Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File: M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier: /yhE2O61CyIV6mL4QK1YoDzw9jLVvUZ4nQFGdFcvzRE=
Subject key identifier: 7D:70:C8:C5:9A:C6:16:F9:D1:0C:F9:32:51:F1:26:47:B7:9B:12:B2
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: 8F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number: 8E
Signing time: Thu 03 Apr 2025 03:19:01 +0000
Manifest this update: Thu 03 Apr 2025 03:19:00 +0000
Manifest next update: Sat 05 Apr 2025 03:19:00 +0000
Files and hashes: 1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: QgQNTv+D6807mhnZCN8Jo/CXQjx1GKbmCkyi+1cSGek=)
2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143 (0x8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF
Validity
Not Before: Apr 3 03:19:00 2025 GMT
Not After : Apr 5 03:19:00 2025 GMT
Subject: CN=67edfe25-e592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:eb:52:3e:16:78:46:d3:1c:32:23:d1:71:
1a:7b:14:ff:a0:04:fd:7f:12:6a:ff:70:cd:65:6b:
88:20:61:f5:fa:16:2f:1f:0a:e5:22:df:2e:a3:c3:
a3:60:82:d8:4e:86:60:f6:ed:7e:7b:1b:57:06:04:
4f:3f:98:68:f6:16:22:13:cc:d4:a0:13:89:2e:22:
eb:bd:60:34:c0:c2:0a:2f:ab:a9:41:98:1d:9d:1f:
c1:82:9c:3c:84:79:fd:65:13:9a:d8:1b:2f:af:8b:
de:32:98:57:53:b5:53:2f:a9:db:b4:b8:89:eb:8c:
36:66:c4:4f:a3:e3:0d:9d:64:49:df:b3:7f:ff:b1:
57:df:18:a7:95:28:8a:1d:62:30:07:bf:fb:fa:93:
28:c5:bd:ca:7b:3d:4c:53:5d:dc:4a:71:7c:fd:73:
1c:1a:dc:4a:1d:9f:5b:d0:a2:3c:04:8b:e5:6d:72:
ca:52:22:04:b4:64:b8:ac:47:3c:03:f9:cb:1f:fe:
ae:6c:b9:82:ee:7d:08:5f:85:be:ac:d3:3f:76:74:
56:02:e0:e6:06:d9:34:a2:69:29:90:c9:df:8e:96:
aa:bb:fc:b6:bd:e7:53:c8:00:7e:48:b7:9d:5a:62:
1a:c4:02:b9:3e:c3:c9:b1:be:23:5d:74:c9:6b:ac:
2c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:70:C8:C5:9A:C6:16:F9:D1:0C:F9:32:51:F1:26:47:B7:9B:12:B2
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3b:39:64:88:28:6b:a1:7c:df:cb:d4:1b:a6:3e:cc:ed:74:
6d:67:3d:e9:3a:da:ed:32:79:7f:75:06:03:53:2b:89:d8:dc:
ad:07:ec:90:af:36:4e:35:ee:9c:3a:61:44:cc:22:61:e9:fe:
25:97:38:11:36:f1:91:0f:01:63:18:55:73:7e:c4:2d:63:88:
54:dd:fb:16:fa:09:90:27:b3:36:08:50:9c:a3:51:db:92:45:
e6:40:16:fa:7c:3f:e4:14:de:93:16:16:8f:4b:75:c9:02:56:
ac:20:a6:7f:ea:4b:0d:37:08:1c:32:e7:82:63:a5:d5:75:86:
8c:27:87:4e:ff:ac:c4:d4:2b:da:9a:ca:65:88:c7:45:29:1f:
1c:f2:d2:05:09:82:c4:9c:1b:1f:f0:4d:d7:bd:4b:ca:d9:76:
14:ae:cc:85:a0:ec:be:c5:59:81:7c:0b:a1:76:1b:db:05:01:
1a:2d:f3:b7:3c:f0:e3:63:62:80:4c:6c:c3:1d:23:31:a1:26:
07:6f:ab:54:1e:30:29:d8:3f:f0:ae:89:9c:26:9f:49:ef:12:
be:0f:49:5d:ae:10:fa:59:cd:93:f8:9f:1a:68:b4:f4:88:95:
e1:8d:2a:c5:c8:d0:50:77:93:94:8e:28:80:c9:c7:4e:d0:5b:
b8:8c:71:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:40:15 2025 by rpki-client