Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: /gAZzEOkDlG9bDFMS+nYGSBK/Tbh29K01MEkTkadB98=
Subject key identifier: 46:21:E4:6E:DC:DF:95:14:3B:8D:0E:8A:46:0F:CB:AD:E5:A1:48:D8
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 0894
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 0893
Signing time: Wed 09 Apr 2025 01:13:20 +0000
Manifest this update: Wed 09 Apr 2025 01:13:20 +0000
Manifest next update: Fri 11 Apr 2025 01:13:20 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: wgJVHlvQ78O032r12rlQ+ZMSEpYKYympA2SCALwr8JA=)
2: A57BAB36864511E9B11DB357F8AEA228.roa (hash: UZHeW38R1/Nd92sqBo1918z/ZA9yifdIrMDF+uNRLVM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 11 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2196 (0x894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR
Validity
Not Before: Apr 9 01:13:20 2025 GMT
Not After : Apr 11 01:13:20 2025 GMT
Subject: CN=67f5c9b0-8ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:6f:6d:d6:29:40:f4:e7:2e:ce:3e:a6:da:
95:b6:68:bd:e7:af:4d:73:f4:ad:20:57:81:d1:17:
0e:bc:cc:c4:b1:74:91:bd:50:c1:07:71:6e:3d:af:
48:2a:4c:bb:98:2d:54:86:8f:82:e2:2c:d8:4c:9d:
61:79:f3:3d:55:7d:c5:5f:fa:13:d8:70:d2:52:a6:
95:66:63:40:f7:06:96:54:6c:f5:67:fc:2d:e8:48:
2a:fa:5f:b1:7a:0a:3b:70:87:b2:b8:6f:50:40:d8:
73:71:05:4f:a8:44:f7:9f:77:5c:7f:b9:93:3c:a1:
8c:05:3f:ff:3f:59:57:91:dd:c1:f0:aa:6e:b0:f6:
54:1f:1b:97:07:04:43:35:c5:7c:60:dd:1d:c6:02:
dc:f4:35:92:84:bd:c3:bf:86:b2:10:ef:a1:19:a7:
ff:7b:f4:a5:75:45:56:30:34:bc:69:e0:ef:f4:ce:
b4:ba:e7:42:1e:3d:ca:3a:a6:e8:4a:03:bf:a6:fa:
32:1e:6d:fc:40:17:1d:e2:32:bf:92:c2:97:ca:9c:
7b:73:5f:80:03:a0:7c:a8:29:29:63:08:16:66:58:
80:90:7f:19:8e:16:33:fb:4a:0c:64:82:5b:7b:70:
57:e0:ef:82:92:2b:81:91:69:ba:8a:7d:1f:7f:dd:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:21:E4:6E:DC:DF:95:14:3B:8D:0E:8A:46:0F:CB:AD:E5:A1:48:D8
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
62:5c:36:1c:ac:4d:bf:4f:dd:e7:9e:20:27:64:d6:d6:78:ab:
99:4f:79:5f:c2:88:e5:81:a3:7f:88:e7:ac:61:5c:2f:68:97:
fb:96:89:a0:81:65:e6:e0:ec:bc:93:14:09:92:cb:e6:60:b5:
73:8b:3b:50:1a:c6:61:ce:9d:fa:19:79:5a:61:61:b7:15:32:
20:ad:fa:79:c9:d2:04:3a:f1:ea:62:b1:04:fe:b8:f9:20:4f:
97:c3:81:60:bd:e2:e0:e6:af:3a:3b:94:cc:52:de:ee:11:7a:
01:a6:5b:24:13:74:8f:fa:3c:00:c4:c8:12:09:fe:72:2e:fa:
45:da:86:85:3c:2e:cb:c7:f3:c7:35:84:d0:5a:73:93:2e:2c:
9d:e1:bf:f7:82:c1:84:17:01:a3:f0:da:5f:2c:c6:cf:85:4b:
02:32:dc:8d:59:7c:86:a1:fc:0e:aa:e9:f8:91:95:25:69:2c:
03:a7:be:4b:c3:e7:f0:99:81:c2:72:ce:5b:fe:04:8d:bc:bd:
eb:f1:c1:1e:95:fa:e7:60:8b:de:6d:ef:3f:b9:f9:a3:60:6f:
be:f6:9c:b7:1f:af:a4:33:26:27:8d:a4:99:89:a2:1f:3f:af:
b2:21:60:5e:d5:b0:83:a9:d4:27:4f:70:59:32:3a:e7:13:ac:
c3:cf:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:27:13 2025 by rpki-client