Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
File: B0rky8vOb02Yhv7yEVKxOmrac9Y.mft (raw, json)
Hash identifier: W6yphsgF3/tEnqSMqFvgJXeDyEMun2cjBT28EaEAiuM=
Subject key identifier: 2B:09:DB:D4:F4:F9:D4:59:E3:1B:F9:BA:8A:6B:3E:A3:F2:10:F4:F7
Authority key identifier: 07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
Certificate issuer: /CN=F3659F9CAF/serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Certificate serial: 03B7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
Manifest number: 03B7
Signing time: Thu 12 Jun 2025 03:22:57 +0000
Manifest this update: Thu 12 Jun 2025 03:22:56 +0000
Manifest next update: Sat 14 Jun 2025 03:22:56 +0000
Files and hashes: 1: B0rky8vOb02Yhv7yEVKxOmrac9Y.crl (hash: nBz9s3GsukK2VoHtTbzxO3jWhdWM6T9lqVjtsa4pCDk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Jun 2025 03:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 951 (0x3b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAF, serialNumber=074AE4CBCBCE6F4D9886FEF21152B13A6ADA73D6
Validity
Not Before: Jun 12 03:22:56 2025 GMT
Not After : Jun 14 03:22:56 2025 GMT
Subject: CN=684a4811-7283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ff:5a:f4:8d:9e:30:99:0d:d1:16:f3:e0:1b:
e8:f0:df:a8:f5:02:b7:2e:af:6e:fc:fb:64:35:ec:
68:a4:34:82:a6:e3:bd:d6:c5:b5:40:29:2c:d9:da:
fd:35:46:2c:4e:c8:48:55:80:79:cd:73:2e:6f:00:
f0:54:9a:2f:97:6e:1c:2a:68:2c:1a:57:5d:cb:a9:
3e:96:de:73:b5:91:ee:61:52:40:0c:3e:7d:ce:49:
6b:cf:bf:42:3a:98:78:b2:0f:12:a7:58:08:dc:6e:
5b:03:43:45:a9:27:0b:ed:a5:f4:a0:ca:7c:6f:ea:
88:30:e5:d2:1a:27:3e:d8:01:47:99:82:da:16:cc:
ac:78:b2:22:35:d0:29:2c:18:6e:80:7c:d3:ba:f7:
e3:9b:b4:09:db:5e:4d:2a:38:10:5e:7a:db:67:1e:
52:45:12:69:b8:14:e2:0f:9e:92:a8:ec:30:21:e8:
d1:48:41:b8:cd:4b:7e:18:3b:a4:86:80:9c:e6:1d:
92:c9:b8:15:08:89:41:f3:74:6f:1f:01:e4:3f:49:
09:dd:0e:da:93:f7:95:9c:61:30:ec:30:3a:0e:1d:
3f:3e:bf:93:d3:a6:ab:d7:03:a1:a0:c2:c2:a8:b9:
6f:cf:3c:45:79:4c:42:bd:cb:79:1c:ed:b1:94:4b:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:DB:D4:F4:F9:D4:59:E3:1B:F9:BA:8A:6B:3E:A3:F2:10:F4:F7
X509v3 Authority Key Identifier:
keyid:07:4A:E4:CB:CB:CE:6F:4D:98:86:FE:F2:11:52:B1:3A:6A:DA:73:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0rky8vOb02Yhv7yEVKxOmrac9Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/321B02027A0911EDACA64885F1222468/B0rky8vOb02Yhv7yEVKxOmrac9Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
53:6e:5f:c4:2b:c0:38:68:4f:75:e1:f4:5e:fe:28:f7:06:7b:
03:96:2e:b8:55:34:42:09:0f:32:42:ee:9d:82:9d:59:92:8f:
43:99:df:7f:73:f6:9d:20:e1:20:8a:b2:ca:e7:38:9a:26:0a:
15:8b:a6:09:44:4a:05:42:67:27:e4:b3:2a:2c:06:75:08:22:
5f:2c:fe:cf:5a:0a:c8:f1:de:e6:58:cc:76:ca:2e:b9:c5:e3:
e6:50:9c:fa:ae:2c:4e:db:a4:6a:80:3d:6e:1d:a1:0e:2c:79:
54:25:b6:28:1a:98:6a:b6:c0:21:9b:f4:bf:fe:39:f5:1e:d1:
08:f1:c5:64:00:ec:8a:b8:76:82:1c:db:2b:00:a7:12:8e:70:
89:ff:5b:7d:36:f4:e3:7f:aa:4b:4f:c4:f8:19:c9:92:81:25:
c0:49:06:fa:21:59:f9:62:c6:f5:de:09:34:0d:93:6e:e7:00:
21:8e:1b:d5:3b:cd:35:9e:6d:8e:55:0b:78:da:e0:13:7d:14:
92:a6:5e:f8:d0:cd:11:f7:50:e4:f9:90:8d:38:02:64:c2:5b:
7d:d1:cc:dc:a4:10:e8:61:fb:94:2a:88:20:c4:78:ee:f3:f2:
eb:24:11:e9:91:9b:c2:73:30:79:63:60:93:18:9f:9c:69:ca:
69:4d:ff:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:05:07 2025 by rpki-client