Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File: MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier: 1EGpIPvkkok+moqEDXwAwDUnVK/lE7gGBTlaSwamROU=
Subject key identifier: 96:EE:1B:1B:7D:F0:70:05:3E:AB:05:FD:4E:03:37:08:D4:58:80:81
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer: /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial: 034F
Authority info access: rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number: 034F
Signing time: Tue 22 Apr 2025 03:27:12 +0000
Manifest this update: Tue 22 Apr 2025 03:27:11 +0000
Manifest next update: Thu 24 Apr 2025 03:27:11 +0000
Files and hashes: 1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: MH128tIOINVZQ2NYmZ5ydXRn0wVR7fpK9t5zQL2AQJo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 24 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3662123AR, serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Validity
Not Before: Apr 22 03:27:11 2025 GMT
Not After : Apr 24 03:27:11 2025 GMT
Subject: CN=68070c90-a4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:9b:00:8b:32:e0:91:89:60:3a:1c:f0:b4:
a9:f6:f1:45:89:e0:a8:6d:53:b7:20:d0:ae:2c:e3:
94:f2:0c:03:fc:b2:78:62:99:d2:2c:e7:53:e8:a7:
b4:60:28:fc:c5:3e:18:bd:47:fa:40:98:85:f9:b1:
da:c9:2e:a1:96:54:5b:23:cd:89:e8:4c:c2:fb:70:
af:06:c8:88:50:d1:8e:50:67:c9:27:56:5d:7a:b9:
3c:82:55:0b:6c:cc:b7:f8:32:a9:35:44:27:e2:f9:
0e:c6:cd:22:2f:d1:99:2a:ba:63:3d:15:2a:fd:2c:
6b:16:f1:f7:f9:3f:fb:89:67:aa:62:9c:5a:56:ad:
b2:bb:63:6d:3e:8b:80:03:0e:08:76:33:b7:9c:1f:
9c:32:f4:c6:ab:3c:09:3c:58:48:03:a6:50:50:31:
49:61:6f:9c:99:73:c6:fb:3d:71:37:a3:8c:37:88:
c5:6d:36:f8:2d:39:fb:b2:3d:68:a9:4b:e7:1b:42:
1f:52:55:9c:9e:81:b6:b6:72:2b:7d:2c:b7:e8:49:
74:b7:c2:7e:be:ef:fe:44:e0:b0:00:8b:35:98:f3:
e6:4e:ed:7d:2d:6b:83:95:cb:19:af:d6:b1:db:a2:
ec:8e:17:d9:eb:37:22:1a:da:d1:2d:8f:95:15:c8:
ee:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:EE:1B:1B:7D:F0:70:05:3E:AB:05:FD:4E:03:37:08:D4:58:80:81
X509v3 Authority Key Identifier:
keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:f6:b9:40:2e:99:13:7d:12:35:5b:52:fe:55:dd:6a:07:
58:46:b7:92:0d:89:df:24:d1:7c:42:cf:40:e3:ce:ce:62:6d:
8b:a9:c4:55:02:52:70:bb:67:b5:2a:0b:56:0d:1b:97:95:54:
69:d8:84:44:fc:dd:5d:91:1b:c5:4a:fd:46:2a:f1:25:a1:06:
07:30:43:a6:2d:04:3f:6b:75:f5:50:09:18:84:ed:35:c2:16:
19:1b:93:04:21:3d:7e:83:5f:e1:b0:fc:c2:d1:89:65:83:c6:
cc:b6:86:93:37:02:cf:61:23:1c:5f:d0:fd:63:fa:eb:25:72:
b7:d4:00:17:17:ea:c9:9a:2f:20:b9:a7:5e:5a:ce:18:f8:90:
d9:72:cf:8d:bc:87:c7:09:e6:63:73:f4:f0:67:56:f9:c4:33:
2b:21:9f:15:89:55:bb:6f:7e:21:3c:cd:f4:1c:06:97:90:18:
90:7c:9a:c3:46:13:77:ce:76:27:21:5d:b5:fe:ec:d5:13:75:
99:93:8b:9f:a2:d1:95:3b:1d:ee:ab:83:94:d6:53:f1:60:ef:
2e:b9:ea:99:d0:80:d5:6e:c8:c7:59:a9:1e:15:d1:8c:64:94:
e1:33:94:d8:4b:fc:21:d1:76:8e:4e:ac:7e:5d:f7:68:de:f7:
db:2b:ff:3d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA08wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBUjExMC8GA1UEBRMoMzMzNDFEQ0ExNjE4NzNBRTdGM0E0NEIzNkUxQ0RC
MzlCNUMwQTA5QTAeFw0yNTA0MjIwMzI3MTFaFw0yNTA0MjQwMzI3MTFaMBgxFjAU
BgNVBAMTDTY4MDcwYzkwLWE0Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2dpsAizLgkYlgOhzwtKn28UWJ4KhtU7cg0K4s45TyDAP8snhimdIs51Po
p7RgKPzFPhi9R/pAmIX5sdrJLqGWVFsjzYnoTML7cK8GyIhQ0Y5QZ8knVl16uTyC
VQtszLf4Mqk1RCfi+Q7GzSIv0ZkqumM9FSr9LGsW8ff5P/uJZ6pinFpWrbK7Y20+
i4ADDgh2M7ecH5wy9MarPAk8WEgDplBQMUlhb5yZc8b7PXE3o4w3iMVtNvgtOfuy
PWipS+cbQh9SVZyegba2cit9LLfoSXS3wn6+7/5E4LAAizWY8+ZO7X0ta4OVyxmv
1rHbouyOF9nrNyIa2tEtj5UVyO4hAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUlu4b
G33wcAU+qwX9TgM3CNRYgIEwHwYDVR0jBBgwFoAUMzQdyhYYc65/OkSzbhzbObXA
oJowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzJCQ0Y2MjQ4OUQyODExRURCOEY5MjU4QkYxMjIyNDY4L016UWR5
aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L016UWR5aFlZYzY1X09rU3piaHpiT2JYQW9Kby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjIxMjMvMkJDRjYyNDg5RDI4MTFFREI4RjkyNThCRjEyMjI0
NjgvTXpRZHloWVljNjVfT2tTemJoemJPYlhBb0pvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdjva5QC6ZE30SNVtS/lXdagdYRreSDYnf
JNF8Qs9A487OYm2LqcRVAlJwu2e1KgtWDRuXlVRp2IRE/N1dkRvFSv1GKvEloQYH
MEOmLQQ/a3X1UAkYhO01whYZG5MEIT1+g1/hsPzC0Yllg8bMtoaTNwLPYSMcX9D9
Y/rrJXK31AAXF+rJmi8guadeWs4Y+JDZcs+NvIfHCeZjc/TwZ1b5xDMrIZ8ViVW7
b34hPM30HAaXkBiQfJrDRhN3znYnIV21/uzVE3WZk4ufotGVOx3uq4OU1lPxYO8u
ueqZ0IDVbsjHWakeFdGMZJThM5TYS/wh0XaOTqx+Xfdo3vfbK/89
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:12:46 2025 by rpki-client