Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File: XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier: 9MrGawjgLT3EBprJ1+zS0sjlg7LlW1fYqeKTx8AIWy8=
Subject key identifier: 02:C6:88:01:A5:E7:6F:D5:3F:BC:67:30:9B:FA:F0:49:C5:3C:BD:0F
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer: /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial: 030B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number: 0301
Signing time: Mon 16 Jun 2025 03:48:18 +0000
Manifest this update: Mon 16 Jun 2025 03:48:17 +0000
Manifest next update: Wed 18 Jun 2025 03:48:17 +0000
Files and hashes: 1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: RJ4L/UFUPLsorcduPis2gBkw6Mp3wPEns1F8p0fl5mc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 779 (0x30b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Validity
Not Before: Jun 16 03:48:17 2025 GMT
Not After : Jun 18 03:48:17 2025 GMT
Subject: CN=684f9401-f5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:1d:ab:ee:02:7e:ab:0a:d1:bb:a6:24:ba:
80:2a:d9:af:4e:d3:14:0c:cf:2e:2d:ff:9e:7b:d0:
b2:8b:1a:e5:7f:b8:a4:5a:51:97:e6:c3:83:ae:59:
54:61:1c:ce:46:36:66:eb:9e:b8:0c:f1:05:80:ce:
b6:2d:89:40:64:0f:15:04:3e:13:20:90:c4:e0:6a:
a5:23:53:a2:85:c0:e5:52:55:49:44:26:21:52:dc:
6c:fc:e1:a8:fa:3d:6b:6d:4c:0d:ca:0b:0b:9f:e2:
f3:53:42:2b:6b:99:90:2b:a7:bb:bc:ea:20:0d:1a:
2d:5f:90:74:0e:2b:3b:d8:6b:20:01:23:74:0d:f2:
78:6f:43:4b:1e:cb:5d:55:8b:d8:f3:57:27:27:29:
ff:ad:6e:f5:97:6a:2c:d9:98:97:3b:ea:3b:b7:4b:
3b:50:c7:d7:f0:41:cd:49:71:48:81:6b:2d:67:ee:
65:0a:b8:f4:69:b5:d4:59:f0:c6:c7:45:50:34:a6:
5a:40:39:c9:39:29:a3:2c:11:00:60:37:f9:02:b7:
9b:3c:13:f7:33:e5:84:72:28:80:eb:c6:48:e9:de:
c5:cc:f9:b9:7e:ed:08:ab:07:a0:4e:a2:11:f1:ae:
1f:15:fd:3b:12:42:b1:bb:0a:da:4d:31:ec:b3:c8:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:88:01:A5:E7:6F:D5:3F:BC:67:30:9B:FA:F0:49:C5:3C:BD:0F
X509v3 Authority Key Identifier:
keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:52:4e:af:68:3a:19:5e:98:6b:f4:16:4e:89:5f:ad:51:
28:83:5c:c8:24:b0:61:72:2c:11:a2:3a:c7:dd:33:03:b6:83:
6b:13:1b:ad:9a:76:2d:1d:ed:7f:b3:d1:d1:e9:27:43:d4:ee:
e6:d7:fe:0d:d1:4d:20:b5:f1:57:79:49:e0:8a:68:1c:d4:4b:
c4:84:9d:53:68:4b:f8:31:7d:d0:90:5e:a5:7e:3a:7f:b8:54:
9a:35:b8:26:99:c6:76:b0:d9:d5:04:18:4f:20:57:69:23:94:
d5:60:94:73:21:86:a9:28:53:54:ae:4e:5a:16:70:62:81:eb:
fa:95:8b:f6:09:0e:fd:f5:43:13:c8:3f:30:05:94:a0:7f:55:
98:5a:a7:d8:b0:54:63:5f:2b:85:7f:fb:1c:d2:95:a9:74:19:
69:2e:57:89:cb:6d:f0:cc:ee:b0:b1:83:ff:f9:41:79:85:0a:
4f:d7:b2:fa:48:c8:cb:bc:96:c4:88:d9:ac:02:1c:d1:d9:22:
14:d0:0d:56:76:d5:ce:ba:fd:ea:4a:05:8a:a3:b3:7a:c3:2d:
30:bc:98:97:d3:e7:5c:1a:9a:5b:0d:20:8b:82:79:28:1b:e7:
ce:3e:ae:c2:91:ad:45:02:29:43:f2:56:1b:4d:7e:38:06:ae:
56:13:a8:aa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAwswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQxQTBBRjExMC8GA1UEBRMoNUYyMjhDNDZCRUYyQjRDQkE5NENCMjlGMTBDMzY4
MEVFMjg4M0RCMzAeFw0yNTA2MTYwMzQ4MTdaFw0yNTA2MTgwMzQ4MTdaMBgxFjAU
BgNVBAMTDTY4NGY5NDAxLWY1YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCp0R2r7gJ+qwrRu6YkuoAq2a9O0xQMzy4t/5570LKLGuV/uKRaUZfmw4Ou
WVRhHM5GNmbrnrgM8QWAzrYtiUBkDxUEPhMgkMTgaqUjU6KFwOVSVUlEJiFS3Gz8
4aj6PWttTA3KCwuf4vNTQitrmZArp7u86iANGi1fkHQOKzvYayABI3QN8nhvQ0se
y11Vi9jzVycnKf+tbvWXaizZmJc76ju3SztQx9fwQc1JcUiBay1n7mUKuPRptdRZ
8MbHRVA0plpAOck5KaMsEQBgN/kCt5s8E/cz5YRyKIDrxkjp3sXM+bl+7QirB6BO
ohHxrh8V/TsSQrG7CtpNMeyzyJCNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAsaI
AaXnb9U/vGcwm/rwScU8vQ8wHwYDVR0jBBgwFoAUXyKMRr7ytMupTLKfEMNoDuKI
PbMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0MUEwL0YwNjNDRTMyMEE5NzExRUVCOUI0MjUyMzRBRDlFNkZDL1h5S01S
cjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h5S01Scjd5dE11cFRMS2ZFTU5vRHVLSVBiTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQxQTAvRjA2M0NFMzIwQTk3MTFFRUI5QjQyNTIzNEFE
OUU2RkMvWHlLTVJyN3l0TXVwVExLZkVNTm9EdUtJUGJNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB031JOr2g6GV6Ya/QWTolfrVEog1zI
JLBhciwRojrH3TMDtoNrExutmnYtHe1/s9HR6SdD1O7m1/4N0U0gtfFXeUngimgc
1EvEhJ1TaEv4MX3QkF6lfjp/uFSaNbgmmcZ2sNnVBBhPIFdpI5TVYJRzIYapKFNU
rk5aFnBigev6lYv2CQ799UMTyD8wBZSgf1WYWqfYsFRjXyuFf/sc0pWpdBlpLleJ
y23wzO6wsYP/+UF5hQpP17L6SMjLvJbEiNmsAhzR2SIU0A1WdtXOuv3qSgWKo7N6
wy0wvJiX0+dcGppbDSCLgnkoG+fOPq7Cka1FAilD8lYbTX44Bq5WE6iq
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:42:42 2025 by rpki-client