
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
File: ebDAcmJ2iSrXTH0TD5nweuDmeko.mft (raw, json)
Hash identifier: EofeWq1vGesaVPQbQSNtm/0IwRptxEbv1iFcUrfu3AI=
Subject key identifier: F2:BD:2F:C8:9B:CE:EF:C5:CC:8C:8A:6E:EC:05:F9:95:27:D0:E3:9B
Authority key identifier: 79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
Certificate issuer: /CN=F3625D4AAF/serialNumber=79B0C0726276892AD74C7D130F99F07AE0E67A4A
Certificate serial: 01BD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
Manifest number: 01BC
Signing time: Thu 03 Apr 2025 02:54:31 +0000
Manifest this update: Thu 03 Apr 2025 02:54:30 +0000
Manifest next update: Sat 05 Apr 2025 02:54:30 +0000
Files and hashes: 1: ebDAcmJ2iSrXTH0TD5nweuDmeko.crl (hash: bdUKQf+IppEWYJVuLjRhJfssWuXukZ4kTRVQaMw7J9Y=)
2: 12A49B4ABF4011EE82ABE755775412E6.roa (hash: A3SsXw/efK2b5GKmG8JZKrlc0wfhdO7VSwE2A7UfoRE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 445 (0x1bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D4AAF
Validity
Not Before: Apr 3 02:54:30 2025 GMT
Not After : Apr 5 02:54:30 2025 GMT
Subject: CN=67edf867-d565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:0c:d5:fb:13:f8:f5:4e:e8:51:39:ed:6b:
78:3e:f1:bb:92:0f:03:f0:bd:57:8a:9c:19:15:fb:
9d:ff:ab:44:11:0d:e1:09:56:31:cf:98:8c:cf:a3:
60:8b:3d:8f:ac:ba:f0:5d:a2:47:51:e0:e4:76:87:
b9:a8:5f:d8:12:8e:10:df:4a:b3:e3:94:0f:2a:28:
e7:b7:21:b2:19:23:f2:e0:44:7e:3c:0b:63:4a:4f:
81:cd:fb:5e:cf:9b:87:cb:5f:27:ce:bd:dc:51:bb:
20:17:a8:a9:25:7d:e8:07:73:10:21:b8:0b:46:51:
dd:84:03:f5:4c:db:e6:61:a4:0f:4c:b6:30:54:f7:
f2:54:ee:88:8c:8d:6e:c8:00:b0:2b:e3:a7:ed:d1:
f3:1f:f4:4d:07:40:5e:a4:07:3c:7b:87:94:69:e0:
ce:78:78:64:45:17:e1:ef:49:79:2c:57:ee:b6:a8:
6d:91:ab:e8:51:8c:49:89:eb:64:bd:81:55:1a:ed:
1b:63:96:85:4f:3a:ca:2c:87:21:d8:c6:82:63:92:
35:05:08:bd:e9:20:77:dd:ab:cc:c8:17:1d:52:04:
58:f0:1b:ba:55:1b:61:5c:80:45:37:0f:05:38:99:
e2:7f:e3:95:5c:4c:52:f2:92:33:66:b4:58:7d:b0:
f0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BD:2F:C8:9B:CE:EF:C5:CC:8C:8A:6E:EC:05:F9:95:27:D0:E3:9B
X509v3 Authority Key Identifier:
keyid:79:B0:C0:72:62:76:89:2A:D7:4C:7D:13:0F:99:F0:7A:E0:E6:7A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ebDAcmJ2iSrXTH0TD5nweuDmeko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D4A/03EFFC9EBF3F11EEA6B40954775412E6/ebDAcmJ2iSrXTH0TD5nweuDmeko.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:d6:cf:09:09:2d:38:1b:4b:52:b9:83:75:1b:8c:00:b5:d3:
fc:4c:58:12:4c:0d:69:03:74:61:3e:60:bf:75:6b:fc:26:bc:
a0:b0:5d:32:46:23:9f:a3:8d:39:93:d4:66:06:42:86:ac:7f:
93:1e:d0:8f:a4:14:ff:95:ba:ac:f0:de:ab:2b:b3:8b:27:6a:
aa:01:3b:2e:15:aa:3c:f3:c6:a2:f8:ac:75:67:fe:11:23:86:
63:3a:a6:d3:93:a2:d7:02:57:87:41:75:f6:7f:9e:31:e7:f3:
26:45:11:56:71:b4:8f:bc:79:db:47:da:8d:26:2d:d0:94:49:
58:90:35:89:9a:e2:25:4b:47:04:6d:e9:40:bf:0d:b7:c0:f9:
82:25:d8:6c:40:66:d2:eb:dc:d2:d0:c6:02:d7:02:a0:5f:74:
24:c7:b1:46:cc:68:9a:35:ab:94:b4:44:22:dd:fe:12:53:be:
bf:e3:9a:d4:8e:76:f9:c5:cc:ce:df:d4:d4:c1:27:ec:45:27:
9f:36:5c:c4:36:b1:be:fa:1f:e7:49:c1:6c:ba:2d:39:0e:d9:
3b:2f:82:40:64:56:fd:92:de:bd:a9:1e:3c:a4:ba:c6:d3:81:
ea:8f:ff:dd:34:47:3c:00:49:9d:01:79:bd:72:74:36:db:b5:
dc:c9:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:37:33 2025 by rpki-client