Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier: szwP/ECOCRMCYeqGkRCi348HMkku21J/8lNFArikmow=
Subject key identifier: 43:2C:68:D5:22:42:0E:CA:91:E2:B6:E6:3F:1D:A7:A5:07:CC:2F:AD
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer: /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial: 020F
Authority info access: rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number: 020E
Signing time: Thu 13 Mar 2025 02:48:30 +0000
Manifest this update: Thu 13 Mar 2025 02:48:29 +0000
Manifest next update: Sat 15 Mar 2025 02:48:29 +0000
Files and hashes: 1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: /osl5EEuxkkeU7T0ldSn6Can54E5xjgTD3M7L0Tme6M=)
2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 527 (0x20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3691854AR
Validity
Not Before: Mar 13 02:48:29 2025 GMT
Not After : Mar 15 02:48:29 2025 GMT
Subject: CN=67d2477e-9dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:99:a2:69:8b:05:be:55:e4:c3:38:4a:c9:9c:
04:b2:68:3b:b9:c8:63:81:47:48:96:7e:c5:21:45:
c7:d2:f7:87:7c:da:0f:49:c6:3f:af:f2:e8:e3:e8:
b4:e1:a6:b7:b3:c0:d3:1f:00:ad:0d:48:f7:d2:3a:
81:94:ef:0f:a1:a3:e5:72:a2:65:15:24:30:69:2b:
98:31:62:1f:be:b7:d1:da:a4:12:37:be:32:ef:1a:
83:cf:7d:4e:f4:4f:fe:7a:94:97:9b:08:0d:15:7f:
de:be:ae:55:f1:58:be:3e:fa:ac:6b:f2:6c:bd:a1:
8c:68:5b:57:9a:bb:2d:a9:b0:59:74:5d:93:37:71:
31:b3:7e:61:d5:5f:53:56:b9:33:77:a2:76:7b:f3:
29:23:97:01:da:2d:5e:f5:50:15:97:86:bf:55:46:
29:f5:19:65:07:b7:a8:6f:85:77:a8:7d:93:cf:8d:
89:68:45:24:85:7b:5c:3e:7b:9b:3f:ac:cb:37:ea:
8e:f2:9a:e0:12:95:57:f8:a3:50:de:08:f6:f8:d1:
18:88:4b:0a:6b:7b:8c:fe:f9:94:30:d2:bc:e9:18:
99:e4:6d:dc:2b:52:cc:ba:a3:c3:5b:0d:be:10:18:
75:c7:a5:73:96:dc:17:be:b0:ab:77:ee:d1:3c:d3:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2C:68:D5:22:42:0E:CA:91:E2:B6:E6:3F:1D:A7:A5:07:CC:2F:AD
X509v3 Authority Key Identifier:
keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cc:b3:de:93:17:f0:0e:7b:be:df:7f:ee:29:6c:a1:98:bf:
da:49:33:98:5e:b9:ed:75:06:6a:0a:40:1d:cb:e4:ab:66:69:
f0:dd:5c:2b:df:6a:3a:95:14:9c:c2:dc:0f:d7:49:a5:3a:28:
7d:d5:48:f3:43:df:cc:2e:cc:3b:ca:dd:dd:41:81:37:ca:e0:
04:31:fc:49:2e:dc:c8:05:c1:e9:5f:4c:b4:9a:14:19:dc:e6:
4b:7a:53:fe:3b:de:80:bd:cd:c4:99:21:44:95:9a:82:c1:a1:
27:c8:82:48:3b:fd:46:65:90:34:2b:7c:f9:f4:2f:02:5b:bd:
10:29:d6:4f:ac:7a:1c:a9:64:3a:e5:76:d2:37:c7:25:c8:43:
5f:68:d6:60:6b:03:80:a2:f8:cb:05:49:a2:cf:ce:6f:72:9f:
9f:d5:05:3a:dc:b5:7e:39:f9:76:7a:7b:3a:bf:f4:50:7d:da:
54:e3:6b:00:72:19:10:5e:56:c3:d7:8e:ea:fb:19:7e:54:19:
06:ba:e8:d2:a4:43:21:37:8c:90:12:6d:6a:6f:bf:52:03:d4:
66:c6:98:07:0b:02:00:91:b7:c4:bb:a6:ab:7f:ac:2f:86:a7:
1a:91:3e:69:d8:7c:7f:36:27:48:94:a4:59:4f:77:6d:fa:ce:
62:0a:93:f1
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTE4NTRBUjExMC8GA1UEBRMoMzMwODRGQUY5MzNDNzI0RDMyRTZERkE3OUYxNUNE
MTZGM0Q4MkU3NDAeFw0yNTAzMTMwMjQ4MjlaFw0yNTAzMTUwMjQ4MjlaMBgxFjAU
BgNVBAMTDTY3ZDI0NzdlLTlkZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqmaJpiwW+VeTDOErJnASyaDu5yGOBR0iWfsUhRcfS94d82g9Jxj+v8ujj
6LThprezwNMfAK0NSPfSOoGU7w+ho+VyomUVJDBpK5gxYh++t9HapBI3vjLvGoPP
fU70T/56lJebCA0Vf96+rlXxWL4++qxr8my9oYxoW1eauy2psFl0XZM3cTGzfmHV
X1NWuTN3onZ78ykjlwHaLV71UBWXhr9VRin1GWUHt6hvhXeofZPPjYloRSSFe1w+
e5s/rMs36o7ymuASlVf4o1DeCPb40RiISwpre4z++ZQw0rzpGJnkbdwrUsy6o8Nb
Db4QGHXHpXOW3Be+sKt37tE80xefAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUQyxo
1SJCDsqR4rbmPx2npQfML60wHwYDVR0jBBgwFoAUMwhPr5M8ck0y5t+nnxXNFvPY
LnQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkxODU0LzcwQzdFMEZBNzFBRDExRUU4QzcxOUUzMzRBRDlFNkZDL013aFBy
NU04Y2sweTV0LW5ueFhORnZQWUxuUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L013aFByNU04Y2sweTV0LW5ueFhORnZQWUxuUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTE4NTQvNzBDN0UwRkE3MUFEMTFFRThDNzE5RTMzNEFEOUU2
RkMvTXdoUHI1TThjazB5NXQtbm54WE5GdlBZTG5RLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPzLPekxfwDnu+33/uKWyhmL/aSTOYXrnt
dQZqCkAdy+SrZmnw3Vwr32o6lRScwtwP10mlOih91UjzQ9/MLsw7yt3dQYE3yuAE
MfxJLtzIBcHpX0y0mhQZ3OZLelP+O96Avc3EmSFElZqCwaEnyIJIO/1GZZA0K3z5
9C8CW70QKdZPrHocqWQ65XbSN8clyENfaNZgawOAovjLBUmiz85vcp+f1QU63LV+
Ofl2ens6v/RQfdpU42sAchkQXlbD147q+xl+VBkGuujSpEMhN4yQEm1qb79SA9Rm
xpgHCwIAkbfEu6arf6wvhqcakT5p2Hx/NidIlKRZT3dt+s5iCpPx
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:42:02 2025 by rpki-client