Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File: 3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier: V/uAfVVM2Gn3MQntg56m/0cBjN8PDjv4Ro6GHXfui/M=
Subject key identifier: B6:76:53:1A:7C:44:12:72:C1:27:45:F6:32:BC:D6:FC:A1:EE:B2:92
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer: /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial: 047F
Authority info access: rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number: 047D
Signing time: Sun 08 Jun 2025 02:55:42 +0000
Manifest this update: Sun 08 Jun 2025 02:55:41 +0000
Manifest next update: Tue 10 Jun 2025 02:55:41 +0000
Files and hashes: 1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: A//Bi80DwxMeRFL+lQnAWlhWQXON33Uaf3qxdGyjloM=)
2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 02:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1151 (0x47f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Validity
Not Before: Jun 8 02:55:41 2025 GMT
Not After : Jun 10 02:55:41 2025 GMT
Subject: CN=6844fbae-7022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:d5:eb:59:bf:c4:c7:38:24:57:1a:65:64:
74:a5:f0:a7:aa:2e:6b:1c:d5:49:b6:0d:bc:09:c2:
16:63:7d:d5:b5:e3:2f:90:ba:db:77:88:e2:2e:9b:
d7:b5:04:bb:cd:79:01:ce:76:ce:fe:60:c6:cf:a5:
af:be:3b:aa:63:1f:b4:fe:af:83:9e:3a:91:f6:8c:
c8:10:26:06:6d:67:4f:98:23:bd:e8:66:e2:41:58:
eb:fd:cf:06:cf:6e:6d:30:a8:a5:93:4c:ad:c8:bb:
b1:14:8e:4b:26:54:90:1c:67:fd:09:7f:ba:d2:4a:
05:ae:2c:bf:5b:52:7b:65:14:b9:90:b2:e7:63:3c:
cc:81:46:a8:b9:13:7c:94:e8:8c:fa:ff:1d:e9:0e:
77:0d:d9:54:c8:98:f4:69:14:62:c4:0b:58:7d:6b:
cb:8b:11:f3:79:3f:d7:48:7c:c5:17:39:24:a5:e3:
80:fc:d7:d3:9c:c5:52:7a:62:6f:8c:2a:46:b1:fe:
6f:54:e8:9a:38:01:e0:eb:a5:b4:8c:f9:51:ea:b5:
45:a9:9d:40:01:f7:72:53:ba:3a:62:dc:16:b5:0c:
8f:36:18:08:11:43:fc:3c:eb:5c:92:14:10:c1:79:
86:b0:e3:a7:2b:20:81:fa:58:bd:df:1a:d5:10:44:
f3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:76:53:1A:7C:44:12:72:C1:27:45:F6:32:BC:D6:FC:A1:EE:B2:92
X509v3 Authority Key Identifier:
keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9d:ff:37:49:9e:1d:97:94:7f:08:d1:cd:70:f2:29:63:53:
aa:55:6b:9c:59:67:de:52:24:af:7d:5c:14:8b:7e:b0:97:10:
74:82:5f:bc:ad:08:f7:08:8c:e6:52:46:4b:d0:b6:a0:94:a2:
2c:77:c8:cd:90:7c:18:dc:42:a0:a5:35:a3:57:36:f5:59:ef:
54:49:1d:f7:9a:e7:32:37:a0:b4:41:3d:ac:45:59:cd:cf:e5:
b0:0e:05:ba:f5:b9:43:8b:47:3c:4f:45:a4:ae:e8:6a:1f:56:
a9:f7:02:59:09:16:96:56:38:f0:83:96:bb:21:c8:58:dd:3b:
f9:24:b9:ba:76:ac:b7:fc:fa:a5:58:0e:a0:37:92:fc:ae:38:
09:b5:d3:7c:77:96:b1:70:0c:0a:01:62:9d:3c:d5:24:22:a3:
c4:5c:0f:8e:12:5b:ae:4f:ee:fd:fd:40:67:27:26:93:93:60:
64:02:37:1d:09:57:3d:ed:34:66:28:1f:ca:80:32:c2:72:b5:
00:93:b0:d1:44:54:f4:c2:cb:90:af:06:6b:1a:4a:f8:5e:a0:
f1:8c:7f:33:60:80:21:5c:f2:4e:5c:da:7b:81:f8:f9:d0:89:
20:b2:50:e4:ab:e3:9a:97:03:b9:3b:12:8a:5c:ec:df:1d:5e:
d5:e4:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:48:02 2025 by rpki-client