Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File: tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier: 9CUE2Be4uDeMaj7vjmBPtoC7K/VKU9Uc9SJDh4Uzb3Y=
Subject key identifier: E6:7C:F4:37:0E:9A:DA:80:62:9C:0B:EB:8B:C5:9C:31:F2:51:45:B2
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer: /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial: 08CF
Authority info access: rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number: 08CE
Signing time: Sat 07 Jun 2025 01:30:01 +0000
Manifest this update: Sat 07 Jun 2025 01:30:00 +0000
Manifest next update: Mon 09 Jun 2025 01:30:00 +0000
Files and hashes: 1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: DpXsk8/b4fS+BRXIYw2Zu69rsu9/oN87oPiIkQI2uhE=)
2: A57BAB36864511E9B11DB357F8AEA228.roa (hash: UZHeW38R1/Nd92sqBo1918z/ZA9yifdIrMDF+uNRLVM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2255 (0x8cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Validity
Not Before: Jun 7 01:30:00 2025 GMT
Not After : Jun 9 01:30:00 2025 GMT
Subject: CN=68439619-f28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b3:08:b0:7f:c9:45:55:e9:f2:86:cc:4e:82:
43:77:c4:78:70:94:fd:9c:2c:c9:ae:0a:df:a0:97:
6a:4a:78:31:37:41:f9:40:40:2c:fe:6c:26:50:0c:
0e:38:39:e9:6a:df:09:fd:dc:31:7a:b7:51:5e:83:
cf:54:f5:b5:9f:d0:e4:1c:60:9e:46:0d:7e:84:b4:
e8:5c:71:36:91:ed:e1:b1:35:22:48:07:15:d8:b8:
1f:ed:fc:5c:58:4b:f7:ca:89:ae:14:bc:8e:1d:d7:
af:19:ec:28:77:f2:d4:93:57:ee:5e:b9:12:dc:3e:
5e:87:17:50:bc:7e:33:cc:90:fe:29:07:82:30:cf:
e1:6c:1c:ea:45:e6:2c:e7:34:48:30:59:06:81:be:
33:0a:02:00:fc:21:0d:cf:20:d6:69:2b:cd:f3:68:
1f:9b:14:64:7d:d5:86:59:2a:f5:bf:59:92:5e:83:
29:97:fb:88:03:ea:37:67:47:f8:a0:4c:44:ef:52:
ae:ea:4c:03:3b:fa:a5:2f:d8:a2:ae:be:9b:03:65:
a7:0e:84:c4:e7:ac:8c:4f:c8:7e:67:49:27:2d:58:
21:f3:f3:80:7e:d6:cc:2a:18:ed:f4:14:5a:9d:08:
9e:80:4f:4d:ea:f2:82:da:78:0b:8f:7d:01:7c:2b:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7C:F4:37:0E:9A:DA:80:62:9C:0B:EB:8B:C5:9C:31:F2:51:45:B2
X509v3 Authority Key Identifier:
keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:37:47:37:5c:3a:92:58:68:6a:22:41:76:82:63:d9:c1:79:
87:e2:af:b0:08:49:a3:69:b6:9c:7f:bc:f6:12:62:dc:d5:4a:
24:18:9f:d5:89:0d:74:01:cc:19:dd:41:df:cb:cf:b2:97:a9:
b5:9b:5b:14:a4:8b:2f:fa:58:07:87:7f:6f:ab:a7:7d:f9:ae:
99:e9:24:a6:98:6f:17:74:ff:b3:db:96:0b:ce:ac:f1:1e:46:
bd:3f:46:88:91:43:bd:e6:31:76:ed:fd:a6:ae:f6:b3:d5:72:
b6:16:f2:17:cc:64:d9:97:a9:a1:0f:86:ef:b7:e3:9d:6a:d9:
31:ef:3d:13:75:89:68:44:0b:33:68:0d:ee:80:cd:1d:4b:63:
83:48:43:66:08:66:63:33:d7:81:9a:c8:a0:fe:da:ac:11:c8:
64:5e:71:8b:97:74:b4:31:4c:5a:2a:28:fe:a1:8d:96:d8:c5:
2b:a5:86:a2:73:41:ed:a7:7a:a5:c7:2f:92:79:22:e0:9c:46:
0d:5e:20:7a:25:fe:17:1c:8e:f1:a9:fb:48:87:ab:80:d3:28:
fe:ba:c7:ff:a4:19:74:93:55:61:41:b7:01:23:c1:cc:43:50:
e3:0b:42:fa:60:31:c4:83:46:0e:de:4b:2b:d7:41:4d:8b:5d:
b6:83:9d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:21:52 2025 by rpki-client