Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: Z43nMSwxAIRyYjH8kDsen7Sm2Fs8bqfVuqKCbEkk318=
Subject key identifier: 2D:29:66:21:BE:15:1C:C8:17:EA:7A:DB:09:83:1D:29:09:70:31:39
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 08CE
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 08C2
Signing time: Thu 07 Aug 2025 01:39:06 +0000
Manifest this update: Thu 07 Aug 2025 01:39:05 +0000
Manifest next update: Sat 09 Aug 2025 01:39:05 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: Grb1YCzG2Ydk8TKnYsmn1NPNCzOcciKurRpwsUnfp1M=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 09 Aug 2025 01:39:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2254 (0x8ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Validity
Not Before: Aug 7 01:39:05 2025 GMT
Not After : Aug 9 01:39:05 2025 GMT
Subject: CN=689403ba-07ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:22:16:75:f3:d0:1f:e6:0a:bc:95:d4:17:
87:be:e8:03:19:5a:e1:45:ab:32:82:2c:a1:30:dc:
b2:d7:b6:6e:33:e1:d1:9c:85:b5:3b:ae:f4:99:4a:
42:52:19:b6:aa:40:07:d9:9f:4d:d2:9b:d7:78:34:
94:73:38:e4:2a:8a:a4:fb:f4:9d:c3:33:81:af:37:
52:8f:81:3a:7e:e6:ab:b6:9f:ea:a2:c0:0c:62:ed:
97:75:89:08:41:36:59:14:76:d0:b7:eb:3c:f4:65:
68:1a:8e:32:38:ec:c9:ae:c3:bc:31:83:b5:7f:4c:
04:7b:51:18:be:78:b3:f2:33:d2:df:67:ad:0d:6c:
d2:46:c2:48:b0:89:7f:16:30:b6:ae:18:21:a1:4b:
2c:3b:a8:c7:5f:ce:da:e1:c0:bc:44:bc:d8:c7:e5:
a5:d1:4d:61:78:66:de:1a:b7:bc:64:7a:73:be:a5:
9b:c3:62:6c:e1:2b:12:a3:f9:c3:42:5c:0a:f9:30:
8b:a2:bd:77:c7:a0:1b:bb:d5:fa:a3:06:d5:fa:1e:
52:f9:e5:74:ae:e2:f8:50:03:07:00:1f:ec:e8:d3:
85:3e:05:35:06:af:83:38:ff:20:67:30:76:51:ea:
fa:87:65:c6:55:eb:0d:68:1d:a4:4b:44:0a:13:02:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:66:21:BE:15:1C:C8:17:EA:7A:DB:09:83:1D:29:09:70:31:39
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:00:10:a5:6c:35:ba:6c:a2:43:46:e9:9e:db:b5:77:0b:d1:
5b:60:d9:69:fd:c8:70:5b:db:37:5e:ce:1f:bd:dd:fb:5c:c5:
e5:f5:1c:99:83:26:95:49:6e:f6:94:ed:91:12:15:49:3c:76:
06:20:f1:a0:8a:50:3a:da:95:72:f4:49:51:61:d8:f9:9e:4c:
7d:b7:d1:51:8a:6d:94:ba:fd:49:d5:8b:87:8e:af:b1:14:55:
f5:b1:cc:09:f2:9f:4b:c5:98:dd:f3:3c:67:6d:9e:c5:c5:a9:
e1:93:6f:3f:5e:a6:00:6b:88:14:ae:fd:93:47:cd:ea:a7:41:
7b:19:fd:89:2f:b8:44:af:08:b9:8c:8a:a2:08:18:1d:6e:b2:
da:6e:0f:4f:8d:96:ad:72:cd:a1:39:71:98:74:57:18:79:eb:
3e:3f:b8:d0:53:ea:be:31:b4:af:66:a5:44:96:3e:f5:c1:4f:
e4:f3:24:1a:82:fe:b4:62:13:f4:9e:fb:a6:1b:b2:de:56:e7:
05:6b:6b:c3:f1:5a:4c:66:4e:75:ff:5b:1e:b5:fa:21:88:35:
6b:70:c2:9e:cd:c0:05:8b:72:2a:87:05:fa:7f:9d:3f:8c:c2:
54:da:6f:09:29:07:d5:4d:4b:e0:f6:07:dd:c5:ce:e1:5f:b0:
84:62:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:30:01 2025 by rpki-client