Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File: XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier: S3WveGBkxBBVg//gMN6AasTRqNhX8odm0rrQ9VCgJV0=
Subject key identifier: 2D:7C:1D:4B:CD:2C:B1:8B:47:20:F9:F5:65:8E:98:F5:46:0E:21:AB
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer: /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial: 0851
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number: 0845
Signing time: Sun 06 Apr 2025 01:19:07 +0000
Manifest this update: Sun 06 Apr 2025 01:19:06 +0000
Manifest next update: Tue 08 Apr 2025 01:19:06 +0000
Files and hashes: 1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: 3dkSdnmMp8FGkGc4mc/7DugQcdMS6WIRIbrhjy4YY7g=)
2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 08 Apr 2025 00:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2129 (0x851)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368588EAF
Validity
Not Before: Apr 6 01:19:06 2025 GMT
Not After : Apr 8 01:19:06 2025 GMT
Subject: CN=67f1d68b-ef6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:38:9b:06:16:bc:66:15:21:79:31:23:7f:
ae:60:d5:02:01:ad:3e:9b:8c:0c:80:13:98:18:6d:
62:8e:80:97:e9:8f:de:b1:a3:b3:98:0a:9d:62:81:
8a:b0:8a:b0:2e:ff:e3:ec:c2:24:dc:5e:b0:92:9e:
37:8c:1f:b7:32:a7:ef:a1:9c:f3:48:ae:5f:29:1e:
76:9c:91:36:36:14:a8:a5:26:95:bc:f3:95:e6:92:
99:ff:b0:50:f1:79:b6:37:77:22:ae:fb:95:e4:d7:
1e:41:8b:60:74:bd:56:c7:96:7a:d4:ac:c8:c2:24:
43:c3:a2:0d:bb:2d:76:b9:22:20:00:1c:80:44:93:
5d:ca:5f:1a:c4:37:96:6c:5c:6c:78:bb:18:cb:cc:
2f:97:11:86:d8:38:35:66:85:fb:61:f2:01:78:3f:
34:df:ad:4a:f5:59:ba:2c:dd:e8:89:bb:24:28:28:
ce:26:ef:0a:7a:59:c6:31:c6:a0:66:df:a5:7a:2f:
eb:c3:79:9c:1d:bc:50:df:3b:70:c2:84:5a:2d:a9:
28:2c:1f:02:28:6f:b0:16:f0:f4:29:89:97:ee:61:
cc:90:4c:e2:66:c7:e3:12:86:48:2e:37:e5:e7:e8:
4c:78:1a:c3:f0:99:b6:4e:e1:07:51:3e:31:40:f4:
92:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:1D:4B:CD:2C:B1:8B:47:20:F9:F5:65:8E:98:F5:46:0E:21:AB
X509v3 Authority Key Identifier:
keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:28:42:33:6d:3f:e7:22:98:a1:16:7d:4d:8a:f8:5b:54:
a6:67:5b:7f:a8:38:88:b0:65:f6:cd:67:12:6e:27:c9:7e:68:
92:7f:a6:57:33:45:66:4c:78:3b:f3:2c:23:94:e3:55:f9:fe:
a1:fd:84:35:36:fd:3b:96:90:6c:2f:51:6b:92:5c:6b:0c:f7:
31:b0:99:74:72:ab:8a:58:9f:cc:ba:bb:fd:ef:61:69:0d:57:
ba:ea:8b:d4:59:02:f1:10:4e:06:37:9e:89:56:e8:37:47:4a:
c9:a0:41:61:5b:77:58:94:56:af:64:ab:14:54:35:69:14:1d:
ec:25:13:16:5b:4e:2f:9b:e9:ba:cb:b8:f7:43:46:a5:3a:c8:
3b:d3:8d:1f:7d:29:86:bc:a1:07:31:f2:ad:ec:c3:1f:75:4f:
9b:b0:f7:51:bf:1c:a4:08:b3:5e:eb:d7:1a:39:7a:35:53:4f:
5d:a0:a5:dd:fc:29:f1:21:18:6e:4c:6f:96:8e:98:4e:68:ea:
33:c5:5d:a3:ae:38:0c:c7:d1:38:ba:53:ee:0c:77:29:1e:bf:
8f:3a:3a:96:31:9b:fd:e0:5b:34:a2:71:2c:03:27:aa:0e:c9:
c1:c5:56:9b:7f:d7:ee:8e:4e:35:ef:71:04:de:e6:48:68:55:
65:ea:0a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:14:46 2025 by rpki-client