e8:97:e7:4b:
58:47:6f:87:e8:7f:a9:58:fb:d4:5b:1b:d8:2d:b3:
d7:6d:27:1f:a9:84:b4:7d:7e:b4:be:81:2c:49:6d:
5f:b1:51:68:de:c6:11:2b:ec:b9:20:79:86:04:de:
5e:77:00:87:29:20:36:4e:b2:28:c0:a2:b8:de:3a:
43:1b:e8:70:95:f6:c7:4c:fe:db:60:c3:84:d4:1f:
ba:65:1d:5b:e1:fb:cb:e8:bf:3c:37:fe:a1:bf:16:
02:f6:8f:b1:cb:b2:d0:87:09:2f:14:ff:13:3b:a3:
7b:8c:5d:11:18:3f:6c:70:a1:26:22:af:a2:8d:42:
de:54:17:25:3a:35:83:06:10:b4:e9:71:da:1e:22:
dc:e5:58:76:2d:f0:de:32:5a:fb:ab:fb:ed:d4:d4:
1d:fb:9d:7e:16:20:b3:5c:d0:53:4d:5a:17:ec:8e:
e6:11:56:81:c1:18:33:db:52:5d:4e:02:77:a5:00:
a5:b1:2a:cf:9c:84:22:24:e4:1c:90:6e:be:5b:13:
a2:20:fe:4f:8a:1d:19:3b:59:01:aa:6b:62:0c:fa:
51:25:d8:01:97:28:a0:38:0b:ae:0a:e6:9a:b8:62:
4c:e7:c3:8f:06:f6:c3:7e:a0:26:70:be:65:cd:be:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C9:5C:F6:02:78:42:1F:29:7C:2C:43:2F:E9:F9:74:2E:2C:CA:77
X509v3 Authority Key Identifier:
keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
37:46:7e:6b:fe:14:0c:ee:67:96:a3:b6:1f:0d:74:ae:49:70:
3b:74:9a:04:7e:1f:5a:18:26:5a:2f:f1:03:9a:fd:40:d1:f0:
3f:4a:da:9c:b9:77:57:53:5e:c1:11:6f:f2:80:47:da:a4:f4:
53:f9:17:7c:4b:14:54:0e:a2:b3:99:8b:b5:ff:be:8a:8c:af:
5b:b0:7d:2f:27:41:d4:60:7c:f9:1c:8c:82:af:44:b8:bf:37:
42:30:97:49:18:bd:21:86:61:e9:bb:79:dd:8a:6b:8e:78:8d:
e7:ad:30:95:df:8e:12:39:e2:fb:25:0a:86:00:31:a4:98:5e:
c5:90:ef:b0:ff:25:4e:01:ad:be:a8:dd:ed:40:3b:e4:71:66:
2d:94:d0:54:73:b2:49:7d:0e:f1:9d:5b:1d:16:a4:9a:4d:e8:
72:21:0f:a6:da:9c:c1:74:9e:6a:ab:b7:92:06:49:d7:37:fd:
5d:e2:5d:c7:a7:9c:9c:08:7c:47:96:4a:f8:90:dd:c4:56:72:
35:50:41:9c:4c:eb:c5:65:a4:57:70:67:6c:18:54:02:6c:82:
ee:63:d0:b9:9d:75:96:ed:8a:c4:0d:7e:71:50:44:a9:66:8b:
e8:8c:d9:20:da:65:1a:d8:ea:eb:ab:dd:49:75:44:87:8f:46:
2c:3e:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:48:10 2025 by rpki-client