Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
File: 62gPOPXWxxu0sQa4vQZYUBLaMbY.mft (raw, json)
Hash identifier: waQ8e4EqychLjQqaEqFQaq+vOY79xi6bGtZw+QjYe3k=
Subject key identifier: B5:99:E5:53:AD:2E:1F:39:82:04:3E:83:D0:84:05:E9:26:3F:AD:62
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 53
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Subject info access: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
Manifest number: C0
Signing time: Mon 17 Mar 2025 09:00:06 +0000
Manifest this update: Mon 17 Mar 2025 09:00:05 +0000
Manifest next update: Thu 24 Apr 2025 09:00:05 +0000
Files and hashes: 1: afrinic-ca.cer (hash: Wtq9S/TCToNDzR5zCQ432t125ZL133dX7t++Fs2NfSY=)
2: apnic-to-afrinic.cer (hash: L+M1jdFRHLxpnoHf4mLQUh89t4Y4/08QKCmlTb9HisM=)
3: 62gPOPXWxxu0sQa4vQZYUBLaMbY.crl (hash: vCCafbyA7/B6PRpjVC/vNtjkm/y2tWBd1d8JmN7H6AQ=)
4: arin-to-afrinic.cer (hash: x2hewth1eCy0DZIq7tv3cRyRyV/vYjnCH3dLwuIKRNo=)
5: lacnic-to-afrinic.cer (hash: wXDAadihYjn4e7vozR6AVuyf4JfRBXGHrhJXTwW+9CY=)
6: ripe-to-afrinic.cer (hash: DecN64svMCGMOUBQs3yiXivanRF3D6oQTlaBFW3exFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Apr 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83 (0x53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Mar 17 09:00:05 2025 GMT
Not After : Apr 24 09:00:05 2025 GMT
Subject: CN=67d7e496-7266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:e0:40:68:1f:cd:9b:9c:f3:29:c0:66:92:
05:31:f9:d7:7a:27:c8:50:10:fc:25:bf:29:ea:5e:
f6:da:37:f6:5e:a8:c5:ba:04:fe:b7:3f:26:40:71:
72:51:fa:8d:45:d9:b9:40:2c:88:71:ab:a4:ff:f6:
11:0f:72:bc:5e:81:47:8a:54:90:0d:17:ea:fa:30:
19:68:2b:e8:b9:c2:36:16:3d:c4:d7:75:49:65:3c:
e5:7c:82:4e:d0:ce:7e:2f:5e:b6:52:69:b4:fc:08:
80:4b:b7:b5:3a:a8:08:31:d2:ea:29:01:34:d5:0f:
72:5c:a1:ef:fc:b7:28:46:f7:17:71:6f:3f:33:ba:
28:a2:35:d5:83:b3:5c:b6:0b:72:d7:df:36:cd:69:
b0:83:b1:60:82:b4:8a:8a:63:82:92:b1:62:12:90:
e1:99:3a:32:64:10:ed:0c:63:c9:3d:1a:3e:13:18:
82:1e:d8:31:aa:7f:ea:a5:5f:d7:9b:d4:05:05:34:
a7:44:f9:b2:0a:46:82:9e:7e:e6:2b:bb:7f:58:7f:
00:9e:a2:d1:43:b6:12:22:31:68:f5:62:39:7a:69:
74:71:35:64:50:21:ef:c6:d8:e3:bc:f3:d9:d3:34:
5f:47:69:ec:aa:5e:eb:07:15:fd:c6:9b:e2:35:1b:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:99:E5:53:AD:2E:1F:39:82:04:3E:83:D0:84:05:E9:26:3F:AD:62
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:71:f5:6a:02:bc:6b:2e:da:b8:d6:26:c7:b6:b1:9a:bc:4f:
3f:10:b8:22:f0:af:41:8d:ca:7d:40:c2:16:d2:8b:0b:d7:bf:
fe:b3:b1:3e:8d:b3:f2:d0:5f:eb:d1:19:e5:4a:f6:4c:54:72:
0e:64:87:9b:17:1b:99:a0:0e:40:f7:be:ed:93:b4:c2:40:c2:
5d:97:9a:96:96:cc:f9:1d:20:5b:8b:f6:1f:4e:5b:f3:a0:67:
02:2c:df:a1:0c:04:e2:09:ac:86:71:9d:08:07:33:b7:20:e2:
c9:c6:7a:79:c0:a8:49:65:cb:31:ed:c0:f0:15:4d:63:3e:f9:
7b:64:de:3c:8b:1f:fb:8e:60:c0:8d:a9:78:6b:cb:4e:29:42:
8a:cd:7f:25:03:66:17:42:51:98:71:0c:bb:01:ff:d0:4c:ef:
39:ce:52:70:16:fd:7c:a7:c7:3d:30:4d:fd:8f:69:50:50:ce:
57:c0:42:2a:48:2e:4e:bd:d2:fa:c3:53:69:c2:53:3a:33:fb:
40:25:b7:10:7e:c8:7a:a3:23:dc:75:24:1f:3b:4b:67:d8:87:
cc:2a:bd:bb:e0:e4:96:ce:6e:52:83:49:ef:f0:f0:35:95:f0:
b4:33:fe:4e:56:7b:9a:19:05:3d:3e:3f:e9:f3:b5:c7:0f:dd:
ea:c8:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:30:32 2025 by rpki-client