Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: KFyhfDk7jPmg5E80p13mLJC0v2m+gO6kUSZrBubBsH4=
Subject key identifier: 2D:67:F8:F7:F9:21:54:80:36:5C:E7:8A:21:DF:2B:92:A5:52:47:51
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 0189
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 0183
Signing time: Mon 21 Apr 2025 04:30:32 +0000
Manifest this update: Mon 21 Apr 2025 04:30:31 +0000
Manifest next update: Wed 23 Apr 2025 04:30:31 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: 69pmqMTQZs564VaBtPe6N7V8nXwLXHkIy4Ty6LLPYfM=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 23 Apr 2025 00:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 393 (0x189)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Apr 21 04:30:31 2025 GMT
Not After : Apr 23 04:30:31 2025 GMT
Subject: CN=6805c9e8-ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:54:e3:91:dd:0b:2e:4d:84:ca:b2:66:32:
98:80:ec:35:74:ff:ad:7a:0b:a7:7c:7d:54:7e:31:
5f:ab:92:43:7f:5d:db:fe:06:c4:e7:15:24:3f:39:
c6:2c:f1:31:d3:be:e4:be:3d:d7:a9:df:2c:86:57:
4d:df:69:dc:dc:4d:95:69:59:2c:00:55:e7:61:fc:
a6:4b:a1:7f:54:12:98:93:03:70:91:30:ee:4d:d2:
57:96:ad:f4:ec:59:bf:e7:a6:e9:96:a9:3d:02:5e:
4e:36:e8:83:c3:41:01:c5:5b:c4:91:c3:7a:c4:89:
b5:e5:36:49:bf:ec:b5:8e:1d:f3:ed:85:22:64:31:
91:6f:4c:e3:54:ec:f5:d4:7c:85:28:84:3b:91:75:
3c:24:c4:c7:2a:c8:9f:5c:06:13:01:ac:06:41:f1:
a7:b0:b7:07:3c:e3:a1:bc:d5:72:ca:cf:2b:ef:39:
44:56:85:c4:27:b8:e7:e9:a6:1b:f2:0f:7b:74:36:
aa:e5:fa:94:96:85:a7:ee:7a:aa:74:a7:cd:01:d2:
c4:c4:fc:45:71:24:fd:52:f7:f8:0f:2d:8f:c4:03:
5a:08:4a:7b:f6:7f:44:86:3d:f4:b6:b3:d8:e0:03:
5b:51:6d:84:66:6f:17:a7:2c:98:9b:9b:d6:a5:dc:
e6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:F8:F7:F9:21:54:80:36:5C:E7:8A:21:DF:2B:92:A5:52:47:51
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:55:f8:ad:59:26:3c:bc:20:6c:33:1f:c0:d0:c8:fc:0d:
50:fc:a1:9f:df:fb:80:d2:58:87:d0:a3:9f:e3:d8:9c:4d:8a:
81:54:10:7f:84:f9:2a:04:13:5e:21:65:4b:f2:23:b5:e1:c9:
5b:f4:68:8b:22:f7:07:19:93:62:a5:ea:f5:7c:14:2f:e7:f8:
a5:c8:6b:6f:2a:40:41:a9:f6:60:2b:64:ea:61:b6:8e:3b:e3:
31:c9:f7:df:29:21:2f:14:3e:88:5c:e9:ec:67:bc:bb:47:cf:
bc:a4:a9:2d:fa:ed:96:9d:18:ff:92:df:44:7c:c5:c6:25:02:
ec:21:cb:8e:31:b0:05:1a:57:14:45:ca:d6:e7:bb:db:b6:41:
ac:32:5c:f1:e0:bf:55:43:f1:6f:3e:f0:15:49:73:ad:ce:f7:
e8:06:d5:88:b4:45:92:e7:66:7c:7c:4d:6b:43:c1:ad:3a:0c:
4f:69:c1:01:b1:d7:0e:e9:3d:8d:93:4e:c5:3b:92:31:28:8c:
4c:41:34:09:2c:41:f8:ac:6e:ed:4e:57:27:e9:1e:97:16:c9:
e8:79:6e:7d:72:7e:5d:b5:85:b6:05:d9:e9:f9:5e:2f:5b:66:
c4:65:02:1c:61:fe:0c:26:5d:d6:91:11:ae:3d:59:16:55:30:
ad:9b:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:57:38 2025 by rpki-client