Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier: b4u3U9X34ivOVLfhqEt3yLPFsU59NpifNHTMh516dqo=
Subject key identifier: F8:07:41:6E:16:B3:82:8D:F8:59:4F:58:6A:FB:71:FB:F7:5B:3F:F1
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer: /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial: 0230
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number: 0225
Signing time: Sun 20 Apr 2025 04:09:36 +0000
Manifest this update: Sun 20 Apr 2025 04:09:35 +0000
Manifest next update: Tue 22 Apr 2025 04:09:35 +0000
Files and hashes: 1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: YxP7TExzxiEAZ7APAOxpOpvI2cbd6RXrdWR1F5i/v5M=)
2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Apr 2025 00:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 560 (0x230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Validity
Not Before: Apr 20 04:09:35 2025 GMT
Not After : Apr 22 04:09:35 2025 GMT
Subject: CN=68047380-1b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:0a:e4:35:03:db:2f:bd:81:ce:93:0b:64:
10:e5:81:f4:f7:31:d3:51:a4:7c:cb:c9:41:45:85:
93:c6:1e:28:16:7f:70:77:c7:62:02:da:82:2a:5c:
61:fc:fd:10:78:1c:3e:0d:c2:45:26:b4:3a:6d:44:
5e:ba:ab:79:18:fa:37:72:63:9f:6a:1e:28:31:0b:
00:3b:97:17:2e:c7:2c:92:38:20:6a:7b:60:65:08:
28:ed:af:ed:9a:59:40:8c:25:02:5e:19:f3:13:09:
5b:09:2a:27:00:a6:5c:e4:e4:d6:32:d1:fc:0d:9a:
6a:23:ab:46:c2:de:ad:6d:f6:73:25:d3:bd:97:a8:
bb:53:06:b9:10:dc:09:c2:0a:43:45:a0:99:98:67:
21:d2:60:88:e3:c0:b6:74:18:fe:ba:0c:c5:82:15:
ca:de:04:34:cb:26:26:2c:7e:4b:66:ae:09:12:b7:
be:22:57:a0:24:8e:ba:c4:1a:be:dc:0b:1c:c1:81:
cd:2a:73:1b:e3:3b:aa:c6:5d:73:a7:d2:19:49:bb:
8a:98:ed:46:68:bd:07:a1:e8:65:72:0c:63:3e:93:
2c:e6:67:a0:ff:4f:f4:96:fb:37:02:48:5d:9c:64:
8f:21:68:de:8f:05:c2:65:40:d9:24:65:b9:c1:56:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:41:6E:16:B3:82:8D:F8:59:4F:58:6A:FB:71:FB:F7:5B:3F:F1
X509v3 Authority Key Identifier:
keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:2b:7a:9f:e6:dd:b4:f8:f0:94:09:b6:78:d0:1c:73:f9:76:
f8:85:92:57:b9:d0:97:97:b6:34:13:bf:db:0d:7a:f4:aa:f4:
ab:dd:d0:f4:99:93:1f:9a:8f:f7:2d:49:6d:7a:4c:fd:f8:0b:
f9:dc:2b:d9:bc:3a:3e:61:06:b5:ea:e1:74:f3:1a:47:e6:f5:
e6:23:62:8e:c0:c2:1a:98:d1:60:27:7c:b8:90:20:4d:4e:ff:
0f:1e:3c:17:e1:c4:3d:1f:2e:fc:15:13:e7:82:16:a3:54:10:
31:ae:35:ac:ff:88:a5:3f:eb:0e:8e:e4:33:81:01:9c:6e:a6:
f4:53:73:b9:48:f8:0e:0a:e7:cf:52:50:c8:b7:6d:9e:f7:9b:
db:e9:76:0a:f9:2c:46:22:c8:c9:21:a6:95:10:0a:92:52:9a:
52:17:73:39:3c:14:39:b4:f9:f1:3a:83:76:86:ce:e6:64:e8:
b0:1b:cf:de:43:84:5a:5c:4f:42:f5:80:8b:93:be:0e:17:ec:
48:4d:a3:3a:a6:80:94:fa:78:4b:ed:e1:68:30:b3:78:12:d0:
46:ae:47:d7:4f:99:02:fd:b1:fe:36:82:b9:3c:44:d5:06:a7:
36:1b:c2:6d:f9:81:c7:80:b9:42:cc:10:50:76:0f:ef:de:a3:
53:56:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:08 2025 by rpki-client