Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File: a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier: UOJHaixV3X1qip/09eMLojSIwUxpiNewKKFMagHsum0=
Subject key identifier: F0:2C:04:BB:A4:6E:11:C8:18:44:29:C9:1E:80:E3:C9:0C:D6:F2:D2
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer: /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial: 0A54
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number: 0A4D
Signing time: Fri 06 Jun 2025 01:12:59 +0000
Manifest this update: Fri 06 Jun 2025 01:12:58 +0000
Manifest next update: Sun 08 Jun 2025 01:12:58 +0000
Files and hashes: 1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: JwVPrkAWlK/FLoYjHvHEtSU3QJIKEYcYXXAy3gPTxK8=)
2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 08 Jun 2025 00:06:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2644 (0xa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Validity
Not Before: Jun 6 01:12:58 2025 GMT
Not After : Jun 8 01:12:58 2025 GMT
Subject: CN=6842409b-0c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:ea:0c:71:f0:f1:36:50:55:ea:68:1f:6a:
37:8c:1b:01:a6:96:48:86:6c:17:c5:01:73:0e:24:
e9:76:5f:88:47:41:97:0a:6a:b9:0f:27:7b:2a:99:
7d:e9:75:7f:bd:2b:2a:c3:be:40:ec:b7:bb:b6:78:
6b:1c:ce:de:70:16:92:36:71:5a:6d:67:6d:55:49:
fa:dd:37:34:28:ee:c0:db:e2:da:15:f9:fe:b8:99:
00:a1:74:7a:df:ff:44:c9:07:c0:28:14:09:a4:c5:
30:b5:4b:5a:6c:55:6c:e1:4a:57:a4:5f:53:eb:80:
d4:4b:67:ca:a3:b1:c2:cd:2d:bb:c8:3f:1d:3d:af:
18:77:62:c8:1b:3b:ac:04:ca:56:ba:b2:0f:4b:b7:
e6:ec:6b:5e:e0:c1:5b:39:91:2a:3c:13:75:f6:6b:
0c:a4:98:fc:aa:e8:78:8e:5a:6d:b9:6a:7a:8c:91:
2a:49:96:2a:04:8d:c1:8e:3a:de:d3:cb:f2:83:43:
7c:21:49:43:83:97:61:a3:8f:ec:7f:93:0f:77:53:
84:74:6e:08:9f:6e:a2:2f:0d:f7:e0:7d:18:b3:09:
6d:ca:a4:43:31:ac:aa:73:4f:39:14:4d:51:3f:5b:
2f:8f:db:e9:02:da:9c:f9:f2:c5:33:37:f8:9d:5f:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:04:BB:A4:6E:11:C8:18:44:29:C9:1E:80:E3:C9:0C:D6:F2:D2
X509v3 Authority Key Identifier:
keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:b6:e4:7e:41:ff:9b:f6:05:49:a7:71:f8:d6:b3:48:91:b5:
10:0d:c8:25:03:60:d1:37:42:80:25:46:3c:05:e3:3f:ec:25:
f2:c4:88:2e:b4:46:44:7d:3f:9f:ad:da:92:55:f7:84:2a:de:
fd:1b:1f:7d:63:c4:97:64:77:d9:e8:f7:27:8a:70:ab:d2:76:
16:af:88:26:84:52:97:a2:4a:10:04:7d:0c:b3:e4:f6:e5:7f:
9f:b2:c5:46:e5:90:d4:07:d9:2e:99:09:ee:65:09:38:b1:46:
4a:da:cc:50:84:27:9d:a2:fc:b9:68:45:17:9d:3f:a5:89:d0:
9d:62:e6:68:3e:6d:90:4a:d1:77:31:be:c2:62:c9:09:49:b6:
73:78:05:ce:f5:73:9d:21:e1:4a:b5:ed:14:51:61:14:11:42:
89:17:5e:33:21:6a:dc:f1:74:a8:2f:95:2a:8b:12:b2:6c:b9:
8f:67:5e:95:b5:e8:38:19:b8:e8:d6:b6:38:a4:01:6f:f0:4d:
c9:29:c0:fd:3d:af:da:71:58:0e:cc:04:e0:45:d4:39:0a:80:
12:39:bb:2d:b3:4f:b4:a3:71:00:d7:c0:e1:df:53:62:f1:57:
65:65:11:3e:c6:0d:4b:a6:e2:e8:4b:cc:25:c1:3d:b8:85:6f:
a8:ad:56:d8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICClQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZBRDNBRjExMC8GA1UEBRMoNkI5MEZFMzRBODY2OUE4ODM4RkQyMzhDQzY1QTEx
NTJDNDQxNjUwNTAeFw0yNTA2MDYwMTEyNThaFw0yNTA2MDgwMTEyNThaMBgxFjAU
BgNVBAMTDTY4NDI0MDliLTBjNTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDyOuoMcfDxNlBV6mgfajeMGwGmlkiGbBfFAXMOJOl2X4hHQZcKarkPJ3sq
mX3pdX+9KyrDvkDst7u2eGsczt5wFpI2cVptZ21VSfrdNzQo7sDb4toV+f64mQCh
dHrf/0TJB8AoFAmkxTC1S1psVWzhSlekX1PrgNRLZ8qjscLNLbvIPx09rxh3Ysgb
O6wEyla6sg9Lt+bsa17gwVs5kSo8E3X2awykmPyq6HiOWm25anqMkSpJlioEjcGO
Ot7Ty/KDQ3whSUODl2Gjj+x/kw93U4R0bgifbqIvDffgfRizCW3KpEMxrKpzTzkU
TVE/Wy+P2+kC2pz58sUzN/idXypTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8CwE
u6RuEcgYRCnJHoDjyQzW8tIwHwYDVR0jBBgwFoAUa5D+NKhmmog4/SOMxloRUsRB
ZQUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGQUQzLzY2NkY5NjI0NjRERjExRThBRkU0NzYyN0Y4QUVBMjI4L2E1RC1O
S2htbW9nNF9TT014bG9SVXNSQlpRVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E1RC1OS2htbW9nNF9TT014bG9SVXNSQlpRVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZBRDMvNjY2Rjk2MjQ2NERGMTFFOEFGRTQ3NjI3RjhB
RUEyMjgvYTVELU5LaG1tb2c0X1NPTXhsb1JVc1JCWlFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAytuR+Qf+b9gVJp3H41rNIkbUQDcgl
A2DRN0KAJUY8BeM/7CXyxIgutEZEfT+frdqSVfeEKt79Gx99Y8SXZHfZ6PcninCr
0nYWr4gmhFKXokoQBH0Ms+T25X+fssVG5ZDUB9kumQnuZQk4sUZK2sxQhCedovy5
aEUXnT+lidCdYuZoPm2QStF3Mb7CYskJSbZzeAXO9XOdIeFKte0UUWEUEUKJF14z
IWrc8XSoL5UqixKybLmPZ16Vteg4Gbjo1rY4pAFv8E3JKcD9Pa/acVgOzATgRdQ5
CoASObsts0+0o3EA18Dh31Ni8VdlZRE+xg1LpuLoS8wlwT24hW+orVbY
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:40:00 2025 by rpki-client