Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
File: m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft (raw, json)
Hash identifier: C5pQhx6slWqK3RaqCOGspSXnqMlAib3Uf01AbFuu1Es=
Subject key identifier: FC:76:FE:76:AF:B7:82:7B:36:89:37:FF:39:E8:1A:CF:8A:B8:32:50
Authority key identifier: 9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
Certificate issuer: /CN=F3674116AF/serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
Certificate serial: 04F0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
Manifest number: 04EE
Signing time: Thu 03 Apr 2025 01:54:30 +0000
Manifest this update: Thu 03 Apr 2025 01:54:30 +0000
Manifest next update: Sat 05 Apr 2025 01:54:30 +0000
Files and hashes: 1: m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl (hash: 8tErm5T4tiKi3wvJAEegk1qw2T80UPJFmwRikolYlOg=)
2: 51CD22A06E3F11EC8BCA63C15A40D577.roa (hash: E5rUiTU+lgeiOsadbVjO4CnL7A4nHG6PajRp8I6dh5k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1264 (0x4f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674116AF
Validity
Not Before: Apr 3 01:54:30 2025 GMT
Not After : Apr 5 01:54:30 2025 GMT
Subject: CN=67edea56-7c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:10:15:a5:29:f2:ab:d2:b3:4d:ea:6c:78:
c1:b7:93:ed:51:40:6f:98:d4:6f:48:7b:28:c0:8e:
1d:fd:41:55:41:65:44:68:0f:58:53:70:45:23:83:
c3:6a:45:99:8f:96:f0:21:6f:72:d0:d4:d6:15:3f:
ac:3a:28:e8:df:29:27:a2:61:6b:d3:ed:e7:c8:07:
57:77:3a:40:27:6f:d9:9f:40:6d:07:3b:ca:be:db:
f8:5e:b1:2a:07:a3:08:ea:17:8c:78:af:58:bf:bf:
58:6a:76:8a:84:8f:b5:a0:43:06:b0:c0:8d:bc:59:
fa:bc:a7:ce:5b:86:2b:c4:41:22:35:bc:84:20:49:
08:56:84:3f:f3:88:cc:e4:25:a1:3e:b7:99:b3:21:
65:f9:68:5a:dc:d0:e6:48:25:33:dc:3a:80:33:6a:
be:7c:e6:4a:9b:7c:66:53:e4:3b:d8:13:4d:cb:f4:
b4:56:0d:b3:b2:91:f8:f4:c3:a5:61:bb:ab:32:06:
ee:49:21:50:d5:fc:69:47:1b:2a:59:8e:1f:6f:d3:
b8:f1:fc:6e:92:67:15:5b:a0:e5:b1:59:8a:9f:3b:
49:13:22:3a:1b:e7:89:a0:6e:3c:e0:1b:dd:6a:32:
d0:c5:38:4a:79:71:95:2e:49:ff:d8:91:5c:a0:ad:
ee:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:FE:76:AF:B7:82:7B:36:89:37:FF:39:E8:1A:CF:8A:B8:32:50
X509v3 Authority Key Identifier:
keyid:9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ac:cb:29:07:77:2a:64:dc:a3:22:e8:65:55:57:79:71:05:
54:ad:a7:d4:36:0e:7c:b6:09:a0:f9:54:b8:3f:4d:5b:ef:6b:
69:5d:11:a6:a5:a1:78:bf:e1:d5:b6:28:29:93:b5:ee:e9:42:
d6:19:69:06:d5:49:10:53:01:da:4f:8b:27:40:43:c1:bc:96:
d5:6d:9b:d6:ad:86:28:81:ce:de:07:88:81:d0:97:1d:90:f1:
e9:7e:a6:1f:eb:f0:98:6f:99:e2:b4:8d:05:be:f1:86:09:99:
a1:5f:4b:52:a0:7d:04:48:43:9c:f6:72:c1:94:95:72:c4:75:
b7:a5:da:73:b3:1e:41:2a:50:b4:49:02:f2:59:04:36:ef:d9:
fd:89:20:b3:b3:f6:9e:86:19:01:9c:71:bb:cc:96:4f:ea:25:
b6:33:c4:f5:fb:ed:62:df:f4:59:2c:32:b0:96:53:76:1e:ea:
22:84:60:e5:1c:af:33:b9:24:45:54:18:29:17:20:d0:84:81:
28:8c:a2:68:e5:a4:40:48:f5:da:cf:75:4a:dc:4c:dd:39:e4:
cf:8e:53:a3:5f:e5:1e:15:4c:4d:67:cf:7f:44:7e:ec:b2:41:
44:34:b3:bd:39:e9:e7:4a:29:dc:cb:9a:32:d7:79:c7:49:2e:
ee:99:53:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:13:26 2025 by rpki-client