Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File: Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier: afkxp8W525GQr1xRpOxAQBbffD1zcqHMWR23FNa0Rjs=
Subject key identifier: 6A:F2:C1:D2:54:D3:63:0E:00:BA:B9:7F:58:A1:F2:5F:2A:6C:84:2D
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer: /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial: 0156
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number: 0155
Signing time: Thu 03 Apr 2025 03:02:09 +0000
Manifest this update: Thu 03 Apr 2025 03:02:08 +0000
Manifest next update: Sat 05 Apr 2025 03:02:08 +0000
Files and hashes: 1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: TE2s7ydPrQ4hmHlGs7GyKeuR4MBZGmq5GlZjuCHxCww=)
2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3688321AF
Validity
Not Before: Apr 3 03:02:08 2025 GMT
Not After : Apr 5 03:02:08 2025 GMT
Subject: CN=67edfa31-a2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:5b:1c:e8:f7:5e:db:ec:7b:72:72:89:f8:
00:cc:2b:0d:90:e6:69:be:bd:09:b5:29:34:a7:13:
34:03:40:2e:51:01:e6:4c:31:6c:72:05:fd:af:71:
02:0b:b7:68:c8:41:86:0f:4b:9b:bb:0b:df:46:be:
b9:4f:73:fd:f9:de:8d:76:a0:5a:81:3f:49:31:3e:
d4:58:09:c2:56:24:58:53:ce:83:85:cb:10:cf:27:
43:1a:be:dd:67:f3:94:f0:00:f5:71:6b:fa:47:f3:
cc:fe:df:43:02:94:f9:fe:f9:cd:e4:c0:44:48:08:
c8:44:86:70:5c:96:a8:03:6f:ee:13:08:3d:b3:6e:
bd:19:fb:64:3e:53:61:f9:ae:81:13:41:97:6e:63:
a6:6b:0d:40:59:33:8f:10:d0:97:d2:b0:fd:08:b1:
bc:c4:56:cb:9b:e2:f3:c6:25:5f:27:9b:63:be:76:
1c:a2:9b:e3:ce:f2:4e:97:f7:03:44:16:33:3b:5e:
37:74:ae:6b:b6:a1:d7:a7:67:c3:f6:fe:b7:9d:02:
ad:ff:ae:d7:21:4b:b6:0e:9d:05:99:4d:4e:3d:7d:
ba:69:f2:e5:fc:68:93:3e:67:81:72:8d:af:6e:c3:
88:92:42:a7:dd:85:9b:70:88:1a:89:6b:b4:91:73:
42:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:C1:D2:54:D3:63:0E:00:BA:B9:7F:58:A1:F2:5F:2A:6C:84:2D
X509v3 Authority Key Identifier:
keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:4e:d6:86:c7:29:03:bb:cb:3f:58:10:58:f5:cb:bf:0c:
94:75:a8:54:d3:10:b7:e9:09:c9:8b:30:b9:f8:d5:ce:ac:19:
94:48:db:d5:7c:e6:8e:59:41:a5:1f:88:47:16:05:59:48:8f:
5f:62:58:09:67:97:2f:26:9b:4f:43:a8:25:99:fd:82:c3:9c:
c3:40:cf:10:97:71:71:3c:af:9d:d8:49:66:18:8e:e0:52:54:
44:ae:9f:8c:af:a6:1a:bb:61:dc:7e:88:37:f8:ae:40:bc:90:
07:f3:c9:67:70:1f:2f:54:f1:2a:65:ed:97:c6:1b:d3:40:4f:
7e:55:8c:d6:5e:ac:fc:b3:0b:c4:9a:89:c0:73:33:72:3f:a4:
55:2f:ab:c5:51:ab:ed:5b:2a:62:70:58:8d:5d:2f:58:68:6c:
25:55:22:da:d4:0c:ef:ef:8f:9a:1a:a8:9b:7d:14:f6:aa:36:
9a:2a:6c:0a:3d:b2:1d:49:c8:8a:73:86:52:61:bc:a5:15:c7:
12:0b:c4:21:15:26:d0:e0:a7:6a:f2:d6:71:e6:b9:e7:66:0f:
af:17:d9:b9:5a:26:34:45:8c:a4:f4:df:6e:9f:93:51:cf:f0:
54:e6:25:86:ec:76:c2:f3:58:99:02:3b:c4:b8:f2:3a:c4:8b:
88:d4:9a:2b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgzMjFBRjExMC8GA1UEBRMoMzlCRTc2Qjg3NjU3QjA5N0RDRUVBM0I0MEQ0NDUy
QTI0RTU2MDM4MjAeFw0yNTA0MDMwMzAyMDhaFw0yNTA0MDUwMzAyMDhaMBgxFjAU
BgNVBAMTDTY3ZWRmYTMxLWEyYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrhVsc6Pde2+x7cnKJ+ADMKw2Q5mm+vQm1KTSnEzQDQC5RAeZMMWxyBf2v
cQILt2jIQYYPS5u7C99GvrlPc/353o12oFqBP0kxPtRYCcJWJFhTzoOFyxDPJ0Ma
vt1n85TwAPVxa/pH88z+30MClPn++c3kwERICMhEhnBclqgDb+4TCD2zbr0Z+2Q+
U2H5roETQZduY6ZrDUBZM48Q0JfSsP0IsbzEVsub4vPGJV8nm2O+dhyim+PO8k6X
9wNEFjM7Xjd0rmu2odenZ8P2/redAq3/rtchS7YOnQWZTU49fbpp8uX8aJM+Z4Fy
ja9uw4iSQqfdhZtwiBqJa7SRc0LDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUavLB
0lTTYw4Aurl/WKHyXypshC0wHwYDVR0jBBgwFoAUOb52uHZXsJfc7qO0DURSok5W
A4IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MzIxLzg5NEREOEEwMERGQzExRUY5NEFBMTg1QjAxNzAwMUIxL09iNTJ1
SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09iNTJ1SFpYc0pmYzdxTzBEVVJTb2s1V0E0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgzMjEvODk0REQ4QTAwREZDMTFFRjk0QUExODVCMDE3
MDAxQjEvT2I1MnVIWlhzSmZjN3FPMERVUlNvazVXQTRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBw2U7WhscpA7vLP1gQWPXLvwyUdahU
0xC36QnJizC5+NXOrBmUSNvVfOaOWUGlH4hHFgVZSI9fYlgJZ5cvJptPQ6glmf2C
w5zDQM8Ql3FxPK+d2ElmGI7gUlRErp+Mr6Yau2Hcfog3+K5AvJAH88lncB8vVPEq
Ze2XxhvTQE9+VYzWXqz8swvEmonAczNyP6RVL6vFUavtWypicFiNXS9YaGwlVSLa
1Azv74+aGqibfRT2qjaaKmwKPbIdSciKc4ZSYbylFccSC8QhFSbQ4Kdq8tZx5rnn
Zg+vF9m5WiY0RYyk9N9un5NRz/BU5iWG7HbC81iZAjvEuPI6xIuI1Jor
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:44:03 2025 by rpki-client