Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File: XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier: S9sbVlGi6KPdp2kxhwBkubuxUyyoDdY/CWv67AdfjYc=
Subject key identifier: 48:E0:64:BF:AA:D6:3D:99:21:6C:58:74:B2:C1:82:F1:80:02:7F:F6
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer: /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial: 049E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number: 049C
Signing time: Tue 05 Aug 2025 03:04:44 +0000
Manifest this update: Tue 05 Aug 2025 03:04:43 +0000
Manifest next update: Thu 07 Aug 2025 03:04:43 +0000
Files and hashes: 1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: KgExaWA89yNl0VJK/9l9lEbajW4E1T5Y0tz6WFQaCg4=)
2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 Aug 2025 03:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Validity
Not Before: Aug 5 03:04:43 2025 GMT
Not After : Aug 7 03:04:43 2025 GMT
Subject: CN=689174cc-9abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7c:97:d5:3c:a5:36:a0:97:2d:df:2a:ac:21:
ed:60:90:c9:51:f7:69:44:ca:67:a2:d6:7f:df:af:
44:8b:38:96:20:dd:d1:cd:ea:34:03:b6:21:80:7a:
ee:8d:09:e8:0b:58:ec:80:c8:d4:7b:07:8a:4b:94:
92:de:86:c9:31:aa:b1:a0:d3:11:36:7b:80:ce:5d:
7c:8a:49:fe:14:9c:f0:3a:a4:2e:12:44:4d:47:09:
7e:b5:cc:12:b3:bd:15:fb:3d:ff:44:bd:f3:51:b6:
e6:70:70:74:1a:05:8c:a0:ef:0d:71:8f:47:9c:35:
81:60:17:c7:7f:6c:7e:72:71:3b:ee:27:24:44:30:
19:4d:50:0d:89:3c:a0:02:1f:95:b1:a2:f2:03:ad:
c1:9f:87:4a:76:13:6d:1b:d4:5f:e8:16:8b:2a:de:
50:7e:29:d3:28:6e:59:dd:15:49:96:0b:2a:ad:dc:
f2:cd:e7:5e:f4:63:92:84:1c:97:79:09:b9:c4:32:
f8:32:8b:fb:97:20:d3:09:62:ab:fe:fc:3b:b4:dd:
38:53:5d:6a:ff:a9:38:da:bb:48:f8:7f:72:53:7b:
e5:ee:24:13:ec:82:c3:f3:f8:2b:e4:84:ea:3a:9d:
f7:cd:35:f8:18:90:81:e8:eb:c8:35:1e:7f:be:2c:
be:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E0:64:BF:AA:D6:3D:99:21:6C:58:74:B2:C1:82:F1:80:02:7F:F6
X509v3 Authority Key Identifier:
keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
23:eb:df:35:00:e5:bd:dc:51:a8:6b:95:a1:fc:8c:9a:ba:6b:
c7:e5:06:4a:ad:da:10:02:a0:6e:73:3d:22:99:f7:1f:b1:42:
12:50:36:61:f4:6a:3d:86:b8:9b:f5:46:96:92:f9:63:35:6e:
e1:0c:3b:3d:4f:dd:f2:a1:70:39:d8:69:e9:e2:5d:66:c3:f3:
11:71:b1:70:d3:27:b2:ae:93:72:01:2a:1c:0f:9a:7c:db:5a:
fb:9b:d8:b1:e5:b9:26:8c:02:45:b2:41:04:62:65:73:a3:04:
e4:77:c2:db:02:55:e9:bc:5c:3d:bb:bd:a6:5d:eb:16:d1:d8:
3c:f2:53:23:c4:68:ec:95:18:b1:b2:a3:29:3b:b7:ce:30:4b:
f1:cf:94:04:85:a6:3f:2a:41:51:25:46:36:81:3b:a2:59:71:
75:90:59:01:c5:4a:b8:06:69:ce:40:18:5d:6a:3e:a0:0e:f3:
92:b7:af:6e:90:3a:ad:9f:47:27:84:36:ef:b0:59:e6:d3:6b:
1f:19:bb:1a:16:5f:e1:1e:e1:65:82:74:7c:bd:fe:82:34:84:
5f:8a:a3:75:74:aa:f7:69:fa:f9:a3:36:08:e0:a5:29:4e:41:
d7:58:8f:de:20:82:6b:97:9a:1f:b5:c8:2f:a1:9a:d5:1a:13:
da:8f:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:35:26 2025 by rpki-client