
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File: kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier: Hdm8ZmP7nEcSD/xgzWyhVAtb+U79jAEfRBJzpG5ZNpU=
Subject key identifier: 5B:C7:B4:12:25:3D:DE:C8:7B:29:7A:EE:4F:43:6F:43:EE:81:9E:48
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer: /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial: 033B
Authority info access: rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number: 032B
Signing time: Sun 13 Apr 2025 02:25:14 +0000
Manifest this update: Sun 13 Apr 2025 02:25:14 +0000
Manifest next update: Tue 15 Apr 2025 02:25:14 +0000
Files and hashes: 1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: J86NtD02o5tJY7Ktk5U2YS+olDIpw1JYrXAjRpeEk/8=)
2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
7: E5662DD4A17A11EEAB16F955D25BE465.roa (hash: nQB8uEKFdXSZvidfMMlhgfBX43bi5bFfOgAaXmAWfUM=)
8: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
9: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 15 Apr 2025 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 827 (0x33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Validity
Not Before: Apr 13 02:25:14 2025 GMT
Not After : Apr 15 02:25:14 2025 GMT
Subject: CN=67fb208a-1837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:80:b2:7b:22:70:76:fe:9a:24:cf:86:0e:
2e:56:32:0b:43:47:2a:56:18:36:2d:5b:11:80:12:
b4:79:69:54:ad:e6:6c:90:cc:7d:0b:b5:df:64:84:
3b:a2:cf:2e:9a:09:01:04:8f:3a:8f:17:53:7a:00:
6a:eb:8d:cf:d3:08:64:5c:f9:89:82:76:91:68:67:
ee:a1:f2:c7:81:70:8e:88:f3:88:dc:ac:fe:59:ad:
4f:ff:7b:be:45:27:4f:d0:15:44:60:14:e5:6f:fd:
b4:2e:b5:e9:5c:ae:fb:67:a0:aa:4a:df:91:70:96:
1f:ca:cc:67:31:53:9d:62:35:08:bc:cc:c0:5e:f0:
d9:42:02:61:78:f8:31:97:df:5b:9a:56:c0:e0:36:
8b:41:07:62:d9:f1:5d:00:eb:ea:2d:cf:ce:30:02:
39:65:da:63:85:a4:af:8d:d5:7e:81:a2:53:f1:45:
3b:77:8a:cf:57:ea:24:55:59:97:5b:95:6d:22:93:
5c:33:f1:09:b1:63:94:ac:5b:f7:74:ba:30:a2:96:
d8:22:23:c4:bd:8f:e3:4a:53:18:b5:61:f7:c6:2f:
f9:63:74:51:7a:53:dd:89:bb:b0:f5:7b:1d:2b:66:
ed:35:f5:d9:95:3c:25:4c:8a:6d:ea:e3:94:19:ca:
69:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C7:B4:12:25:3D:DE:C8:7B:29:7A:EE:4F:43:6F:43:EE:81:9E:48
X509v3 Authority Key Identifier:
keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:a3:64:18:ff:f1:84:36:ee:58:b8:4c:a0:60:e7:ab:28:b4:
c4:ca:9f:d7:03:60:a1:28:11:1b:d2:29:f1:53:0c:1b:9d:fa:
ba:b2:1e:b9:ed:a8:5d:8f:a8:21:be:c0:c5:91:3d:7a:a3:02:
8e:c5:71:f4:d0:44:5f:b1:7c:f7:3e:8b:be:53:aa:2f:68:e4:
9d:4f:ab:4f:eb:47:03:80:df:c7:54:c3:b2:c3:db:79:c7:f9:
94:7e:43:60:5a:0d:ec:43:f0:b8:82:f2:ad:06:d9:44:7a:1f:
f5:6c:6e:e2:02:21:6d:21:e3:68:b2:59:5c:68:d6:f0:bb:73:
13:c8:dd:b2:b5:0b:8f:31:25:e7:9d:fa:9a:8a:59:9d:d7:f4:
62:d2:b8:e2:c2:8c:77:d2:32:fb:12:e6:fb:e8:52:ac:1d:fa:
ff:f9:81:0f:ea:58:35:42:3d:38:f0:ce:80:4d:d8:d4:47:fa:
15:c5:f0:68:d3:f9:d4:3c:7c:84:e6:73:50:e2:fe:34:0d:8b:
f8:90:b3:7a:16:97:e8:51:89:4d:2b:5e:22:06:34:83:d5:47:
5a:5d:a3:fd:2c:bf:d0:08:0b:6c:7c:22:90:4e:fd:49:59:7b:
b3:f3:54:39:8d:ed:35:07:54:70:d4:78:94:0b:08:f7:f1:43:
68:ae:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:54:02 2025 by rpki-client