Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File: yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier: a0txqHgC8CVd+6dFwp69Ak4DJjhBCE1EYqBNj0YOA+w=
Subject key identifier: 21:7D:72:31:57:95:8F:45:53:38:09:CB:D0:E3:5C:A4:09:68:ED:4A
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer: /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial: 0439
Authority info access: rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number: 0437
Signing time: Mon 09 Jun 2025 03:07:05 +0000
Manifest this update: Mon 09 Jun 2025 03:07:04 +0000
Manifest next update: Wed 11 Jun 2025 03:07:04 +0000
Files and hashes: 1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: oPCnoYLqVRB8JcjJNcOZevlea2jXmVFTsUwRbIvjgN0=)
2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1081 (0x439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Validity
Not Before: Jun 9 03:07:04 2025 GMT
Not After : Jun 11 03:07:04 2025 GMT
Subject: CN=68464fd9-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:cb:2d:b7:45:c1:71:23:98:7e:80:75:80:
6d:e0:1a:d5:99:47:ca:86:5c:63:e5:4d:ee:40:ae:
1d:77:f6:68:f3:1e:f2:63:cc:a7:20:d4:78:26:fc:
08:1c:35:13:79:f0:04:41:88:09:4d:8c:ac:be:a3:
12:58:a4:88:28:92:87:bd:b1:57:42:5f:0f:22:a4:
d6:c5:06:2b:26:f4:85:70:e0:35:e2:41:09:73:8d:
a9:c1:96:d5:3b:48:e8:b7:80:4f:6a:a4:5b:97:a6:
7d:9c:3e:6e:70:03:bd:17:04:0f:89:76:09:50:01:
37:07:2f:a3:21:a2:7e:37:2d:b1:d6:47:f5:10:48:
1e:66:5a:a3:c5:0d:58:98:58:7c:cb:85:b5:1a:a0:
67:e6:71:aa:08:55:a4:69:00:69:60:66:00:e7:b1:
cc:0d:8e:7f:1e:93:ed:de:2e:93:14:91:63:ae:a2:
21:56:50:a8:45:36:c5:b2:7b:97:84:88:f2:6e:ed:
0c:4a:67:c9:b6:61:48:2b:b3:29:67:b0:be:0f:8c:
48:4f:f0:a7:14:77:d1:0a:f7:ec:73:6a:5f:9f:ec:
d1:6a:4f:c8:22:e6:85:e6:4c:0c:23:5b:d8:17:bb:
83:86:58:25:29:24:aa:ea:ea:92:75:db:1b:50:b0:
4f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:72:31:57:95:8F:45:53:38:09:CB:D0:E3:5C:A4:09:68:ED:4A
X509v3 Authority Key Identifier:
keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3f:53:4a:cf:b1:0f:c9:1f:2a:1b:d3:c2:85:02:f1:78:da:e8:
ad:6f:d0:11:71:31:98:f6:84:73:da:61:f5:d3:78:4b:f4:fe:
e0:ac:ad:5e:2e:97:1f:7c:52:a8:51:3f:5e:33:bb:7f:61:58:
33:4e:51:c8:29:5a:93:a2:76:9b:02:dc:7f:e5:df:81:63:a9:
75:97:62:32:69:72:5e:7c:89:ff:72:78:44:ab:ac:e7:56:c1:
6f:2b:6c:d9:e4:83:fd:81:d7:d3:05:f3:25:68:58:5b:83:26:
8a:7d:d8:f5:3d:2c:49:c1:1b:97:f6:51:b6:6a:e3:4c:15:1a:
f7:8c:99:97:54:7e:ea:13:d5:1e:3a:40:2a:08:b8:52:d1:d5:
a3:a1:4d:dd:4d:83:fc:0d:75:4e:98:67:8b:bb:56:c2:57:21:
fa:bb:e3:d2:87:dc:68:47:20:5e:6f:b7:20:92:21:a6:b2:41:
8d:a9:20:8e:d3:77:cf:c0:4f:57:3d:22:0a:5a:5e:27:98:7b:
a0:f0:c2:45:9f:da:a4:06:0d:25:4e:c8:d4:3e:f1:8d:9e:e8:
2a:a5:22:d0:43:c9:63:8e:0a:e6:58:a3:ea:fa:22:41:9f:c6:
14:61:51:a2:f5:57:54:a0:1c:a6:13:a5:9c:8e:10:2d:51:5e:
35:be:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:31:00 2025 by rpki-client