Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File: xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier: UttMBXZDDdA5Z3ed/0QcMEa6Re6ydI3MZd/mwvig37I=
Subject key identifier: 3D:C9:16:4B:78:1B:12:DF:68:F3:E6:99:9E:E8:D8:31:9B:EE:D4:D9
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer: /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial: 04DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number: 04DC
Signing time: Mon 11 Aug 2025 02:58:22 +0000
Manifest this update: Mon 11 Aug 2025 02:58:21 +0000
Manifest next update: Wed 13 Aug 2025 02:58:21 +0000
Files and hashes: 1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: VjtfWVNUf82dRFWkyb77p0CwvCRcfVOALNKq6iq7VeI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 Aug 2025 00:06:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1244 (0x4dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Validity
Not Before: Aug 11 02:58:21 2025 GMT
Not After : Aug 13 02:58:21 2025 GMT
Subject: CN=68995c4d-1e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:0d:91:85:d3:f0:b4:6f:ce:ca:b7:54:c5:
d3:45:67:d8:f2:a6:16:a6:47:b3:99:1e:61:fa:3e:
7b:14:fb:25:f1:c4:4f:00:55:20:d5:ec:ea:63:83:
8d:62:55:8c:32:69:7a:a7:37:c6:e6:4c:1a:da:30:
18:a8:23:e7:2c:91:4a:f1:89:80:20:fc:e8:cc:71:
08:32:23:28:a0:8c:4f:42:12:84:50:6b:f4:5f:fe:
fc:12:30:af:11:c5:bb:d8:69:65:1b:53:f5:34:b4:
47:f7:f5:b3:40:b5:fa:14:9d:8d:88:e7:2d:f4:47:
4f:21:4d:49:7c:97:88:64:a1:99:15:c8:2f:f1:18:
ae:bb:63:20:0c:21:3c:58:25:e0:f8:ea:41:fa:d1:
1e:31:c9:ea:6e:44:ab:47:34:a1:11:d8:08:54:68:
77:5e:6a:96:72:d7:3d:79:54:0f:de:2f:31:4f:83:
9a:eb:55:8b:27:25:ab:56:69:5b:31:d8:eb:b5:df:
24:e3:d0:89:5a:38:f9:c0:96:48:cb:83:ca:b3:d8:
68:dc:85:19:5c:21:99:b1:23:5d:00:f8:4a:ae:43:
f8:b4:07:67:67:fc:4e:a9:0b:13:8d:a3:81:dc:4e:
e9:e3:4e:53:04:8f:ff:d0:81:15:f0:20:2e:43:24:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C9:16:4B:78:1B:12:DF:68:F3:E6:99:9E:E8:D8:31:9B:EE:D4:D9
X509v3 Authority Key Identifier:
keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:d3:f9:96:14:1b:98:25:8c:45:fd:37:79:27:dd:47:7e:e2:
d5:1a:98:c5:2b:54:8a:bc:0b:d4:58:20:50:90:ed:b0:ec:1d:
fc:08:63:d8:57:4a:a7:d1:9c:e2:65:81:84:25:0f:19:0f:f8:
0f:e8:e2:e5:b8:cd:33:0e:a8:7b:c4:c2:f3:56:d6:af:32:0f:
2c:94:2a:56:12:00:fb:80:0e:72:55:84:47:11:c3:12:18:cf:
f1:e7:57:ca:9b:00:67:29:f8:67:8b:7f:a0:37:08:15:5a:75:
a0:e0:50:7c:9b:e3:df:99:e4:8e:57:44:7a:38:06:32:7c:0d:
ad:24:e2:23:ba:84:11:e3:43:4e:ec:5a:0c:19:bb:ce:7b:67:
ef:89:05:c4:f2:39:e8:9a:06:7f:2e:90:41:1a:25:e5:05:3f:
d6:c8:90:0f:2a:07:2f:b0:6b:de:af:fc:a2:de:13:48:2e:39:
48:1d:e0:69:21:97:57:e1:17:0c:09:d3:e6:cf:de:3f:b0:48:
c6:c4:af:c0:c9:7a:12:be:35:f3:96:ec:0d:7e:a2:a8:4a:c3:
d2:41:4b:df:26:8a:27:92:52:3e:68:b2:73:8d:4b:ad:79:5f:
9a:c2:e0:78:53:7d:35:c4:ff:59:fa:29:85:b1:26:7a:ab:b0:
92:63:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:12 2025 by rpki-client