Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File: xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier: ESA9f5IJ3TJuvXzX5jAbhfNx7xrz1dfK6YPZfLAlqkk=
Subject key identifier: A1:69:89:09:9F:85:54:6D:DD:C9:C3:55:14:63:62:06:45:38:33:A2
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer: /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial: 07D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number: 07C5
Signing time: Sun 10 Aug 2025 01:56:04 +0000
Manifest this update: Sun 10 Aug 2025 01:56:03 +0000
Manifest next update: Tue 12 Aug 2025 01:56:03 +0000
Files and hashes: 1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: rMqZxgfr1ZPh6zjeWr89W8aP/LnQfwcIIviKaKCykNo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 12 Aug 2025 00:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2000 (0x7d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Validity
Not Before: Aug 10 01:56:03 2025 GMT
Not After : Aug 12 01:56:03 2025 GMT
Subject: CN=6897fc34-4e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f9:63:75:4a:49:e6:f6:82:49:02:e3:83:ea:
6a:a0:bd:64:79:49:44:ed:d9:85:67:1d:f3:b8:ff:
c5:41:c6:f5:05:22:3d:54:40:4b:89:2e:0e:7f:9b:
5e:d5:d0:1c:90:e0:62:33:03:2e:2b:09:49:c4:9f:
8f:8e:ae:2b:0d:2a:51:eb:b8:81:fa:82:36:e0:73:
5a:c0:20:13:13:5b:db:20:cf:45:e5:2a:4b:2f:ae:
c2:9c:2c:83:ef:07:fa:b0:d4:38:42:ee:c7:4d:d7:
2a:3b:cc:e6:4b:7b:8f:e2:51:20:7a:6b:16:43:ee:
aa:2d:d4:9f:7b:a7:55:11:9c:11:6b:ce:33:ee:e7:
8e:c0:cd:1d:65:b9:7a:51:aa:3b:08:96:8d:33:eb:
2c:7d:c8:9d:af:48:9f:6f:0d:22:f2:b4:cc:9b:18:
d3:82:b0:9c:f7:60:2a:8e:39:1e:3c:79:38:e9:b7:
ff:b8:e1:22:d8:a0:c4:0e:cf:3f:7d:5b:84:13:86:
19:33:ca:8f:c4:8f:71:c6:94:41:94:c8:6b:42:68:
42:c6:79:c4:9b:83:df:de:78:c0:29:80:d6:89:cf:
6f:f6:31:37:36:ad:e7:94:92:85:f7:ae:03:25:d7:
26:31:f2:a5:37:99:ea:c6:9a:ca:81:e7:ec:a3:7b:
14:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:89:09:9F:85:54:6D:DD:C9:C3:55:14:63:62:06:45:38:33:A2
X509v3 Authority Key Identifier:
keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5c:53:a4:2f:20:66:8e:90:5f:8b:71:cf:a0:14:7a:a1:2d:
3b:16:d5:c2:b1:bf:06:f8:46:35:4c:94:8e:c4:9d:4b:1a:ae:
8c:17:db:85:17:71:4e:7e:94:f0:a7:b8:64:b2:2a:da:86:2d:
a0:cf:47:e3:d1:b9:1f:8b:f6:de:a3:88:d8:8f:aa:a8:1d:de:
ce:7c:05:57:87:10:05:2e:33:da:ed:f9:ea:14:e7:65:03:03:
a8:b8:b3:c6:ab:96:44:a9:86:2d:7a:2e:5d:12:b1:a8:cf:82:
26:88:db:29:be:09:b2:e3:b9:b4:e2:ed:03:50:7b:b0:76:d7:
d4:28:94:4c:38:a7:e1:e2:d0:d9:3c:28:35:53:8a:2e:c3:d6:
89:dd:f9:9c:fc:3d:c2:25:09:9b:aa:b7:d9:18:c8:ab:3a:9e:
6f:18:64:c3:b5:35:9d:f4:71:57:38:d7:b2:ed:20:5f:9a:b6:
a2:3d:8d:e9:63:f7:c0:95:5a:64:39:bc:0c:13:dd:61:7e:f8:
5c:8e:90:f0:5c:44:0f:4d:a2:e6:de:c6:13:de:4b:20:77:be:
f3:f3:17:92:0f:c9:7e:0e:ea:b1:9f:12:c2:4b:50:1e:09:9f:
c8:ec:26:7d:72:45:67:cf:7b:ee:b4:6c:90:20:36:66:52:3b:
dd:d8:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:08 2025 by rpki-client