Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: 7r/WzqRhePFEYIOCFI7VeLkohhbCb0C1wjHVyCSQ3AM=
Subject key identifier: 29:A0:87:74:62:08:FA:DE:BB:E8:21:A4:42:33:44:73:1B:67:61:5E
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0CAB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0CAB
Signing time: Fri 06 Jun 2025 01:07:20 +0000
Manifest this update: Fri 06 Jun 2025 01:07:19 +0000
Manifest next update: Sun 08 Jun 2025 01:07:19 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: xi2BzM0xdViJMocwZtKP04OZL1fNaK26wBSqpjmJij0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3243 (0xcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Jun 6 01:07:19 2025 GMT
Not After : Jun 8 01:07:19 2025 GMT
Subject: CN=68423f48-c9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:79:2c:7f:50:2c:4a:e2:d5:d9:c5:5f:e1:
ca:23:c0:a6:50:7f:11:08:0c:9e:b9:46:64:db:db:
a9:9f:65:f4:a5:d8:a4:35:e0:c0:9e:70:db:34:f4:
be:e5:a2:ca:e2:6e:fc:82:7e:0b:91:69:f8:86:14:
85:a8:33:47:70:e0:27:55:09:ef:11:91:b3:25:5b:
5d:8f:f5:c4:f0:a3:36:ba:e0:1f:73:41:50:c0:23:
98:06:61:8a:20:64:3c:73:9e:2d:de:8d:7b:57:38:
77:d4:ec:5b:4e:1a:e4:86:02:c4:24:5e:bf:60:78:
6b:ee:f3:35:e7:0c:cf:d4:98:a3:4d:3c:b9:25:88:
33:ab:e5:a9:99:92:97:c0:03:74:7d:96:34:75:99:
57:22:01:87:a3:09:36:34:71:d1:73:aa:0f:9e:16:
65:51:51:26:64:1c:01:f3:a7:6f:6a:77:86:2b:3a:
5c:e6:d5:f0:a3:27:61:0a:ec:df:8b:f7:a8:d4:b4:
5d:a6:ca:3a:c5:ec:1a:3f:a5:56:5b:fb:62:fb:a8:
f2:08:4f:6e:c1:3f:98:ac:a3:59:84:b6:1b:ed:5f:
e1:ac:90:a4:af:c9:d9:dd:05:b6:48:ee:8a:6c:3a:
5f:5a:ef:c5:dd:e4:c1:4b:70:81:c8:36:84:af:ab:
9e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A0:87:74:62:08:FA:DE:BB:E8:21:A4:42:33:44:73:1B:67:61:5E
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:f2:4f:0c:83:c4:d3:98:90:a7:3d:b9:1b:9f:fd:9b:c5:d4:
f7:c2:db:f4:20:d1:30:a8:87:f8:92:31:84:da:7d:80:ed:78:
01:ed:81:f5:6e:d0:f3:05:d0:6f:f6:6d:46:56:b0:fc:59:03:
dc:e8:29:70:98:82:26:9c:c5:17:df:31:b8:92:b6:53:fd:ee:
64:7d:b2:df:f1:a6:81:8d:99:4d:8c:a7:84:3d:c5:cf:3a:d7:
36:51:8e:39:9b:44:87:4a:74:e1:5f:90:ad:c5:c3:f7:9b:6d:
64:b8:dc:b3:f4:ca:0d:ec:7c:8b:95:c4:d8:fa:8b:66:cf:a6:
60:23:3f:af:b6:a1:9c:43:e4:28:ac:d4:21:e5:20:31:eb:c4:
88:d1:05:98:7a:3a:2a:6a:29:f3:f5:0e:8d:0e:d0:3d:63:f0:
fc:1f:f0:19:fe:fe:1b:b9:66:92:68:90:77:08:de:9f:d3:84:
6f:d3:3e:5d:99:cc:20:a2:c5:20:18:16:17:69:52:4b:38:a7:
47:ed:30:7e:10:3b:e1:be:f0:db:14:6f:b6:71:cc:20:5b:11:
99:10:07:75:c3:5b:47:6d:30:e6:6f:33:83:1d:16:97:57:a1:
fc:d6:c5:18:e3:f8:cd:f5:54:8c:50:8d:03:14:92:38:2c:42:
34:2f:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:10:22 2025 by rpki-client