Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File: ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier: Yl0ij1BL2yBL76ctMQlEZAkbtPVEeqW1UjBiEN+wfew=
Subject key identifier: BA:53:36:E7:1F:CF:57:4B:F4:94:D9:77:FD:33:77:26:4D:AE:88:63
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer: /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial: 016C
Authority info access: rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number: 016A
Signing time: Sat 05 Apr 2025 02:54:21 +0000
Manifest this update: Sat 05 Apr 2025 02:54:20 +0000
Manifest next update: Mon 07 Apr 2025 02:54:20 +0000
Files and hashes: 1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: BC6QnKss36781dR1m196okzxupo4cZvHb9Oii7UHh+U=)
2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 02:54:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 364 (0x16c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3687682AR
Validity
Not Before: Apr 5 02:54:20 2025 GMT
Not After : Apr 7 02:54:20 2025 GMT
Subject: CN=67f09b5d-e5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:9a:0d:03:e8:11:7a:bd:75:c9:59:e8:bc:
86:3e:f6:79:a1:22:a5:39:83:6b:e0:a1:26:25:7f:
6b:e2:36:af:d9:c7:53:ad:18:50:75:85:88:25:95:
75:dd:81:3c:82:d3:9b:5d:c5:e2:28:55:1d:d5:34:
81:16:bd:6b:00:d4:29:6b:97:c8:d3:93:71:25:9a:
21:11:8b:23:96:bc:a0:5f:c3:49:d4:56:99:99:e0:
9c:9d:78:f4:93:ca:c1:f7:0c:ea:84:24:ab:81:c5:
b5:01:49:30:1e:d4:11:b2:36:be:c1:b0:56:83:2e:
c1:bc:e5:0d:06:42:d9:dc:b6:0f:5b:5e:fb:9b:9b:
d8:80:c6:dd:7d:36:10:0b:be:ad:22:5c:e1:ca:65:
92:a7:b2:b8:eb:d5:30:d1:46:5d:0d:21:46:0c:4d:
ec:19:e6:a0:2d:b5:9f:ae:8b:ee:ae:92:68:f6:4f:
4e:35:7b:5a:16:ce:8c:87:b7:f4:d0:06:fa:89:41:
ce:14:7f:de:45:d3:15:f7:42:1d:49:08:e7:16:a9:
06:7b:2f:4c:ac:66:2f:d8:2b:d4:aa:c8:21:89:68:
42:f2:f6:d5:30:bf:3a:af:2d:94:a9:e8:fd:aa:65:
84:35:3a:61:9f:52:96:34:33:b0:35:56:a1:d7:e0:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:36:E7:1F:CF:57:4B:F4:94:D9:77:FD:33:77:26:4D:AE:88:63
X509v3 Authority Key Identifier:
keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:6f:8b:fa:dd:48:80:3e:93:40:a4:e6:07:e1:e6:72:e0:bf:
62:de:f7:c9:83:8a:71:a0:49:c3:f0:0d:f3:7a:50:ab:d0:73:
2c:3d:3e:56:e4:36:cb:fd:79:b4:b8:cc:37:d8:81:b3:a8:b3:
cc:2d:5d:05:03:8a:82:ba:5b:76:07:d0:ed:28:4f:39:17:23:
be:c5:c3:5f:ea:15:c0:c5:96:42:b8:8a:18:d3:36:5d:ac:56:
b1:55:05:2b:fa:a8:ea:5e:1d:b8:c9:de:af:ae:5d:24:82:01:
03:16:1b:dd:ae:d4:5b:1d:14:71:dd:8e:cf:c6:8d:fa:65:89:
cd:d4:dc:0a:a1:70:9f:ba:4a:cf:24:02:e4:db:00:63:ed:27:
c1:2a:12:be:60:44:21:7e:04:67:7d:d7:76:c8:29:9d:e3:88:
26:9a:ee:0b:a3:1d:5d:1c:e2:45:bf:f2:bf:99:18:ba:73:db:
f1:68:b2:dc:84:4d:61:ea:0e:5a:06:a8:96:a0:1e:2d:fa:7b:
6e:11:de:e1:a5:8a:83:79:19:9b:61:88:45:2f:22:4b:21:35:
71:b1:bf:d8:0b:95:f7:20:da:a9:7f:56:38:f8:39:05:99:61:
d6:40:5d:ed:0c:c0:ad:5a:94:0a:a0:ef:8f:7f:be:d9:de:65:
19:9d:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:55:06 2025 by rpki-client