
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File: XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier: /x2GUmcYeOvSdRUOPjVcZagEFAaSvHwgkMEe6w1HC2s=
Subject key identifier: 5D:AC:E5:66:55:97:B6:A6:3C:0B:6C:55:99:51:56:5A:D1:20:F7:8C
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer: /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial: E5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number: E4
Signing time: Wed 30 Apr 2025 04:55:41 +0000
Manifest this update: Wed 30 Apr 2025 04:55:40 +0000
Manifest next update: Fri 02 May 2025 04:55:40 +0000
Files and hashes: 1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: L4iER4CJbq9RaHOGPTWuyfQdyQ1T3JfvskipsRyZE1M=)
2: F68C77C279C811EFB5AD7293762E951A.roa (hash: w7SzFM4rVLShHyz8Uu4JGbAwVkZlRI11cdVpH3TTF5M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 May 2025 04:55:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 229 (0xe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Validity
Not Before: Apr 30 04:55:40 2025 GMT
Not After : May 2 04:55:40 2025 GMT
Subject: CN=6811ad4d-721d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:c1:46:56:b5:13:8d:92:b6:0c:8c:76:8d:
48:bd:b2:11:a9:24:1d:7f:fd:61:95:f3:52:ea:45:
7a:f8:88:96:19:1a:73:c1:8e:e3:93:d8:8e:26:9e:
54:99:e3:cf:3c:56:74:27:41:6d:c7:0b:36:d7:71:
7f:1b:84:b1:c0:69:93:3f:92:9e:8e:2b:e7:69:4f:
b5:7a:29:5f:13:d4:96:53:45:80:a9:91:4e:12:a9:
ac:ec:9c:29:ec:c5:6c:49:44:52:f1:40:fc:36:41:
44:77:17:cd:28:46:63:c2:e4:11:6a:97:64:5d:a0:
fc:d7:83:56:39:58:0e:5a:6c:a6:e8:f5:fa:27:c6:
85:e4:2b:54:29:04:c4:5a:e9:f3:bb:de:ca:ba:8a:
86:89:58:e8:8e:91:47:a7:62:2e:53:98:7f:d4:06:
da:ab:0a:d4:01:71:9c:9f:ed:14:ff:e5:f3:be:31:
fd:fb:7f:b2:11:f5:21:bb:60:c3:95:01:79:dd:05:
de:0d:88:d0:39:f4:8a:76:fa:f5:af:34:2b:58:41:
55:9d:2a:60:b6:ad:8f:62:a6:98:d6:db:46:84:7a:
45:5c:8a:bf:0f:31:b8:df:80:5a:36:e5:bf:31:d9:
eb:5a:ce:34:b8:49:d0:95:92:fb:f9:5b:12:ca:39:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:AC:E5:66:55:97:B6:A6:3C:0B:6C:55:99:51:56:5A:D1:20:F7:8C
X509v3 Authority Key Identifier:
keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d7:96:73:b1:84:26:a7:7d:34:5a:36:2e:4c:9b:52:e3:9c:dd:
9b:cc:68:73:6d:73:26:91:bf:ad:9c:bb:8f:55:58:eb:24:83:
67:30:89:f1:01:49:41:03:ca:af:05:b9:54:8c:22:89:31:2a:
7c:31:1a:cc:7c:b8:b2:35:de:23:e6:af:b2:de:4d:75:53:27:
96:4f:29:db:ae:fd:77:73:72:eb:20:e7:2d:88:59:4f:d9:f0:
76:4b:01:cf:92:1f:5d:b1:0e:1f:c3:e5:f1:b4:46:be:4f:d7:
35:22:63:38:83:f5:a2:e4:a6:7a:53:04:77:d3:58:91:85:f8:
a9:f6:99:3c:98:f7:b0:2e:ae:9a:bb:31:f8:28:3c:c0:30:22:
dd:4a:16:24:9e:04:75:f8:6b:3a:70:af:09:08:4a:55:9f:4e:
9f:73:fc:28:c5:d2:66:16:a0:07:16:f0:11:d6:16:ac:d2:b6:
2f:59:68:92:e8:61:62:e0:2d:e0:8b:33:2d:19:fe:68:02:6f:
01:cc:51:9a:8d:5c:93:c6:f9:d5:76:3a:5f:45:9b:14:a4:de:
ec:7c:76:6d:0b:65:b3:9d:09:b7:56:76:de:28:bd:d2:51:24:
fa:2b:4d:ac:fb:ca:30:fe:9b:81:cf:d0:83:28:f3:64:c4:7d:
88:05:8b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:56:20 2025 by rpki-client