Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
File: XabN45sUTEexNxp5v2LPbtykpzs.mft (raw, json)
Hash identifier: wA7silfy/9el2OXDNsyWaXeA+jtpZjFyICedZ1YpNHo=
Subject key identifier: 18:48:6E:70:34:66:E7:1A:DE:CF:1C:2F:6F:2B:00:6C:63:10:84:5A
Authority key identifier: 5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
Certificate issuer: /CN=F361174DAF/serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Certificate serial: 044B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
Manifest number: 0449
Signing time: Sun 15 Jun 2025 03:07:19 +0000
Manifest this update: Sun 15 Jun 2025 03:07:18 +0000
Manifest next update: Tue 17 Jun 2025 03:07:18 +0000
Files and hashes: 1: XabN45sUTEexNxp5v2LPbtykpzs.crl (hash: 73g401UkOQc8sqpVOlIHnoWTPyB7iRpDGM4ZLx0kF0g=)
2: EFDD06EC090111EDBC15A4C3F1222468.roa (hash: mzBwRw/NsD0Kw5UC1+dnCe3jWxLCxwOLqnhj2973w4M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1099 (0x44b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361174DAF, serialNumber=5DA6CDE39B144C47B1371A79BF62CF6EDCA4A73B
Validity
Not Before: Jun 15 03:07:18 2025 GMT
Not After : Jun 17 03:07:18 2025 GMT
Subject: CN=684e38e7-c9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:20:65:3c:27:a3:c2:78:0d:a6:29:a2:a9:
19:59:da:42:52:aa:0f:e4:e9:33:14:95:6f:8b:77:
0b:17:f4:b7:46:22:d9:88:23:9f:e6:20:27:0a:7d:
f1:e4:1b:3d:91:4c:a9:e0:30:33:de:06:20:69:82:
b2:e6:7b:24:7c:26:5d:fd:9a:81:b6:b8:6a:d7:65:
8a:99:76:9a:ab:25:11:3b:62:3c:b6:b4:f2:0a:85:
6f:18:b6:e7:af:36:01:7d:0e:19:a3:7c:38:a9:bc:
89:37:ec:f9:28:a3:dc:e9:4c:b9:48:53:89:17:9a:
53:e8:80:f1:cf:35:1e:62:86:80:92:3b:a4:61:d8:
8f:9e:d5:2f:57:5f:d6:05:1d:51:7d:0e:0a:83:1a:
58:51:59:83:6c:29:df:4a:c4:ad:70:8b:ca:c6:25:
ad:df:78:52:41:b8:a9:b2:11:c8:ca:72:6c:33:a2:
7a:28:4c:00:ba:2b:90:3d:76:bc:ec:13:e7:ee:21:
ce:92:03:ed:c8:5b:11:dd:3e:25:de:31:47:85:9d:
b9:22:cd:40:ad:60:11:96:6c:17:5f:99:8b:b0:b2:
75:55:96:16:5b:ae:d1:a3:4b:ea:2e:87:00:32:3e:
bc:e9:e6:cf:9a:1a:dc:9e:9e:58:87:1b:1d:a9:66:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:48:6E:70:34:66:E7:1A:DE:CF:1C:2F:6F:2B:00:6C:63:10:84:5A
X509v3 Authority Key Identifier:
keyid:5D:A6:CD:E3:9B:14:4C:47:B1:37:1A:79:BF:62:CF:6E:DC:A4:A7:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XabN45sUTEexNxp5v2LPbtykpzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361174D/25EC10C008F811ED910AC3A5F1222468/XabN45sUTEexNxp5v2LPbtykpzs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:0d:6c:27:cb:36:0b:ac:6c:03:b8:51:1d:5b:4e:c5:34:2b:
f6:c5:f7:88:a2:45:60:05:f1:50:cf:39:c3:76:d0:c2:aa:98:
8b:58:84:68:47:6b:e2:92:e4:8a:f7:0b:de:5e:ec:03:33:41:
72:bb:ec:b2:cd:5d:64:92:4e:57:f5:38:55:5c:cd:cd:a7:e6:
3c:2a:92:f5:ce:39:93:fc:76:39:00:f0:1d:ac:69:d0:5e:08:
b8:6e:4f:14:31:c6:c2:6e:ba:12:36:36:93:f4:a7:73:c5:cd:
e6:47:b9:d2:12:09:86:9e:01:e4:43:c0:25:13:2b:4f:8c:a4:
fb:b3:ae:ad:19:52:36:a7:2a:d1:8a:41:e6:55:58:37:7d:19:
f5:ea:7c:a7:19:aa:9e:da:07:61:50:81:e1:21:11:a9:45:6d:
28:95:16:7b:ae:dd:8d:55:25:bc:bc:38:74:bc:3c:be:8a:b4:
06:9c:c6:ae:f2:5a:29:40:79:34:59:12:f2:d6:e2:af:84:7f:
3a:a5:af:59:16:ca:c5:9f:30:2b:c1:a9:0b:d6:10:28:83:0f:
e5:cb:fc:59:55:36:51:47:fe:9b:69:07:29:7f:f2:86:f0:e4:
04:8a:e3:1d:eb:c0:27:33:54:a8:63:4c:04:4c:18:1d:7a:98:
c6:3b:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:35 2025 by rpki-client