Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File: MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier: CikJsUXpJ9dOdt3Udg42kS4Dc1xJ0MfptDbbmIJ3E/w=
Subject key identifier: 36:40:DC:C3:6F:E4:1F:F7:66:99:5F:9E:B6:BE:5B:A0:A4:E0:A5:5E
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer: /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial: 0D22
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number: 0D02
Signing time: Sat 07 Jun 2025 01:05:28 +0000
Manifest this update: Sat 07 Jun 2025 01:05:27 +0000
Manifest next update: Mon 09 Jun 2025 01:05:27 +0000
Files and hashes: 1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: DJPobIGcKYPOtY+iPMisYOP4S062jGjjWOXxlThgxxg=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:06:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3362 (0xd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Validity
Not Before: Jun 7 01:05:27 2025 GMT
Not After : Jun 9 01:05:27 2025 GMT
Subject: CN=68439058-9b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:ee:8d:25:84:10:07:87:cd:18:cc:bd:23:
ce:bb:dd:2c:87:c2:4e:fe:87:aa:e7:ee:53:f0:ef:
c2:d9:05:f2:1f:1d:32:8d:9d:7a:8d:d8:5f:b7:20:
ed:f1:3a:ec:7b:3a:18:d8:f2:7a:f8:46:f6:66:b1:
52:f0:96:e8:00:dd:d1:35:e5:ca:f1:fb:84:46:86:
39:35:d3:28:e9:99:24:45:08:28:88:c8:c2:3d:96:
85:4c:b5:66:36:20:b7:7c:20:34:80:0f:0e:c0:9f:
6d:6f:11:72:f1:1a:5c:da:17:9f:5b:76:29:a5:3e:
31:30:cc:ec:26:e3:04:16:88:64:9a:8e:05:bf:cb:
4f:93:7a:e1:19:1f:b0:6e:54:cc:32:0c:7b:66:7f:
4c:df:6c:08:c6:81:de:21:c0:5f:1a:d6:4b:23:86:
81:1e:90:ca:67:d8:20:e6:ef:77:fc:0a:5f:46:ec:
59:86:3e:f6:2c:64:15:e9:7f:3f:da:b2:09:34:ef:
99:21:86:00:42:33:26:52:ef:8e:d9:d5:79:92:1d:
18:e1:89:9a:6b:cf:78:c7:3f:b6:5b:4e:62:f3:90:
c1:13:6c:eb:73:60:1f:c2:10:06:47:4e:5b:eb:29:
9f:d3:b3:3e:9f:4b:71:e2:25:2f:35:9f:0c:45:81:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:40:DC:C3:6F:E4:1F:F7:66:99:5F:9E:B6:BE:5B:A0:A4:E0:A5:5E
X509v3 Authority Key Identifier:
keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
40:d9:46:d1:8c:b7:d9:51:2c:79:69:b7:d0:83:09:25:4b:b5:
0a:60:a2:a8:23:82:0d:1b:c7:6d:7a:8e:cc:0a:64:a2:9e:af:
25:bb:9a:00:0b:d5:4e:79:ec:35:c8:34:71:72:bb:56:58:0f:
0f:0c:7c:86:84:a7:b6:f2:c4:fa:52:0f:93:f4:1c:6c:1b:eb:
db:47:bb:3a:a9:68:41:53:8a:84:e9:7b:7e:59:8e:4d:f6:59:
ed:7d:b8:ca:7a:fd:dc:9f:cd:07:2f:f7:57:81:15:d5:7d:b8:
12:94:d6:6d:b8:7d:61:ff:24:f4:f3:fb:23:e2:cd:1a:e6:b6:
1f:1b:b5:0f:4d:fd:8b:d9:bd:ee:11:83:81:2a:a0:35:f0:77:
c5:ca:a9:66:26:45:35:93:0b:18:c4:54:f3:95:ab:5c:60:7c:
13:c1:49:e6:f1:03:2a:a0:e9:7f:84:92:71:72:0b:37:34:ec:
b0:c8:95:d7:06:cf:36:f3:2e:39:4c:c4:e3:a6:4e:c0:2d:78:
79:d5:7c:91:00:58:8b:c6:45:c8:e8:40:9c:47:17:e5:e4:ab:
2b:3b:88:66:e5:71:c0:c0:c2:0d:95:1e:b0:fc:bc:50:13:0d:
59:94:e8:b9:77:bb:ec:4d:7b:62:c1:e7:df:55:3a:f5:55:e4:
17:63:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:55 2025 by rpki-client