Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: 5FS3s1KcnL834GdGwQVKvfJGgJulMtvUAwhRgkwz3A8=
Subject key identifier: FF:C7:AA:51:13:57:D3:EA:3E:70:8D:74:FC:FF:06:4F:5A:9B:EE:C4
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 029A
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 029A
Signing time: Sat 19 Apr 2025 03:51:10 +0000
Manifest this update: Sat 19 Apr 2025 03:51:09 +0000
Manifest next update: Mon 21 Apr 2025 03:51:09 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: N5KBruJZQ0/E5DuK1oFlBNqhE83tncG0HvEcy//VJVE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 21 Apr 2025 03:51:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 666 (0x29a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Apr 19 03:51:09 2025 GMT
Not After : Apr 21 03:51:09 2025 GMT
Subject: CN=68031dae-b90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7a:d5:70:09:57:33:89:8d:82:bf:53:eb:22:
fb:46:a9:a1:3a:61:bc:6a:62:ad:72:86:a4:4d:06:
fb:af:d0:fd:83:7f:93:1d:0c:00:f5:88:8e:72:c1:
c2:e3:f2:68:55:c6:8d:b4:83:d5:8b:b5:30:7d:ca:
30:70:45:e4:2c:f8:2e:69:42:c1:f3:7d:09:e4:ea:
b3:d0:cd:60:6b:9f:f1:be:78:60:da:f3:08:49:d2:
ff:29:70:0d:f9:9d:11:71:a9:2e:dd:8b:8c:59:c3:
22:85:c0:e1:f5:4e:de:8c:57:9a:75:b1:ef:1e:5c:
7c:63:b5:3a:f5:28:60:8f:ee:d5:9f:a8:6e:e5:dc:
73:19:96:68:b3:bd:49:27:b2:63:c5:c8:4a:2d:13:
9b:69:12:e0:db:a3:23:de:cd:c5:7a:13:c5:7a:01:
2a:f3:d5:31:a1:b6:5b:a6:a5:7e:b7:26:09:61:82:
f4:f2:cb:e9:77:29:9d:44:6d:bc:5c:63:74:cf:46:
19:ef:1d:fc:5a:35:51:2c:0d:b8:46:4e:17:f8:00:
a0:30:fd:47:96:54:a7:44:18:c7:6e:bb:54:a8:fa:
e5:18:e3:8f:2e:8f:9d:76:f7:60:57:e6:70:8f:05:
0c:16:bf:ae:1b:4e:2f:0f:de:da:53:89:3d:1c:d3:
5c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C7:AA:51:13:57:D3:EA:3E:70:8D:74:FC:FF:06:4F:5A:9B:EE:C4
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:66:af:4f:07:17:b2:0d:03:b2:4c:5a:fb:ca:09:59:ec:4d:
c9:bd:e1:5d:8c:3c:fb:3e:f8:84:2e:a5:a7:a8:92:70:2d:76:
fd:9f:24:3c:ea:77:85:da:f0:21:44:b8:be:d3:eb:43:64:2e:
46:4a:f2:31:67:82:8e:b3:96:c3:29:e7:0f:b7:e8:d3:1e:0d:
42:7f:e0:d6:e7:42:54:9b:e5:20:e8:31:0a:ee:04:5c:73:64:
a6:ba:57:b4:aa:c7:ce:b2:24:39:38:81:69:95:37:d1:3e:45:
33:be:f3:b9:86:57:07:86:44:b4:84:43:24:d3:38:64:c6:bb:
17:b3:67:9f:22:6a:68:95:90:20:c0:aa:03:6b:39:e5:c2:2c:
10:0a:e4:4c:38:05:89:da:b7:1e:5f:84:ce:87:52:4b:ae:ae:
a3:77:5d:0e:ea:89:6f:49:d4:64:9a:8a:11:b6:9e:4c:40:3e:
7f:cb:0a:bf:16:b8:c4:a8:88:bc:8f:e4:93:70:db:89:6a:87:
ae:88:56:83:20:fd:15:94:af:d5:50:05:57:28:2f:99:a3:14:
e2:1a:78:9a:a1:ba:09:49:18:2c:ea:89:8f:fb:fc:48:4e:2d:
7e:67:b7:7e:d5:01:07:64:cf:08:3a:0b:36:11:96:39:a9:72:
f5:94:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:28:55 2025 by rpki-client