Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
File: Bal449VH9Vk-SwMZcDhZhpRQWMY.mft (raw, json)
Hash identifier: WW6c52Dnfd1v2OtL3YzTIBGwX9/wj1XlOQgyG81sKhg=
Subject key identifier: BD:19:44:C3:B0:8F:08:48:99:0E:FB:C9:30:8F:47:01:13:BA:9A:78
Authority key identifier: 05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
Certificate issuer: /CN=F363235DAF/serialNumber=05A978E3D547F5593E4B031970385986945058C6
Certificate serial: 24
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
Manifest number: 1F
Signing time: Wed 02 Jul 2025 05:23:34 +0000
Manifest this update: Wed 02 Jul 2025 05:23:34 +0000
Manifest next update: Fri 04 Jul 2025 05:23:34 +0000
Files and hashes: 1: Bal449VH9Vk-SwMZcDhZhpRQWMY.crl (hash: ilREvRADEcDqahaDt9ctzESm1HIA+XN4+n40fU+cwCI=)
2: 956D6C004C7A11F0941F5DBBDAE4EC9C.roa (hash: 4pbVD/R5drzn4R/PeVc+1JSe6FAId7REQJilHo0BefE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 04 Jul 2025 05:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36 (0x24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363235DAF, serialNumber=05A978E3D547F5593E4B031970385986945058C6
Validity
Not Before: Jul 2 05:23:34 2025 GMT
Not After : Jul 4 05:23:34 2025 GMT
Subject: CN=6864c256-8f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:28:15:14:9e:27:76:a7:53:c3:df:36:97:
22:ff:08:bb:e2:08:d5:be:67:eb:e6:0a:e2:10:d9:
e2:00:c5:74:d1:cc:da:a3:00:a0:7c:58:41:89:6e:
b4:47:a6:37:d3:bf:5e:ed:23:07:22:b9:c3:ac:8e:
15:f9:76:12:b3:66:86:91:37:fa:3c:93:d4:75:40:
02:14:e7:81:ca:e5:29:45:8c:bf:d2:47:5b:6c:04:
9b:93:26:cb:32:20:ec:aa:69:75:54:f7:09:8d:78:
8c:0d:ed:16:a6:dd:c2:cf:ae:f9:87:0a:ed:ce:1b:
8a:1e:5f:0d:e4:14:63:7f:97:76:99:93:8c:d6:09:
5c:09:52:cd:0b:94:2a:ba:a8:4c:4a:b3:90:d3:6c:
5a:72:f8:f3:6d:9f:b1:40:18:40:69:ad:02:26:e3:
87:e4:61:ac:94:29:dc:ef:dd:d3:7a:f3:18:a0:5f:
bd:4a:de:37:d9:ab:0c:dd:b0:1c:23:19:03:fa:a4:
a6:d7:d2:1e:87:e2:10:2b:fe:c0:19:5a:29:db:15:
e7:90:03:a5:39:16:04:61:10:8d:cc:4f:fd:d4:96:
a8:42:38:11:e6:3a:a5:07:d6:46:ae:a4:ea:19:0f:
d6:a1:f4:8c:09:3c:cd:82:6e:bd:95:30:76:a8:44:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:44:C3:B0:8F:08:48:99:0E:FB:C9:30:8F:47:01:13:BA:9A:78
X509v3 Authority Key Identifier:
keyid:05:A9:78:E3:D5:47:F5:59:3E:4B:03:19:70:38:59:86:94:50:58:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Bal449VH9Vk-SwMZcDhZhpRQWMY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363235D/677CFDEC4C3911F083EC3397DAE4EC9C/Bal449VH9Vk-SwMZcDhZhpRQWMY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:35:e3:a0:fe:ce:b2:40:f7:40:0e:0a:ec:6d:e7:1f:18:0b:
4b:df:64:cd:54:2d:6f:30:11:7d:69:c0:38:83:77:f6:1b:7f:
01:6e:d9:a4:db:fe:ed:aa:af:0d:89:b9:23:3b:0d:62:96:be:
b8:13:b5:ba:33:22:c5:3a:5b:00:dc:02:c5:43:cd:ab:7a:69:
d8:69:69:6d:ff:f0:92:4e:bc:77:67:9c:59:85:f0:bd:25:d9:
a5:fc:c5:ec:b3:a8:b2:2b:7a:64:0c:64:19:16:0d:84:00:33:
05:5d:6a:4f:79:98:b5:11:44:47:c9:e5:17:b1:be:64:5f:be:
a6:cb:3b:9e:d3:03:85:f3:1e:92:a4:23:ca:f5:23:0c:df:35:
2e:99:6a:d4:48:a2:5d:1c:97:c6:ac:8a:ff:cf:d1:0e:be:42:
69:46:4d:47:23:70:9d:b7:48:05:77:c4:ed:ca:bf:23:79:5f:
9e:28:5f:8b:09:11:02:ba:e4:4e:1e:c7:99:9c:3b:14:f0:62:
64:1b:89:42:05:50:9b:c0:5b:ea:44:6a:7d:c1:33:b0:dc:74:
5b:51:2a:f7:9f:57:78:41:57:4c:52:64:95:92:1c:68:d1:4f:
ec:e5:8a:e7:df:8f:59:d1:61:64:45:50:7b:9e:8c:d9:e3:8c:
66:03:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:49:10 2025 by rpki-client