Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File: 7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier: qUGbzJRae/9E+GBch6hNObkJ82IzaP/qDjwoBdX2suw=
Subject key identifier: 48:8A:12:C4:8B:67:C3:CE:42:F0:8F:40:97:2C:60:B1:DD:73:2C:20
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer: /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial: 0166
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number: 0166
Signing time: Fri 04 Apr 2025 02:57:08 +0000
Manifest this update: Fri 04 Apr 2025 02:57:07 +0000
Manifest next update: Sun 06 Apr 2025 02:57:07 +0000
Files and hashes: 1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: CFuxbRACIl34HaQfYXFMvuHdYINvObEgzJxVWXH5j34=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 06 Apr 2025 02:57:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358 (0x166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AF
Validity
Not Before: Apr 4 02:57:07 2025 GMT
Not After : Apr 6 02:57:07 2025 GMT
Subject: CN=67ef4a84-f106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:f7:24:06:7a:30:bc:27:56:eb:43:f1:bc:
a9:5e:63:f8:d7:f2:bd:87:af:27:f9:5e:4f:ef:55:
e9:29:0c:e9:f2:9b:24:c2:22:fd:95:13:8e:3b:b9:
b9:7e:01:d7:bc:62:d9:b9:d5:1a:48:04:db:6c:f7:
99:4f:47:51:ac:d4:e2:3a:13:07:88:97:6b:d3:fa:
e7:a3:de:89:c5:24:20:d6:4e:d9:96:2d:f1:52:d9:
1c:e9:fd:d4:9e:0c:30:7b:af:8c:e5:dd:4d:bd:f6:
4b:73:22:15:c1:a6:14:a4:94:70:50:6a:cd:7e:84:
fb:6c:98:99:15:8d:3f:6a:8a:07:47:ec:b3:40:61:
63:05:98:17:52:dd:e4:03:f2:0a:83:63:a8:30:ab:
76:46:5c:9e:ce:2e:fa:f7:fe:2e:bc:76:7b:b3:b6:
6b:81:f2:c2:fb:a1:76:13:46:24:9f:ca:5e:ed:9a:
5d:95:05:5c:a8:0d:b9:d0:f6:9c:ee:ff:6d:b4:eb:
cc:53:ec:2d:31:5d:0a:dc:52:14:bb:71:4a:9e:40:
f1:70:b7:e6:46:23:7b:74:dd:b7:cd:8d:ed:f7:fb:
03:a4:04:74:d7:cb:17:b1:49:4b:4c:84:6d:ad:e8:
62:07:b9:44:54:47:f3:7b:33:e3:f4:79:01:cd:e6:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8A:12:C4:8B:67:C3:CE:42:F0:8F:40:97:2C:60:B1:DD:73:2C:20
X509v3 Authority Key Identifier:
keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
74:e3:ed:ae:0b:52:08:5b:84:80:43:72:98:c3:fc:86:77:fe:
a5:9c:ad:63:84:28:b1:da:50:5b:2d:38:ab:69:8a:64:29:f6:
66:c5:f6:fe:51:be:97:9d:fa:60:f0:18:87:d1:96:49:a7:a4:
3f:0c:7b:da:46:d2:76:5d:22:c4:70:31:f0:ca:9a:cd:a8:51:
5f:2a:d6:28:dd:3c:04:28:32:7d:38:c2:a2:21:26:fb:f9:eb:
74:d0:15:36:5b:a1:77:0e:a3:a0:f7:b3:46:26:e2:df:6c:44:
ac:66:ea:64:b7:20:c3:91:4d:c0:32:7a:e4:89:39:4e:d1:9a:
b4:4f:d2:21:42:27:08:ae:7d:67:f9:51:eb:24:8a:8e:6e:b3:
85:70:86:29:1b:97:93:39:4a:65:16:d5:6a:75:bc:1d:bf:31:
24:7e:f8:63:29:82:28:41:7c:e3:0e:fe:b0:79:c2:a6:27:8b:
1c:55:7b:2d:a1:a4:4d:34:6a:07:d0:42:65:b3:0a:04:2b:e7:
10:8d:dc:f7:1b:5d:3f:22:64:3f:9d:cd:8d:cf:39:2e:2f:73:
e7:37:e0:a9:1e:00:83:45:28:a5:3f:2c:69:e9:74:ea:4b:a1:
f6:e4:62:53:0a:b3:44:e5:92:02:cc:30:79:04:60:9c:24:4b:
4f:94:52:b2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNTA0MDQwMjU3MDdaFw0yNTA0MDYwMjU3MDdaMBgxFjAU
BgNVBAMTDTY3ZWY0YTg0LWYxMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnDvckBnowvCdW60PxvKleY/jX8r2Hryf5Xk/vVekpDOnymyTCIv2VE447
ubl+Ade8Ytm51RpIBNts95lPR1Gs1OI6EweIl2vT+uej3onFJCDWTtmWLfFS2Rzp
/dSeDDB7r4zl3U299ktzIhXBphSklHBQas1+hPtsmJkVjT9qigdH7LNAYWMFmBdS
3eQD8gqDY6gwq3ZGXJ7OLvr3/i68dnuztmuB8sL7oXYTRiSfyl7tml2VBVyoDbnQ
9pzu/22068xT7C0xXQrcUhS7cUqeQPFwt+ZGI3t03bfNje33+wOkBHTXyxexSUtM
hG2t6GIHuURUR/N7M+P0eQHN5vz/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSIoS
xItnw85C8I9Alyxgsd1zLCAwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB04+2uC1IIW4SAQ3KYw/yGd/6lnK1j
hCix2lBbLTiraYpkKfZmxfb+Ub6Xnfpg8BiH0ZZJp6Q/DHvaRtJ2XSLEcDHwyprN
qFFfKtYo3TwEKDJ9OMKiISb7+et00BU2W6F3DqOg97NGJuLfbESsZupktyDDkU3A
MnrkiTlO0Zq0T9IhQicIrn1n+VHrJIqObrOFcIYpG5eTOUplFtVqdbwdvzEkfvhj
KYIoQXzjDv6wecKmJ4scVXstoaRNNGoH0EJlswoEK+cQjdz3G10/ImQ/nc2Nzzku
L3PnN+CpHgCDRSilPyxp6XTqS6H25GJTCrNE5ZICzDB5BGCcJEtPlFKy
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:04:33 2025 by rpki-client