Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier: Zm0WjrRqTnGGN60jwmrey3JzKtViUbvJPfx609UKKeU=
Subject key identifier: 96:40:BD:7D:70:A9:84:7E:E9:C7:5E:47:80:41:93:E7:76:D1:0E:F9
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial: 01F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number: 01EF
Signing time: Wed 04 Jun 2025 04:23:17 +0000
Manifest this update: Wed 04 Jun 2025 04:23:16 +0000
Manifest next update: Fri 06 Jun 2025 04:23:16 +0000
Files and hashes: 1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: X41DdpqxeEWpSVoUHPpcALplJfHWxAJLi/o8pjRC1/w=)
2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
6: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 503 (0x1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Validity
Not Before: Jun 4 04:23:16 2025 GMT
Not After : Jun 6 04:23:16 2025 GMT
Subject: CN=683fca35-8c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:67:2c:0a:82:83:d3:1e:d8:c6:49:12:d2:
35:c2:36:2f:56:b0:91:27:48:0f:c5:35:1d:0a:d2:
69:d1:9f:6e:fe:c8:b5:60:37:60:b8:cb:35:50:ec:
b1:83:9c:31:c6:39:b4:87:7d:5d:2f:50:94:ff:13:
10:4c:95:32:62:e8:86:47:ef:a4:a5:f3:6c:52:f5:
82:23:7a:6c:5d:31:5c:4b:ca:65:35:a4:0d:62:39:
d3:8f:2d:fe:f1:37:fb:06:27:10:33:f4:90:84:cd:
f2:5e:3a:c4:fe:5c:4e:11:9a:93:99:24:4d:bc:6e:
e2:07:83:77:cc:23:90:32:38:9c:7d:96:ff:40:c6:
b3:b1:87:39:86:3a:1c:8f:fc:cd:cc:8a:10:9b:05:
ac:8d:d0:1e:da:5b:73:69:0a:f5:4a:b8:d0:81:7a:
43:76:3e:30:11:fc:51:c0:64:f9:27:fe:d8:b5:41:
cf:34:fa:a1:d6:a8:8b:8c:cb:72:07:4e:e6:6c:10:
9d:07:2a:e5:6e:71:a7:12:54:67:a8:2d:bb:6b:9c:
88:5d:e9:4f:28:1c:b5:d4:79:4a:be:98:a0:fd:ea:
87:93:97:da:38:db:0a:62:ac:f4:30:af:4b:92:6a:
4e:72:ec:4c:68:53:f3:b3:27:84:73:1e:da:25:40:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:40:BD:7D:70:A9:84:7E:E9:C7:5E:47:80:41:93:E7:76:D1:0E:F9
X509v3 Authority Key Identifier:
keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
14:da:b1:2c:70:49:46:4a:79:df:55:ae:88:96:dc:84:3e:69:
3a:37:72:20:7d:af:7e:57:56:12:7b:88:17:a8:6f:01:68:9b:
02:00:8b:a4:d1:51:be:2c:4f:26:0c:d5:20:92:08:9f:c1:82:
40:35:99:d4:20:6a:2d:4f:b7:e7:a0:ee:f2:df:a5:99:58:0b:
f6:0b:d0:08:03:bd:1a:30:cd:87:35:fb:35:40:2a:b9:bb:92:
14:7d:5e:c9:a3:dc:83:ae:31:c0:df:e0:78:3d:2a:23:04:81:
67:69:18:ac:5c:7e:d3:17:3a:0d:2d:f9:7f:a2:3a:f3:46:bd:
c0:48:61:ca:35:1d:68:a7:4b:99:92:d1:98:15:5d:2a:e3:02:
98:38:03:82:43:b9:a8:02:a7:44:87:26:a6:ef:8f:8e:35:ad:
ca:67:c1:b3:41:61:8a:3d:22:a9:04:4a:8b:d2:4e:92:4d:bf:
38:aa:06:f8:a1:d4:63:75:85:ae:a9:41:32:33:46:91:a7:33:
33:2f:d1:d7:f4:d2:11:a6:a4:c4:a9:04:09:e4:98:43:9e:b4:
3f:fb:0a:fc:6d:3e:6c:f3:6a:ae:56:94:71:fc:b1:ee:b4:ff:
f2:6d:df:b1:6d:f1:e7:b7:41:64:7c:44:90:6b:6f:46:76:ea:
62:9e:0e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:18:29 2025 by rpki-client