Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File: rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier: EDJxvLQSx31eI7NK4SIoYHRAk2LWokjEb+hXq5QYn00=
Subject key identifier: E9:97:E3:2A:28:D5:DD:46:A7:99:19:DF:54:B0:F7:53:1C:34:7C:26
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer: /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial: 08AD
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number: 08AD
Signing time: Wed 04 Jun 2025 01:35:10 +0000
Manifest this update: Wed 04 Jun 2025 01:35:09 +0000
Manifest next update: Fri 06 Jun 2025 01:35:09 +0000
Files and hashes: 1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: VWyN8IPojZUVovQeje6FdMTDR5GdhYwiPd1WD/H6J6g=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Validity
Not Before: Jun 4 01:35:09 2025 GMT
Not After : Jun 6 01:35:09 2025 GMT
Subject: CN=683fa2cd-3468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:7a:53:1f:ec:68:e6:f0:2d:e5:fc:f8:6b:
b9:dd:86:27:85:cc:1f:11:af:e3:c6:e9:b2:1d:c7:
8e:2e:cf:41:f7:b5:e0:6e:68:72:6d:91:c4:59:81:
35:de:09:f4:23:cd:7d:a9:60:67:e5:b9:49:fa:19:
7f:02:45:db:9d:ef:28:c2:ab:b1:4b:89:40:52:3c:
90:4e:7f:82:92:ff:83:fd:e9:4a:1d:a1:c0:c0:8a:
7e:5f:59:92:3b:01:d3:02:f2:28:21:0c:d6:22:4d:
80:95:a4:15:c1:f8:45:81:ef:54:63:13:96:46:35:
a6:12:a3:1d:c3:48:2a:f9:60:13:d5:ce:ba:8e:e5:
28:f7:1f:5c:00:88:c7:2e:64:f8:c0:f1:7c:bc:26:
38:59:46:b1:d1:04:16:b8:c5:c7:fe:86:38:ae:e4:
50:bf:24:e7:04:6b:8e:5b:72:f1:91:fc:93:7b:dd:
6d:1b:6d:54:4f:25:a0:98:a4:a6:af:e0:1a:6a:6c:
4f:2a:bb:36:ea:8d:c1:dd:d5:ec:1c:d9:fa:69:a2:
a4:c3:09:88:f5:cb:73:5d:3d:c1:7c:fb:fe:d6:a4:
5d:50:f8:21:6f:03:50:17:b5:66:ec:b2:67:86:23:
cf:2c:c9:d9:c3:9a:20:48:04:e2:d5:46:94:26:af:
17:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:E3:2A:28:D5:DD:46:A7:99:19:DF:54:B0:F7:53:1C:34:7C:26
X509v3 Authority Key Identifier:
keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d8:c1:e0:4c:33:52:95:15:96:d8:dc:23:47:ba:6c:cf:42:
88:38:c6:3b:8e:fa:71:c5:65:f3:e5:e5:a4:09:80:07:e0:da:
68:9d:d4:dd:ed:de:d7:c6:dd:37:29:0b:3c:ee:56:4c:78:2a:
40:aa:68:98:c7:01:d7:37:e9:31:31:bd:5b:ef:b9:3d:6a:30:
df:02:0c:76:30:e5:19:6b:12:da:59:94:3f:85:68:98:c4:8f:
2e:d7:2b:b7:00:c5:ef:d4:83:cc:82:b5:81:d8:6b:21:0b:4c:
8d:6f:fd:53:c4:9a:0c:70:d8:94:c9:17:78:15:f9:45:d2:d3:
95:3c:dd:39:9c:86:00:a0:6a:9a:99:08:01:e7:d2:72:52:b7:
95:d1:40:ba:e8:ac:64:d8:03:3d:e0:8f:99:71:f6:ac:30:5b:
17:91:5e:ed:5c:b4:06:03:e2:a3:46:d3:72:d5:c7:a1:55:95:
2c:b3:93:85:87:a0:5a:ff:35:d7:8d:45:a5:e9:3b:cd:d3:ff:
14:d4:a5:b6:cf:23:3c:1d:69:21:18:80:ef:3e:c6:d7:f4:6f:
e3:b7:ec:e0:64:3d:f2:30:9b:16:29:9e:12:56:14:7a:e2:1d:
a3:b3:fe:a1:98:a6:c4:7a:c3:ae:90:eb:06:68:64:77:12:9d:
34:76:9f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:31:14 2025 by rpki-client