Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
File: A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft (raw, json)
Hash identifier: O7OhpDL8LxTqQABhE4sX7KB7fa1SdpRTcErlWgRph2o=
Subject key identifier: 1D:6F:FE:A9:31:47:B1:5D:8F:DF:21:2F:80:BA:A6:D9:63:10:9D:16
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Certificate issuer: /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial: 0574
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
Manifest number: 0573
Signing time: Sun 06 Apr 2025 01:45:40 +0000
Manifest this update: Sun 06 Apr 2025 01:45:39 +0000
Manifest next update: Tue 08 Apr 2025 01:45:39 +0000
Files and hashes: 1: A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl (hash: mJaET81DCJwvLaYnGnVjDMXkyjyHNW+bOTl5f32EVUw=)
2: D9591C72EA1611EBA09F1503D8A014CE.roa (hash: ULu6v5Xd4RylQXz/DNaRnBo4gOCnbUZvm9Y1D6Eb7lc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1396 (0x574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3628C37AF
Validity
Not Before: Apr 6 01:45:39 2025 GMT
Not After : Apr 8 01:45:39 2025 GMT
Subject: CN=67f1dcc3-c5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:a0:76:c0:07:17:3e:75:ba:4f:a6:cc:a4:
53:6e:71:d5:a5:cd:30:db:90:1b:8a:35:38:c1:3b:
1e:fa:a1:81:f9:9d:25:0c:a6:a2:28:19:af:f9:c0:
7a:34:52:4c:08:59:4e:2c:7a:f4:07:1c:00:0d:b1:
36:90:81:b6:bc:1f:14:78:40:05:87:93:75:74:2a:
f3:e0:69:e2:e7:42:10:ce:74:ac:32:7f:2f:48:3f:
95:60:d9:ff:ad:80:fc:0c:52:79:20:f6:f4:7f:da:
62:73:a2:79:36:c7:68:75:e2:f5:5c:87:c9:14:18:
54:fc:97:5b:e2:fc:6d:e5:92:ca:83:ab:24:fb:a1:
4b:95:d9:c8:0d:a6:d6:2b:64:48:f8:83:3b:82:be:
34:a3:a0:b2:30:86:dc:92:27:89:8c:0b:ef:02:b5:
9f:80:ad:62:5f:b9:f8:b5:82:7d:43:1d:89:cb:9c:
72:d7:96:ca:1b:97:95:a3:aa:35:8c:7d:33:b4:ea:
37:5e:87:0f:5d:7d:90:fe:51:10:17:c7:f2:04:5a:
2d:16:56:57:ea:23:2c:a9:77:dd:3c:45:33:fe:8a:
b6:ff:96:4b:94:02:ec:09:a4:dd:f5:8e:87:cd:3e:
3c:e6:93:8c:1b:97:56:e0:49:c0:e5:76:02:ab:10:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6F:FE:A9:31:47:B1:5D:8F:DF:21:2F:80:BA:A6:D9:63:10:9D:16
X509v3 Authority Key Identifier:
keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
60:7f:5c:4a:29:53:23:88:30:79:34:1b:d7:98:7d:66:e0:79:
9d:58:05:57:3c:36:ce:bf:e5:80:3e:37:6b:5d:7c:87:fd:47:
5e:db:d2:a2:e9:e3:4d:bf:ca:7a:7a:1c:5e:70:72:7e:06:23:
b0:0b:fd:06:b2:29:19:32:ee:c2:bb:e7:f5:fa:95:a0:21:ed:
05:29:60:2e:88:b4:db:05:dc:ac:13:d1:80:4c:75:91:02:99:
f3:16:61:f7:01:91:a0:2a:21:6e:3e:f4:09:86:1d:fe:f9:5c:
68:4f:f0:7d:00:39:fd:82:44:7c:28:e3:70:10:f0:61:c2:3f:
1b:80:13:a1:75:88:14:bd:ee:1f:78:c5:c0:e1:3c:eb:c2:2e:
b1:60:13:dc:b7:2f:5a:b9:fc:c3:d7:da:da:01:9a:d0:7c:65:
7f:a8:28:2f:01:97:27:15:77:6d:a4:e8:55:c0:36:b5:08:ef:
09:fc:42:72:d7:0f:c1:3a:c7:9d:5c:78:e6:8e:19:3e:77:8b:
b1:03:18:43:23:a1:c5:41:55:eb:3e:c8:a5:1a:84:19:31:45:
5c:56:51:f1:0d:bd:97:30:62:cb:a1:b7:0a:ef:ed:d9:c9:ba:
b9:fa:e1:ee:bc:16:da:95:23:f5:01:a1:3d:c8:dd:ff:d3:77:
d4:01:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:29:28 2025 by rpki-client