Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File: xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier: ENn2CgHdjd/HC1b5Oq1tlMdve7LsYHQAcD/CAURrHoI=
Subject key identifier: 79:E0:B7:31:D5:5E:6B:C0:12:44:CE:7A:E0:7C:3A:C3:8D:44:9A:1B
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer: /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial: 028E
Authority info access: rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number: 028E
Signing time: Mon 05 May 2025 03:59:06 +0000
Manifest this update: Mon 05 May 2025 03:59:06 +0000
Manifest next update: Wed 07 May 2025 03:59:06 +0000
Files and hashes: 1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: TlzTpGoq82OH5ds1VLyfYN02Mxom+vNwt691EJlzouY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Validity
Not Before: May 5 03:59:06 2025 GMT
Not After : May 7 03:59:06 2025 GMT
Subject: CN=6818378a-2d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:0c:1f:84:64:0a:e3:fc:33:ae:6b:04:d2:
9e:f9:86:54:e8:77:dc:79:1d:14:14:6a:0f:cf:f2:
da:b0:f3:96:85:8c:88:5b:09:9b:72:7e:db:af:f0:
f4:fc:c5:4d:84:05:db:dd:a6:11:cc:6f:ab:92:41:
e8:35:3e:1d:c2:96:8c:0c:83:ba:2a:57:1e:0a:14:
89:39:84:76:cc:ab:04:c9:ca:54:e1:5f:9d:51:2f:
f0:1c:b8:c3:75:05:78:45:04:0e:6b:78:94:be:79:
e8:4e:d1:10:0d:d5:f5:3c:39:3a:ae:ce:3b:36:5f:
51:87:9d:c1:96:59:41:5c:63:01:b5:41:ae:af:88:
e7:1d:7c:91:3b:fb:f9:e8:07:2f:c8:e4:a5:f6:37:
f4:07:ed:59:27:fe:a2:29:42:ea:13:3a:93:e7:38:
04:78:86:be:8f:76:2e:e9:19:c6:51:51:75:d3:0a:
06:71:51:dc:85:e7:5c:37:dd:57:5a:a8:ff:a4:4b:
df:e5:cf:8d:49:30:6b:ee:42:3e:9f:63:29:7a:02:
96:6e:b6:28:cb:d4:3e:8a:71:34:8a:a1:86:41:a1:
74:11:05:14:87:89:9a:29:ae:bc:9a:4b:fa:dd:51:
b8:a8:a4:aa:a0:bc:31:40:28:ef:84:af:64:52:b7:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E0:B7:31:D5:5E:6B:C0:12:44:CE:7A:E0:7C:3A:C3:8D:44:9A:1B
X509v3 Authority Key Identifier:
keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b4:51:f7:45:73:ff:3e:36:34:cd:b2:27:4f:e3:c0:a5:ee:bf:
e1:82:65:27:2b:c6:d7:f7:57:6e:9e:99:49:78:e8:c5:18:15:
00:17:9f:a0:1e:f6:ae:47:01:05:2a:4b:2e:cd:70:1e:8f:09:
c3:ee:68:40:61:4e:2b:30:07:92:8d:49:96:c7:fc:36:cb:6b:
43:6c:7d:42:61:1b:89:5d:c7:e8:19:f7:55:3f:ff:f5:3c:fa:
c6:3b:aa:97:8a:fa:34:87:39:59:47:91:b9:10:46:d2:48:cc:
9f:26:f1:90:9b:7f:ee:75:2c:3f:4b:ed:b4:51:80:2e:27:75:
64:bd:44:4d:65:4a:45:66:2d:ec:9c:6e:4f:e3:84:df:2b:5e:
36:2e:dc:09:88:eb:6d:3c:04:7e:5f:1f:89:ea:7e:52:2a:b8:
f8:5e:bc:c9:43:87:bd:ad:5c:99:64:e3:77:b8:7e:f0:3a:da:
7a:c7:8d:2e:60:29:e3:8d:6b:1b:d5:0e:ba:2a:aa:d6:df:9e:
cf:84:fe:da:04:47:d5:50:c5:25:b2:c8:66:e7:e3:2a:4a:d2:
db:3f:98:bd:18:36:cb:13:22:45:5c:e9:ac:96:3e:cf:eb:ba:
13:e0:d5:12:28:9a:a4:ce:11:e7:f0:32:94:a7:18:4e:5d:34:
3e:3f:5f:fb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAo4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNTA1MDUwMzU5MDZaFw0yNTA1MDcwMzU5MDZaMBgxFjAU
BgNVBAMTDTY4MTgzNzhhLTJkNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnLgwfhGQK4/wzrmsE0p75hlTod9x5HRQUag/P8tqw85aFjIhbCZtyftuv
8PT8xU2EBdvdphHMb6uSQeg1Ph3ClowMg7oqVx4KFIk5hHbMqwTJylThX51RL/Ac
uMN1BXhFBA5reJS+eehO0RAN1fU8OTquzjs2X1GHncGWWUFcYwG1Qa6viOcdfJE7
+/noBy/I5KX2N/QH7Vkn/qIpQuoTOpPnOAR4hr6Pdi7pGcZRUXXTCgZxUdyF51w3
3VdaqP+kS9/lz41JMGvuQj6fYyl6ApZutijL1D6KcTSKoYZBoXQRBRSHiZoprrya
S/rdUbiopKqgvDFAKO+Er2RSt3E/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUeeC3
MdVea8ASRM564Hw6w41EmhswHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0UfdFc/8+NjTNsidP48Cl7r/hgmUnK8bX
91dunplJeOjFGBUAF5+gHvauRwEFKksuzXAejwnD7mhAYU4rMAeSjUmWx/w2y2tD
bH1CYRuJXcfoGfdVP//1PPrGO6qXivo0hzlZR5G5EEbSSMyfJvGQm3/udSw/S+20
UYAuJ3VkvURNZUpFZi3snG5P44TfK142LtwJiOttPAR+Xx+J6n5SKrj4XrzJQ4e9
rVyZZON3uH7wOtp6x40uYCnjjWsb1Q66KqrW357PhP7aBEfVUMUlsshm5+MqStLb
P5i9GDbLEyJFXOmslj7P67oT4NUSKJqkzhHn8DKUpxhOXTQ+P1/7
-----END CERTIFICATE-----
Generated at Mon May 5 08:12:37 2025 by rpki-client