Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: 70UMO63vdKGGHXtiDGQZlcWH1DlmZJWBJw6o5WcW/8k=
Subject key identifier: 2F:F3:15:E9:FC:7E:BF:25:2A:B3:4C:07:C3:D5:BE:68:98:01:5A:95
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 02D2
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 02D2
Signing time: Sat 14 Jun 2025 03:53:34 +0000
Manifest this update: Sat 14 Jun 2025 03:53:33 +0000
Manifest next update: Mon 16 Jun 2025 03:53:33 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: 21qkcQM+a1AgkV/pGqcRoj/OZJvYn89mmjYRoiGhl/Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 722 (0x2d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Jun 14 03:53:33 2025 GMT
Not After : Jun 16 03:53:33 2025 GMT
Subject: CN=684cf23e-e21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:a2:a0:c8:61:be:1c:fb:48:16:0e:2f:91:
d9:87:dc:be:d4:fd:f5:d7:81:23:ab:4c:6e:6e:94:
e5:9c:65:28:4d:38:21:32:0d:2c:3e:5b:3c:6b:e4:
8b:18:49:8d:fb:57:de:f0:88:c8:bf:bc:a9:07:93:
0f:b2:85:52:09:56:30:bf:42:3d:1b:24:27:95:4a:
12:3a:4a:5f:4f:68:ef:14:dd:e4:07:f7:2d:c7:d3:
97:70:81:5f:cc:87:33:40:2e:4f:fb:9e:d4:27:76:
4a:92:06:70:01:ee:88:f7:0f:24:cb:5b:26:12:9b:
ca:e2:19:c2:22:2c:09:b8:cd:2d:2f:90:21:ae:d0:
a3:5c:c2:4a:14:80:2b:2d:57:e0:a6:6d:34:5d:7e:
8c:75:27:2d:4e:e4:a0:25:60:c3:17:d2:32:de:56:
02:63:ad:53:b8:89:65:b5:5d:c3:e0:54:e0:f4:ef:
25:2e:69:45:8a:f2:59:63:98:21:ec:97:1f:a6:68:
b2:13:c8:7a:20:2c:f9:a9:82:b2:f9:6e:c4:8b:6f:
6b:07:65:da:87:8b:61:cf:e2:dd:65:d4:ca:8a:d0:
9e:a2:24:72:f3:ed:1e:40:96:c3:61:3e:bc:21:e7:
b5:ad:78:e1:17:21:c3:13:6a:c8:fa:91:21:26:3d:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:15:E9:FC:7E:BF:25:2A:B3:4C:07:C3:D5:BE:68:98:01:5A:95
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ed:59:d4:c0:a3:00:34:73:be:8b:73:c5:7d:3c:a5:4d:e5:
2c:a4:25:e3:45:61:00:46:55:b0:02:6b:96:33:d0:06:7f:5f:
0d:03:30:5c:a6:65:26:94:d4:5c:6e:85:a4:73:0d:bf:1a:eb:
8e:c4:e9:cd:8f:e9:11:06:ca:fd:85:7c:5f:c2:b6:27:6b:e6:
92:0e:34:ef:33:30:71:3c:86:d0:ff:9c:05:ab:e8:d6:30:96:
d2:5a:fb:30:f6:25:53:d9:cc:4f:d7:17:0c:e4:9a:23:a7:4f:
25:22:6d:f8:25:67:3d:3a:7a:bd:6d:20:bb:bb:ae:f5:96:34:
24:01:9e:de:1a:82:67:97:41:33:2e:26:25:2b:b7:ef:70:e0:
08:ac:76:40:17:da:6e:ed:b7:6e:f3:e6:fd:5d:95:09:a9:9c:
50:9d:2b:aa:05:8f:7d:b8:6e:78:48:dd:87:1c:27:14:4a:69:
73:c5:27:64:bd:84:cf:aa:40:1f:63:3d:de:ef:37:d8:3f:25:
fe:03:5b:d9:be:7b:76:64:ac:bd:46:10:bc:8b:8c:94:bf:0b:
45:79:d2:ce:f7:39:a5:d0:b9:51:dc:11:9a:c0:fd:57:ae:03:
b2:40:fa:31:58:c3:67:79:0b:2c:93:77:73:42:26:8f:24:7f:
2b:fe:47:4f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAtIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFBUjExMC8GA1UEBRMoQzREMDE0QUQ2ODc1MEU3NUU5MTA0Q0VBNUMyOUIz
QjcxOTU4RkREQTAeFw0yNTA2MTQwMzUzMzNaFw0yNTA2MTYwMzUzMzNaMBgxFjAU
BgNVBAMTDTY4NGNmMjNlLWUyMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCeKKgyGG+HPtIFg4vkdmH3L7U/fXXgSOrTG5ulOWcZShNOCEyDSw+Wzxr
5IsYSY37V97wiMi/vKkHkw+yhVIJVjC/Qj0bJCeVShI6Sl9PaO8U3eQH9y3H05dw
gV/MhzNALk/7ntQndkqSBnAB7oj3DyTLWyYSm8riGcIiLAm4zS0vkCGu0KNcwkoU
gCstV+CmbTRdfox1Jy1O5KAlYMMX0jLeVgJjrVO4iWW1XcPgVOD07yUuaUWK8llj
mCHslx+maLITyHogLPmpgrL5bsSLb2sHZdqHi2HP4t1l1MqK0J6iJHLz7R5AlsNh
Prwh57WteOEXIcMTasj6kSEmPfN7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUL/MV
6fx+vyUqs0wHw9W+aJgBWpUwHwYDVR0jBBgwFoAUxNAUrWh1DnXpEEzqXCmztxlY
/dowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzQyNzNFMDRFMjFGMDExRUVBM0EyQkMwRjRBRDlFNkZDL3hOQVVy
V2gxRG5YcEVFenFYQ216dHhsWV9kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hOQVVyV2gxRG5YcEVFenFYQ216dHhsWV9kby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0I4RDEvNDI3M0UwNEUyMUYwMTFFRUEzQTJCQzBGNEFEOUU2
RkMveE5BVXJXaDFEblhwRUV6cVhDbXp0eGxZX2RvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe7VnUwKMANHO+i3PFfTylTeUspCXjRWEA
RlWwAmuWM9AGf18NAzBcpmUmlNRcboWkcw2/GuuOxOnNj+kRBsr9hXxfwrYna+aS
DjTvMzBxPIbQ/5wFq+jWMJbSWvsw9iVT2cxP1xcM5Jojp08lIm34JWc9Onq9bSC7
u671ljQkAZ7eGoJnl0EzLiYlK7fvcOAIrHZAF9pu7bdu8+b9XZUJqZxQnSuqBY99
uG54SN2HHCcUSmlzxSdkvYTPqkAfYz3e7zfYPyX+A1vZvnt2ZKy9RhC8i4yUvwtF
edLO9zml0LlR3BGawP1XrgOyQPoxWMNneQssk3dzQiaPJH8r/kdP
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:46:19 2025 by rpki-client