Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File: XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier: 9oeSYefSsxU4931Gy4kj9dsmU9raQy0AxQhY+hcdlgg=
Subject key identifier: 04:33:2E:67:CB:12:34:0F:DF:CE:F3:2D:51:05:C7:BA:79:82:1B:6E
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer: /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial: 070D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number: 070D
Signing time: Mon 04 Aug 2025 02:02:13 +0000
Manifest this update: Mon 04 Aug 2025 02:02:12 +0000
Manifest next update: Wed 06 Aug 2025 02:02:12 +0000
Files and hashes: 1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: TtfIb+/T59jMdlRbv/bkDaXHygR+WcY0TYKl7dSTs3I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 06 Aug 2025 00:07:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1805 (0x70d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Validity
Not Before: Aug 4 02:02:12 2025 GMT
Not After : Aug 6 02:02:12 2025 GMT
Subject: CN=689014a5-7fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:19:83:c4:62:37:48:ff:b6:a5:83:bd:af:91:
8c:51:15:b7:e9:37:5b:6f:99:c5:33:74:5d:b3:07:
67:ad:fd:c9:3c:cb:19:23:e1:78:fd:8d:1f:d5:21:
ff:b5:74:c2:72:c7:23:75:88:74:77:c0:c0:6a:88:
d9:98:8e:40:2b:4b:20:78:61:85:ec:2e:46:82:ad:
bb:61:5f:d1:3c:ab:3f:b7:50:f0:e9:56:b5:b0:14:
24:67:20:fd:54:82:fc:da:18:ca:63:ed:6a:02:b9:
66:05:17:09:13:37:6a:7e:65:23:68:2e:09:a6:09:
8a:a0:e3:00:fa:e1:c6:1c:f3:74:39:f2:4f:ec:ad:
b7:ba:ab:94:cd:fd:41:e0:94:66:cb:1b:36:6a:41:
37:c8:dd:06:72:38:64:38:08:3a:e9:d9:7f:80:02:
5d:05:4e:06:c5:ab:d3:c1:62:b4:55:53:15:56:b1:
08:63:0e:0a:b5:28:d3:00:f8:04:bb:51:43:d6:a0:
57:93:22:24:70:b2:b3:9c:35:60:15:cc:45:a4:49:
9b:ad:07:a6:8b:85:40:13:45:f9:bf:f9:67:2e:9d:
2f:bf:cb:a4:56:1a:ff:b2:3c:da:82:28:c7:52:c2:
d1:12:13:9d:d8:20:41:2c:c8:41:43:ee:31:0e:75:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:33:2E:67:CB:12:34:0F:DF:CE:F3:2D:51:05:C7:BA:79:82:1B:6E
X509v3 Authority Key Identifier:
keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d4:39:f2:44:b5:d4:78:e3:a1:90:98:e8:b3:9a:18:23:1c:
5e:73:36:55:9d:96:e5:8f:9e:ea:88:a7:61:c3:d9:ab:b3:85:
60:ed:32:83:68:2c:81:04:1d:38:4f:8b:e7:b8:a5:da:55:40:
82:62:82:0e:d3:b4:39:12:4f:1f:65:1e:7a:b9:b3:a8:16:b0:
cf:ec:86:1a:ec:25:f5:cc:a2:b8:f2:40:69:49:80:4b:0b:3b:
e7:64:57:ff:7d:a1:66:88:84:a5:45:67:1f:19:b7:7f:ce:13:
83:5e:e2:39:11:16:1f:4f:01:00:e7:26:83:47:28:70:4d:06:
fa:ef:b9:43:d6:2d:d2:4c:8d:b4:ab:f3:43:7e:88:c3:65:fb:
71:db:17:af:03:2d:37:f9:e4:3d:ba:dd:d9:a0:81:bd:aa:3c:
3d:31:5c:5b:73:bd:6b:99:0a:82:af:01:aa:f1:f4:21:36:c4:
a2:ae:c4:e6:a7:32:ed:65:fb:30:0d:e7:01:1c:11:a4:bc:f8:
50:8a:c2:2e:b3:cb:9a:1f:e5:5b:04:f2:51:95:8f:5c:cf:b0:
73:34:aa:da:1b:f4:39:08:aa:36:17:71:3a:2f:b9:77:cd:2b:
ab:17:74:60:4b:6b:f0:f4:d4:21:d8:4c:b4:96:02:27:64:fe:
2d:41:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:36 2025 by rpki-client