Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File: e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier: 0pbWr2srQlUDs6pqS9Jpi2HJGkHJbpFqBKuAgDonQW0=
Subject key identifier: 25:3F:6C:50:B1:B6:75:3A:7D:E5:F7:A0:B0:AF:6E:5A:A8:66:41:2B
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer: /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial: 041E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number: 041E
Signing time: Sat 09 Aug 2025 03:26:40 +0000
Manifest this update: Sat 09 Aug 2025 03:26:39 +0000
Manifest next update: Mon 11 Aug 2025 03:26:39 +0000
Files and hashes: 1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: nMMCk4ms014umv5pbgIFoOpLd/XJQ9NYZ4oK2m4tQ+I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 Aug 2025 00:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1054 (0x41e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Validity
Not Before: Aug 9 03:26:39 2025 GMT
Not After : Aug 11 03:26:39 2025 GMT
Subject: CN=6896bff0-052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:7b:fd:af:69:21:75:ff:2a:45:d2:ee:06:
dc:80:b9:bd:98:ce:23:bd:9e:50:b0:f6:a5:11:45:
a5:26:66:f5:0e:e9:cb:50:16:b0:bd:a0:61:3f:d6:
05:d0:84:e5:1f:d0:46:86:56:5e:0c:f8:30:63:94:
7e:22:36:4a:49:72:30:25:05:c3:0b:f1:69:21:ac:
b8:89:43:7e:e9:a9:79:f6:a8:05:05:37:dc:21:92:
53:ff:ac:f5:4b:53:5c:b5:ec:e8:1e:d5:20:e6:5a:
77:f1:46:c9:f6:5b:b1:a9:e8:b8:cc:23:a3:5c:64:
fb:d3:23:b5:a5:8a:41:2e:95:bb:42:2f:b3:67:37:
c2:a5:9e:3f:39:1a:48:c1:b5:32:bb:a0:7a:6e:13:
c7:a8:a3:85:3e:91:ed:d9:03:2a:30:50:00:11:e5:
7c:83:df:28:3e:ad:5c:ae:b4:9b:91:49:96:d5:27:
ba:b7:ef:d2:43:0c:3a:93:75:a3:8f:e3:fc:84:7d:
29:2f:be:07:51:cb:0f:ba:e3:0e:86:7a:e0:ef:20:
bf:4a:b6:77:b0:cf:39:5f:4d:9b:84:dc:80:57:08:
60:c0:62:17:3d:3a:52:6f:46:f5:fe:22:d7:b9:0e:
83:ff:a7:3a:ff:23:1a:69:56:71:ea:fd:8a:33:18:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:6C:50:B1:B6:75:3A:7D:E5:F7:A0:B0:AF:6E:5A:A8:66:41:2B
X509v3 Authority Key Identifier:
keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cf:82:2f:9e:cd:62:d2:cb:70:13:0a:23:b9:4f:7a:91:72:e0:
90:74:20:72:90:c0:3c:ea:3e:aa:be:24:ec:c5:c6:c4:eb:52:
6d:2f:e2:22:76:52:69:29:e5:2a:7f:75:c1:a7:c4:2c:46:c5:
d4:28:96:0a:c7:d5:65:1e:a6:95:87:f5:54:d1:52:7c:cc:2e:
ee:7a:60:70:d2:85:89:84:d4:84:c6:f9:e9:4c:f5:82:62:ad:
a3:a2:90:a9:ca:30:8a:79:be:2c:d1:7f:59:45:b0:9b:e1:d4:
4d:d1:65:8e:1e:9c:6b:93:2e:73:e7:33:c8:11:ab:f0:6a:a5:
2a:9f:19:de:e3:20:4b:cd:d1:a6:a7:d0:9c:10:9f:83:03:1f:
fb:c5:f2:d2:47:fb:9b:37:eb:0e:15:90:72:2a:b9:cb:f2:49:
7a:fb:84:d5:2a:e4:d4:c7:5a:35:f8:32:20:dd:52:ea:7a:99:
5d:34:42:68:6c:41:c7:36:b7:3a:4a:93:fd:52:b1:be:87:fd:
f1:22:d3:85:8a:5b:ad:b8:b1:4c:d3:c5:74:10:3c:fe:b4:e4:
3d:12:7a:4a:32:60:e8:6b:8f:4b:64:a7:62:ed:2e:a4:d5:a7:
e3:cb:66:2f:f5:d2:89:97:c4:6b:21:2d:c5:2b:ad:87:6b:6b:
f5:c1:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:22:42 2025 by rpki-client