
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File: CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier: BNv/lMWtHflc4BbSgSxcfJAppmEnMqiNeAiT2Np4GDs=
Subject key identifier: DB:7E:D9:01:ED:2C:EA:84:40:22:F4:0C:18:34:72:3F:90:7E:B2:76
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer: /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial: 01BB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number: 01B5
Signing time: Tue 10 Jun 2025 04:30:51 +0000
Manifest this update: Tue 10 Jun 2025 04:30:50 +0000
Manifest next update: Thu 12 Jun 2025 04:30:50 +0000
Files and hashes: 1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: coTDtePlpWXkW3b5AcAm4FAEVSt3pjNT0HO4vpG1HRE=)
2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 12 Jun 2025 04:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 443 (0x1bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Validity
Not Before: Jun 10 04:30:50 2025 GMT
Not After : Jun 12 04:30:50 2025 GMT
Subject: CN=6847b4fb-57f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:fc:63:9b:4f:5e:8e:f2:91:63:2e:44:81:
58:7c:b5:5e:e4:d4:65:fe:b6:61:ca:0a:c7:cc:5b:
ab:e9:f9:16:d3:81:8e:0f:35:7a:44:3d:20:cf:e7:
bd:1b:43:62:6b:a5:00:34:eb:56:ab:a9:9e:5c:18:
33:b0:6d:bf:8a:4c:07:ac:a8:ed:ca:cd:64:36:b7:
a2:f8:99:35:29:3c:5d:59:43:9e:0a:1e:36:e0:36:
64:01:c8:ab:3d:96:26:cf:c8:1e:66:76:8f:e1:e1:
54:4f:a3:80:2f:bd:c1:e1:97:c0:ca:52:02:cf:45:
e6:56:de:40:e7:06:80:62:64:47:11:38:5e:cf:da:
87:d9:c8:58:09:a4:11:e5:e0:ff:ae:84:a7:c7:8f:
fd:03:8a:c2:f5:7e:b2:00:f5:e3:c5:23:3d:b9:10:
9e:6d:66:3b:4d:7c:fc:78:5b:6b:40:ed:e2:22:22:
04:21:f5:3e:32:68:a4:9d:c6:14:2f:57:ba:32:6e:
d6:62:aa:c0:78:e6:a7:31:86:74:df:36:15:58:f8:
6f:97:31:b6:10:0d:29:f3:86:e6:fd:09:0a:77:0d:
8e:14:09:7c:f0:98:f8:14:43:d1:53:b4:2d:3d:4c:
53:e6:62:44:01:a5:89:9e:a7:2e:f1:8d:a3:f1:83:
e8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7E:D9:01:ED:2C:EA:84:40:22:F4:0C:18:34:72:3F:90:7E:B2:76
X509v3 Authority Key Identifier:
keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1c:e2:61:2e:15:6d:20:6f:68:4f:39:3a:25:db:84:4d:ed:
24:69:76:5f:21:d7:21:89:b5:b0:38:d2:06:be:e5:af:31:85:
c3:e4:8d:f9:93:cb:4a:ea:a9:2a:f8:6f:02:d8:e1:fc:b2:29:
9b:9d:8c:48:95:97:d2:02:bc:4c:01:3d:cb:5a:5d:44:8f:58:
20:d8:29:b1:59:c7:16:ea:a6:72:35:29:c0:9e:b3:68:52:b3:
e6:c6:c5:46:5e:37:e3:7e:66:92:49:02:3c:80:db:19:07:ea:
88:9d:f3:7c:c3:c2:80:a4:9d:8f:14:f7:6d:b9:b1:43:3f:a9:
50:a3:42:d1:c9:e8:26:14:d3:ff:e2:cb:e9:02:d5:cd:78:f4:
30:d8:ac:6e:9d:d8:6f:6d:77:cd:a5:31:10:71:34:bc:f2:f6:
aa:1f:e1:87:06:07:75:01:0a:49:f0:62:d3:85:9a:5a:06:09:
34:d7:44:ec:6f:15:8d:8b:63:52:dc:e1:8b:dc:4d:a4:a1:53:
d7:32:5c:5c:9f:2d:14:a8:0d:46:62:ed:3a:5a:1d:28:2d:ca:
47:b6:f0:79:7d:5a:44:0b:79:a3:ea:3e:32:be:a0:02:ee:ba:
d9:f9:a1:6b:55:f2:b6:bf:0f:1e:bf:df:40:22:25:e0:8d:55:
5a:46:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:31:44 2025 by rpki-client