Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File: zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier: GmjTlo0k9ksxyw0mZ5sd8lCKOOSLhkArM5uoVzkhDkw=
Subject key identifier: 8F:A5:1C:AB:A9:B2:64:26:52:3D:B1:19:68:7C:86:16:F0:17:16:51
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 01AF
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number: 01AF
Signing time: Thu 03 Apr 2025 02:56:16 +0000
Manifest this update: Thu 03 Apr 2025 02:56:15 +0000
Manifest next update: Sat 05 Apr 2025 02:56:15 +0000
Files and hashes: 1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: oVArBGaTaVW4p385eDKPZpYUVa67RkR1GavTotFzsTs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431 (0x1af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF
Validity
Not Before: Apr 3 02:56:15 2025 GMT
Not After : Apr 5 02:56:15 2025 GMT
Subject: CN=67edf8d0-dd2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:40:ef:d7:2d:3a:e2:3c:83:e1:f9:14:e3:
58:8b:79:b7:6c:e5:79:f8:ae:9e:a3:3f:75:ae:aa:
d6:1f:be:ae:53:83:75:6f:df:c5:67:c7:d9:7f:07:
39:ec:a4:94:af:94:97:ce:42:68:ad:33:26:4a:37:
81:81:e3:1f:47:12:19:19:1a:25:3d:ab:2f:ee:87:
3e:e6:0c:de:dd:03:02:bd:93:e6:a7:01:d7:68:fd:
81:3e:80:a6:e0:1c:3f:e7:7c:f2:80:b1:b6:11:25:
e8:ea:ba:9e:ca:29:22:9b:c8:be:88:d9:3d:43:0a:
fd:37:47:d0:dd:d1:55:5d:7e:9b:8d:f1:39:e3:a5:
ce:7b:c5:28:00:3b:41:14:8f:de:61:f4:fb:91:b9:
d7:10:70:7b:19:5b:dc:9c:39:71:f9:b4:27:f5:53:
c2:82:c1:87:1d:0d:22:57:cf:0f:86:1f:1a:12:0f:
e5:78:bb:cc:ff:a0:d7:25:40:54:d2:14:e4:08:f2:
ec:39:3b:c4:b9:c8:13:a4:06:37:8f:0c:74:aa:99:
1b:c6:06:92:16:8f:b1:b4:30:28:09:08:de:d1:57:
6b:2b:98:67:3c:df:33:40:d1:76:19:8a:ce:db:fd:
9a:b8:f1:df:c6:19:b0:29:ed:e5:b4:79:49:84:b5:
25:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A5:1C:AB:A9:B2:64:26:52:3D:B1:19:68:7C:86:16:F0:17:16:51
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c3:56:2d:6b:70:38:10:69:15:ca:a6:21:02:e9:62:ca:00:92:
c4:02:c6:1c:56:fb:70:ef:6b:17:02:66:9c:4e:ee:64:03:f8:
99:bf:11:e5:5f:b5:4c:98:70:19:63:83:85:bf:2e:df:b5:4c:
19:38:53:6d:c5:a7:14:44:01:e6:b8:de:d8:f4:1a:cb:5f:c3:
c7:e8:47:50:37:0b:a0:7f:5d:ba:05:86:be:4c:57:e7:ef:8a:
35:47:14:0d:e1:06:0d:1a:e4:4c:a1:a2:ab:c4:ac:d5:a0:3c:
c6:da:04:e4:f5:6a:9e:84:5c:15:87:f3:12:15:db:fb:6e:15:
57:bf:cf:e0:94:7f:4a:02:20:a3:b4:d3:de:68:8a:c0:e8:7d:
07:27:99:54:7a:ba:8d:ad:dc:5f:6d:15:99:bf:8b:5c:5f:26:
ec:0c:bc:ee:ad:c4:71:3b:cb:66:25:34:91:cb:2d:67:bc:cd:
b9:26:fb:22:30:40:ac:d5:0b:a8:a7:59:4d:65:6e:77:3e:05:
59:c0:69:39:67:ed:eb:71:58:e7:f4:43:cb:e2:8d:b6:89:19:
ab:c3:24:44:5f:b0:d2:d6:60:a1:e8:56:3c:62:22:cf:62:33:
1e:ee:da:69:e4:8d:95:1a:09:cf:29:8f:d4:89:fc:4b:ea:4f:
e0:62:1d:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTA0MDMwMjU2MTVaFw0yNTA0MDUwMjU2MTVaMBgxFjAU
BgNVBAMTDTY3ZWRmOGQwLWRkMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5WEDv1y064jyD4fkU41iLebds5Xn4rp6jP3WuqtYfvq5Tg3Vv38Vnx9l/
BznspJSvlJfOQmitMyZKN4GB4x9HEhkZGiU9qy/uhz7mDN7dAwK9k+anAddo/YE+
gKbgHD/nfPKAsbYRJejqup7KKSKbyL6I2T1DCv03R9Dd0VVdfpuN8Tnjpc57xSgA
O0EUj95h9PuRudcQcHsZW9ycOXH5tCf1U8KCwYcdDSJXzw+GHxoSD+V4u8z/oNcl
QFTSFOQI8uw5O8S5yBOkBjePDHSqmRvGBpIWj7G0MCgJCN7RV2srmGc83zNA0XYZ
is7b/Zq48d/GGbAp7eW0eUmEtSV5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUj6Uc
q6myZCZSPbEZaHyGFvAXFlEwHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDDVi1rcDgQaRXKpiEC6WLKAJLEAsYc
Vvtw72sXAmacTu5kA/iZvxHlX7VMmHAZY4OFvy7ftUwZOFNtxacURAHmuN7Y9BrL
X8PH6EdQNwugf126BYa+TFfn74o1RxQN4QYNGuRMoaKrxKzVoDzG2gTk9WqehFwV
h/MSFdv7bhVXv8/glH9KAiCjtNPeaIrA6H0HJ5lUerqNrdxfbRWZv4tcXybsDLzu
rcRxO8tmJTSRyy1nvM25JvsiMECs1Quop1lNZW53PgVZwGk5Z+3rcVjn9EPL4o22
iRmrwyREX7DS1mCh6FY8YiLPYjMe7tpp5I2VGgnPKY/UifxL6k/gYh1x
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:53 2025 by rpki-client