Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier: G2cb7Yb0HEIsHl9FCvBZ5WhDyPEdHQRmNy7DJhwCt1I=
Subject key identifier: 23:07:AC:42:47:1A:61:0D:14:B5:D8:7D:DA:44:57:96:3C:7D:5A:A7
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 049D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number: 049B
Signing time: Tue 10 Jun 2025 02:54:59 +0000
Manifest this update: Tue 10 Jun 2025 02:54:58 +0000
Manifest next update: Thu 12 Jun 2025 02:54:58 +0000
Files and hashes: 1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: l19pNIXqFK1oNqsLW71MD0UZrTGQGEnpMN0Y28zZgd8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Jun 2025 02:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1181 (0x49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: Jun 10 02:54:58 2025 GMT
Not After : Jun 12 02:54:58 2025 GMT
Subject: CN=68479e83-74c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:c2:0e:70:1b:68:4b:5a:e3:35:e6:7a:0e:
b3:30:c1:ab:4e:f9:c9:24:86:9f:e3:18:f4:c4:18:
79:a8:5e:87:2c:ce:a1:b2:93:a3:5b:90:a3:7d:7e:
86:3e:ca:a7:fc:4c:4f:91:be:a1:68:a5:21:c7:90:
1e:68:7c:aa:0b:a8:44:97:ef:82:83:14:ec:ae:49:
3c:16:d6:eb:59:ea:03:be:72:49:48:53:55:93:fc:
c1:c9:7f:97:5f:cd:6c:27:84:48:a8:c7:25:56:8c:
68:ea:be:bf:fd:24:4f:ea:f3:bd:6d:cd:a6:b7:6f:
6d:71:82:d4:a5:f6:11:9a:dd:93:0c:99:00:3a:1c:
e5:d9:37:84:58:de:85:d7:7b:be:be:5e:6b:77:3b:
9d:05:d2:20:b6:f1:3b:b6:b7:9f:b3:7e:86:99:ea:
2b:2d:c9:98:a2:3d:56:3d:a7:f6:1c:67:07:69:64:
30:86:d1:ed:e6:94:a3:03:c4:4f:3d:2d:70:64:24:
f0:86:06:42:62:d5:b0:5d:9c:b3:d4:79:0d:ad:48:
bd:38:c2:a8:04:57:c4:99:92:3e:80:6a:3e:73:b9:
b9:2e:ce:b8:4c:fd:e2:fe:ea:45:4b:80:fa:40:35:
9c:59:1b:14:96:0b:78:af:22:1b:b3:22:77:de:90:
74:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:AC:42:47:1A:61:0D:14:B5:D8:7D:DA:44:57:96:3C:7D:5A:A7
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:78:1c:f0:03:d2:4d:a4:0e:42:1e:3b:e5:37:67:f7:a3:94:
13:f0:32:c2:4c:86:10:32:96:7f:06:9a:56:34:da:f8:f7:b2:
a0:21:d6:e0:e6:6c:e5:71:10:53:af:34:9a:69:33:72:90:2a:
ea:b0:26:43:37:b2:94:45:30:41:76:d3:64:e4:1d:1e:7e:a5:
14:b4:51:d6:c9:2d:d7:05:69:65:34:7d:60:a2:8d:ae:ab:0a:
67:ab:bc:60:c4:69:60:75:75:69:34:9e:c2:01:cf:db:56:62:
03:8a:ac:09:39:e8:e6:32:28:f6:7f:f5:c9:14:9a:ec:6d:c2:
5a:de:ae:2f:fd:a3:83:a5:c4:7e:cc:dd:9f:6b:55:f1:02:c1:
64:c7:ca:19:39:04:e8:52:3c:2e:da:52:d4:65:fa:28:8c:23:
da:54:b4:55:7a:7a:27:46:ef:49:e7:81:64:a9:01:4a:02:d0:
f8:ab:f0:b5:ec:e1:8c:75:c9:13:e7:75:ab:8f:4b:c5:bc:85:
9c:ca:a4:66:fe:6a:2a:04:23:90:c3:54:e2:e0:d6:75:b7:fb:
4d:ae:21:f8:05:f3:87:f9:a6:5c:d6:1e:98:a2:f2:ae:02:9b:
0b:7b:3f:a4:c5:1a:bc:34:88:5a:b4:ec:25:33:80:97:71:12:
e6:34:a0:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI1RDBBRjExMC8GA1UEBRMoMjIxNDU1OTA1QkIxOUFDNEUzOEVERERBQkQ2Q0FB
ODM1MjlCMzQ0RjAeFw0yNTA2MTAwMjU0NThaFw0yNTA2MTIwMjU0NThaMBgxFjAU
BgNVBAMTDTY4NDc5ZTgzLTc0YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKMsIOcBtoS1rjNeZ6DrMwwatO+ckkhp/jGPTEGHmoXocszqGyk6NbkKN9
foY+yqf8TE+RvqFopSHHkB5ofKoLqESX74KDFOyuSTwW1utZ6gO+cklIU1WT/MHJ
f5dfzWwnhEioxyVWjGjqvr/9JE/q871tzaa3b21xgtSl9hGa3ZMMmQA6HOXZN4RY
3oXXe76+Xmt3O50F0iC28Tu2t5+zfoaZ6istyZiiPVY9p/YcZwdpZDCG0e3mlKMD
xE89LXBkJPCGBkJi1bBdnLPUeQ2tSL04wqgEV8SZkj6Aaj5zubkuzrhM/eL+6kVL
gPpANZxZGxSWC3ivIhuzInfekHSLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIwes
QkcaYQ0Utdh92kRXljx9WqcwHwYDVR0jBBgwFoAUIhRVkFuxmsTjjt3avWyqg1Kb
NE8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyNUQwL0U5M0QyN0FBQzdDNDExRUM5MDZGOTREQkYxMjIyNDY4L0loUlZr
RnV4bXNUamp0M2F2V3lxZzFLYk5FOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0loUlZrRnV4bXNUamp0M2F2V3lxZzFLYk5FOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI1RDAvRTkzRDI3QUFDN0M0MTFFQzkwNkY5NERCRjEy
MjI0NjgvSWhSVmtGdXhtc1RqanQzYXZXeXFnMUtiTkU4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfeBzwA9JNpA5CHjvlN2f3o5QT8DLC
TIYQMpZ/BppWNNr497KgIdbg5mzlcRBTrzSaaTNykCrqsCZDN7KURTBBdtNk5B0e
fqUUtFHWyS3XBWllNH1goo2uqwpnq7xgxGlgdXVpNJ7CAc/bVmIDiqwJOejmMij2
f/XJFJrsbcJa3q4v/aODpcR+zN2fa1XxAsFkx8oZOQToUjwu2lLUZfoojCPaVLRV
enonRu9J54FkqQFKAtD4q/C17OGMdckT53Wrj0vFvIWcyqRm/moqBCOQw1Ti4NZ1
t/tNriH4BfOH+aZc1h6YovKuApsLez+kxRq8NIhatOwlM4CXcRLmNKBq
-----END CERTIFICATE-----
Generated at Tue Jun 10 19:45:33 2025 by rpki-client