Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File: xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier: NjJRUpPkq+ZgVgk2RdNx+SPVSim+fTrJ0+xL43KsE5o=
Subject key identifier: 08:FE:C6:54:7D:9B:B3:2C:A9:E6:F8:25:0E:8A:BF:8B:53:18:C8:7B
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer: /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial: 0242
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number: 0241
Signing time: Thu 19 Jun 2025 04:17:35 +0000
Manifest this update: Thu 19 Jun 2025 04:17:34 +0000
Manifest next update: Sat 21 Jun 2025 04:17:34 +0000
Files and hashes: 1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: EfTkqs027dxBowHurXu0bu0SZbqTVbMUMMI/+Y7dUVE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Jun 2025 00:06:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 578 (0x242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Validity
Not Before: Jun 19 04:17:34 2025 GMT
Not After : Jun 21 04:17:34 2025 GMT
Subject: CN=68538f5e-24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:1d:1c:85:ba:1a:3d:bf:98:d6:72:7f:e6:
64:8d:d8:91:6c:0f:f2:1b:ba:06:9a:14:e7:7d:c1:
7a:98:60:bc:0b:8a:66:d0:bf:6b:29:54:32:75:b6:
36:d1:8b:0a:e2:f1:5b:5d:00:e1:26:91:64:e8:d3:
b1:b5:67:11:a5:3f:da:51:48:90:df:25:4f:8a:10:
00:69:98:df:fc:33:17:42:2b:d5:ca:8a:c3:bc:80:
4c:6a:fd:34:f0:93:61:eb:7b:cf:0e:d0:30:a4:f0:
35:37:2d:3b:f1:f2:06:44:f5:78:65:ed:60:e1:88:
9e:6b:42:18:b1:bc:8c:5d:77:2a:40:94:7a:15:7a:
c6:cf:36:07:3c:b5:c1:f0:20:17:c5:dd:22:dc:9f:
b1:9c:a3:01:51:30:59:69:ad:6e:c3:e9:e0:15:94:
92:97:ca:8d:c7:8e:87:89:05:af:a6:80:24:2e:6e:
6b:17:5b:2c:25:37:22:b8:40:f7:02:28:99:89:f8:
07:5a:14:61:f7:28:ff:4a:68:63:e0:96:b2:77:5c:
eb:ec:6f:84:5e:e1:84:31:9b:d4:23:9a:c8:2c:42:
b1:a0:b5:af:a5:20:52:60:0c:5d:4b:96:8b:81:10:
6b:cb:76:15:89:73:5e:e0:83:6b:6f:44:a8:d9:b0:
7b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:C6:54:7D:9B:B3:2C:A9:E6:F8:25:0E:8A:BF:8B:53:18:C8:7B
X509v3 Authority Key Identifier:
keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:a9:41:37:93:b7:1f:13:3c:58:b8:cf:8b:79:de:aa:d6:
10:69:dc:21:90:f4:b7:93:0b:f7:32:fd:ce:72:e2:43:ba:13:
cf:4f:c9:d2:a9:76:69:22:07:14:82:2d:8e:13:15:e8:7a:db:
e9:29:05:ed:34:eb:56:0b:0a:9c:fe:53:d1:b1:89:4d:51:1b:
22:71:d4:0d:96:65:f8:28:0c:64:37:b4:0e:91:03:f9:35:5d:
6f:67:89:96:15:7a:d1:3f:ed:50:7e:6f:c6:c4:01:56:8e:fd:
96:47:ec:77:13:a0:e4:ad:bb:8d:2d:39:6e:7a:49:82:c4:35:
57:a7:48:9c:52:e0:7a:32:5f:29:32:b0:22:d8:ad:75:df:21:
ca:de:94:6b:7e:49:52:a6:5d:7d:3b:1e:f7:c2:79:36:f4:7c:
a5:9a:bd:fb:a1:7e:39:73:be:ed:9b:26:bb:bd:73:57:e1:13:
ed:77:7c:fb:7e:65:ed:5e:6f:8a:08:22:8c:26:d4:3c:a6:78:
ae:a2:4d:25:26:ae:ab:2f:22:8d:86:6b:ce:c3:b1:90:bd:28:
ef:be:d5:cb:e2:05:c2:de:fb:c3:7c:2d:78:f9:29:e1:c0:ac:
51:65:a7:7a:3b:e5:e0:c5:11:77:55:91:1a:13:c4:e6:2c:51:
ed:e3:73:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUY3RThBRjExMC8GA1UEBRMoQzVBNTBGREI2M0MzQzVCRDFGNDc0ODc1RTA5NEYx
OEFEMTdFMUY5NjAeFw0yNTA2MTkwNDE3MzRaFw0yNTA2MjEwNDE3MzRaMBgxFjAU
BgNVBAMTDTY4NTM4ZjVlLTI0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2AR0chboaPb+Y1nJ/5mSN2JFsD/IbugaaFOd9wXqYYLwLimbQv2spVDJ1
tjbRiwri8VtdAOEmkWTo07G1ZxGlP9pRSJDfJU+KEABpmN/8MxdCK9XKisO8gExq
/TTwk2Hre88O0DCk8DU3LTvx8gZE9Xhl7WDhiJ5rQhixvIxddypAlHoVesbPNgc8
tcHwIBfF3SLcn7GcowFRMFlprW7D6eAVlJKXyo3HjoeJBa+mgCQubmsXWywlNyK4
QPcCKJmJ+AdaFGH3KP9KaGPglrJ3XOvsb4Re4YQxm9QjmsgsQrGgta+lIFJgDF1L
louBEGvLdhWJc17gg2tvRKjZsHvPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCP7G
VH2bsyyp5vglDoq/i1MYyHswHwYDVR0jBBgwFoAUxaUP22PDxb0fR0h14JTxitF+
H5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGN0U4L0Q4NjgyMTEwOTZDQTExRUVBMDFCREE3M0QyNUJFNDY1L3hhVVAy
MlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hhVVAyMlBEeGIwZlIwaDE0SlR4aXRGLUg1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUY3RTgvRDg2ODIxMTA5NkNBMTFFRUEwMUJEQTczRDI1
QkU0NjUveGFVUDIyUER4YjBmUjBoMTRKVHhpdEYtSDVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWealBN5O3HxM8WLjPi3neqtYQadwh
kPS3kwv3Mv3OcuJDuhPPT8nSqXZpIgcUgi2OExXoetvpKQXtNOtWCwqc/lPRsYlN
URsicdQNlmX4KAxkN7QOkQP5NV1vZ4mWFXrRP+1Qfm/GxAFWjv2WR+x3E6DkrbuN
LTluekmCxDVXp0icUuB6Ml8pMrAi2K113yHK3pRrfklSpl19Ox73wnk29Hylmr37
oX45c77tmya7vXNX4RPtd3z7fmXtXm+KCCKMJtQ8pniuok0lJq6rLyKNhmvOw7GQ
vSjvvtXL4gXC3vvDfC14+SnhwKxRZad6O+XgxRF3VZEaE8TmLFHt43NB
-----END CERTIFICATE-----
Generated at Thu Jun 19 14:27:16 2025 by rpki-client