Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
File: JfCxDKLk37Or6AFrgxnhVRHDOhw.mft (raw, json)
Hash identifier: xQ2DT0Jx5h/r43ry35S3H+w/1rhhLN7Xw0a/t4p97h0=
Subject key identifier: EE:0F:06:ED:B0:6B:49:52:BE:62:2A:92:08:BF:A3:88:70:2E:CF:95
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Certificate issuer: /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial: 0DC3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
Manifest number: 0DC0
Signing time: Thu 03 Apr 2025 00:55:34 +0000
Manifest this update: Thu 03 Apr 2025 00:55:33 +0000
Manifest next update: Sat 05 Apr 2025 00:55:33 +0000
Files and hashes: 1: JfCxDKLk37Or6AFrgxnhVRHDOhw.crl (hash: rNbpcwLNUqIHE6Dx3sJFwLW1/YWmkJqjk5CZJfb1OyI=)
2: 95B9A0DC542E11E68362481EF8AEA228.roa (hash: 8UoC48UqoDeH69RSkPNH1+FjRJDyG7fYrZ/nLYWEfIs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3523 (0xdc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36374C9AF
Validity
Not Before: Apr 3 00:55:33 2025 GMT
Not After : Apr 5 00:55:33 2025 GMT
Subject: CN=67eddc86-554b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:42:22:79:22:8f:8e:d3:fb:3f:90:a7:9e:d2:
d8:5c:b7:52:fd:ab:42:15:c2:d6:34:e1:ca:52:3f:
59:99:99:7d:35:2f:b8:3e:cb:6f:fa:e2:f6:c1:33:
9d:1b:9b:bb:96:88:f6:4e:85:07:e9:1a:5b:ec:54:
87:35:a3:a0:1f:35:1b:1a:c8:ea:96:c5:02:a0:88:
84:8d:bc:9b:3e:5c:e1:4b:f0:72:ef:d7:36:2e:84:
5b:b1:e2:df:8f:43:5a:4e:66:fa:c4:e1:97:09:06:
c8:36:11:f4:bc:37:e5:f4:2e:a0:fe:dd:25:ef:1d:
31:f3:b3:23:02:a5:0f:e2:38:1d:42:e4:63:f0:26:
25:ac:97:59:43:b0:b4:29:74:d2:1c:e9:e0:ac:cc:
de:41:cd:31:f2:74:90:ad:d2:bd:06:8b:64:19:05:
8f:4a:f9:00:1a:a1:39:3e:c1:98:96:a2:cd:89:ae:
2d:cc:5b:a5:40:d1:80:ae:0a:82:c7:aa:ad:65:7b:
c5:5b:c8:5a:cc:91:bb:3e:dc:bc:07:34:8e:23:3e:
98:3f:60:be:69:6e:7e:68:c7:7c:53:6b:e5:50:99:
f5:ce:68:1e:4e:55:4b:de:df:e7:78:de:d1:c7:6b:
cf:05:1a:0c:03:45:ac:d9:98:b9:33:a9:ea:60:c7:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:06:ED:B0:6B:49:52:BE:62:2A:92:08:BF:A3:88:70:2E:CF:95
X509v3 Authority Key Identifier:
keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:34:c9:d9:f3:63:6d:1f:5e:a9:41:dc:98:9e:b8:1d:88:21:
ba:83:45:d3:77:08:08:45:32:ed:a8:80:fb:33:7a:d2:57:32:
44:38:bb:d3:4c:b6:2f:2a:80:9b:7d:37:54:0c:d6:a1:75:9e:
f5:17:d3:ee:2b:32:bd:bb:35:e5:6e:ad:cf:1d:f3:0f:43:e0:
33:96:3c:a5:c4:cd:96:8d:37:eb:fa:d2:f7:d7:90:35:22:4b:
97:5f:a0:97:62:37:a3:09:9d:07:0c:9e:90:85:8f:96:be:f7:
83:a1:8e:e9:98:71:3c:4c:4e:c1:a7:19:3f:3a:0b:dd:d1:0f:
7a:28:7b:df:b2:34:18:cc:78:59:1a:7b:e4:80:37:07:fa:53:
30:31:be:1b:c8:6c:06:50:f2:2a:5b:72:17:ab:4d:49:ed:7c:
0a:ed:58:d0:26:e8:05:e6:62:4b:ba:54:7c:58:6f:5c:48:0b:
64:ba:6b:3b:04:20:20:59:f4:c6:0a:45:20:05:ce:9d:e2:9f:
1c:fa:f0:4e:5b:c8:df:32:9a:fc:69:08:1d:37:d9:cb:64:dc:
80:7d:c1:43:8b:c1:a8:20:ea:05:4e:f7:a4:6a:4b:bf:a8:5e:
81:af:85:ee:53:b1:9d:e5:da:cc:bd:46:32:f6:87:8c:23:e8:
c0:3a:da:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc0QzlBRjExMC8GA1UEBRMoMjVGMEIxMENBMkU0REZCM0FCRTgwMTZCODMxOUUx
NTUxMUMzM0ExQzAeFw0yNTA0MDMwMDU1MzNaFw0yNTA0MDUwMDU1MzNaMBgxFjAU
BgNVBAMTDTY3ZWRkYzg2LTU1NGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxQiJ5Io+O0/s/kKee0thct1L9q0IVwtY04cpSP1mZmX01L7g+y2/64vbB
M50bm7uWiPZOhQfpGlvsVIc1o6AfNRsayOqWxQKgiISNvJs+XOFL8HLv1zYuhFux
4t+PQ1pOZvrE4ZcJBsg2EfS8N+X0LqD+3SXvHTHzsyMCpQ/iOB1C5GPwJiWsl1lD
sLQpdNIc6eCszN5BzTHydJCt0r0Gi2QZBY9K+QAaoTk+wZiWos2Jri3MW6VA0YCu
CoLHqq1le8VbyFrMkbs+3LwHNI4jPpg/YL5pbn5ox3xTa+VQmfXOaB5OVUve3+d4
3tHHa88FGgwDRazZmLkzqepgx079AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7g8G
7bBrSVK+YiqSCL+jiHAuz5UwHwYDVR0jBBgwFoAUJfCxDKLk37Or6AFrgxnhVRHD
OhwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NEM5LzQyRTkzODcyNzhBQjExRTVCRkJBODYyQUY4QUVBMjI4L0pmQ3hE
S0xrMzdPcjZBRnJneG5oVlJIRE9ody5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pmQ3hES0xrMzdPcjZBRnJneG5oVlJIRE9ody5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzc0QzkvNDJFOTM4NzI3OEFCMTFFNUJGQkE4NjJBRjhB
RUEyMjgvSmZDeERLTGszN09yNkFGcmd4bmhWUkhET2h3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCbNMnZ82NtH16pQdyYnrgdiCG6g0XT
dwgIRTLtqID7M3rSVzJEOLvTTLYvKoCbfTdUDNahdZ71F9PuKzK9uzXlbq3PHfMP
Q+AzljylxM2WjTfr+tL315A1IkuXX6CXYjejCZ0HDJ6QhY+WvveDoY7pmHE8TE7B
pxk/Ogvd0Q96KHvfsjQYzHhZGnvkgDcH+lMwMb4byGwGUPIqW3IXq01J7XwK7VjQ
JugF5mJLulR8WG9cSAtkums7BCAgWfTGCkUgBc6d4p8c+vBOW8jfMpr8aQgdN9nL
ZNyAfcFDi8GoIOoFTvekaku/qF6Br4XuU7Gd5drMvUYy9oeMI+jAOtoF
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:19:45 2025 by rpki-client