Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: guXOx/ryDElghshY148m1UdZ/GfJm0xrSUGZnKMnjKo=
Subject key identifier: 94:8D:87:C3:C1:39:2C:B9:62:6A:06:86:B9:5D:E2:57:0E:E8:12:34
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 0271
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 0270
Signing time: Sun 06 Apr 2025 02:35:01 +0000
Manifest this update: Sun 06 Apr 2025 02:35:01 +0000
Manifest next update: Tue 08 Apr 2025 02:35:01 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: eFd0yuP/xIWX3R8uGIFgENl6J6yFvNYvJZJd/tYU9bE=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 625 (0x271)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR
Validity
Not Before: Apr 6 02:35:01 2025 GMT
Not After : Apr 8 02:35:01 2025 GMT
Subject: CN=67f1e855-7292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:f8:9e:ec:3d:c1:bd:96:4a:05:86:47:fc:
0c:41:2e:26:49:a7:a9:5a:03:85:31:33:3d:cd:41:
3a:b4:f9:56:b7:32:59:7e:cf:83:ed:86:dc:9f:7f:
55:0d:03:74:4a:4b:b2:09:d7:59:af:0a:09:69:74:
03:dd:58:c1:94:c3:97:ec:19:6c:20:2f:6e:2e:f0:
81:5e:29:d2:2a:0b:a5:52:f8:21:e4:0f:25:ad:33:
ac:61:74:52:4e:76:c8:20:cc:0e:96:1f:96:46:34:
16:7c:c0:bd:52:1e:db:69:8a:b5:f7:db:31:da:a7:
57:52:e2:65:0e:28:aa:45:ff:15:70:28:cb:0f:e8:
dd:da:8f:97:3b:9d:e4:61:2b:e9:84:a6:6c:f9:41:
57:07:ab:ec:c1:7a:97:68:05:d1:57:d5:8f:25:6c:
da:69:3f:0b:08:39:0e:95:16:ea:d0:0e:8f:fd:38:
92:ce:17:cb:22:b1:2c:56:87:fe:32:53:09:46:28:
1f:72:cf:45:f6:94:37:f3:0f:0e:d5:cf:34:4f:2b:
c1:db:28:31:ce:fd:b4:ee:fc:be:e3:63:a6:29:90:
4b:b2:2b:b4:c0:8d:64:f5:0d:a2:c7:47:9d:fa:df:
e1:79:ec:ff:ed:a9:1c:6c:c7:ba:85:d8:18:5e:52:
6c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:87:C3:C1:39:2C:B9:62:6A:06:86:B9:5D:E2:57:0E:E8:12:34
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:a4:2f:98:91:c3:3c:0e:3f:06:fc:e7:f1:fc:b3:05:a9:
6e:5b:91:e6:8d:89:95:45:93:cb:88:ad:14:6a:75:42:92:ca:
a4:43:d2:f3:6d:a8:a7:9d:8e:6d:a1:f8:9c:8f:9e:0a:8e:f0:
ce:8f:df:15:9a:1d:d8:15:5a:20:92:11:a7:c4:86:33:62:8e:
ea:91:05:54:c7:e7:ea:8d:17:00:db:8a:2e:7b:d2:00:e3:2f:
3b:98:b5:fc:f4:e8:0e:21:1f:84:b9:5e:ee:91:7d:23:e2:6a:
57:13:4b:c6:16:2b:b2:a8:38:62:d5:71:94:34:28:37:85:e1:
f7:4e:e6:91:94:26:76:f4:9a:1c:58:0d:8b:20:65:26:26:79:
b0:d6:eb:55:75:a0:63:c9:b0:a1:0d:42:6c:00:80:a4:bd:72:
a4:74:bc:88:c6:23:a1:80:97:a9:b2:75:d7:45:5f:36:66:70:
ad:2a:db:17:c7:d0:c8:5f:15:15:2f:fb:79:84:c8:b7:fe:cc:
84:bb:3c:65:34:69:e8:11:8f:75:e7:c7:ee:a0:69:29:7d:d4:
46:02:7e:84:24:30:22:94:10:da:ac:c2:ee:fa:b5:c8:44:9b:
79:35:8e:65:94:a4:08:0c:a3:42:38:b2:0a:65:f4:a4:b7:57:
b0:70:a0:17
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAnEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTA0MDYwMjM1MDFaFw0yNTA0MDgwMjM1MDFaMBgxFjAU
BgNVBAMTDTY3ZjFlODU1LTcyOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA4Pie7D3BvZZKBYZH/AxBLiZJp6laA4UxMz3NQTq0+Va3Mll+z4Pthtyf
f1UNA3RKS7IJ11mvCglpdAPdWMGUw5fsGWwgL24u8IFeKdIqC6VS+CHkDyWtM6xh
dFJOdsggzA6WH5ZGNBZ8wL1SHttpirX32zHap1dS4mUOKKpF/xVwKMsP6N3aj5c7
neRhK+mEpmz5QVcHq+zBepdoBdFX1Y8lbNppPwsIOQ6VFurQDo/9OJLOF8sisSxW
h/4yUwlGKB9yz0X2lDfzDw7VzzRPK8HbKDHO/bTu/L7jY6YpkEuyK7TAjWT1DaLH
R5363+F57P/tqRxsx7qF2BheUmz7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUlI2H
w8E5LLliagaGuV3iVw7oEjQwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNU6QvmJHDPA4/Bvzn8fyzBaluW5HmjYmV
RZPLiK0UanVCksqkQ9LzbainnY5toficj54KjvDOj98Vmh3YFVogkhGnxIYzYo7q
kQVUx+fqjRcA24oue9IA4y87mLX89OgOIR+EuV7ukX0j4mpXE0vGFiuyqDhi1XGU
NCg3heH3TuaRlCZ29JocWA2LIGUmJnmw1utVdaBjybChDUJsAICkvXKkdLyIxiOh
gJepsnXXRV82ZnCtKtsXx9DIXxUVL/t5hMi3/syEuzxlNGnoEY9158fuoGkpfdRG
An6EJDAilBDarMLu+rXIRJt5NY5llKQIDKNCOLIKZfSkt1ewcKAX
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:51:48 2025 by rpki-client