Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
File: DoVnb92LLIvqeU6JUNJzTz-JMME.mft (raw, json)
Hash identifier: jF78O7X8mujJf99MCwxC8oG0hfusHxpjfBtaM2s/UzQ=
Subject key identifier: C7:7E:08:E2:0F:7E:4F:73:47:83:70:13:70:03:3A:5A:61:F1:BB:77
Authority key identifier: 0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
Certificate issuer: /CN=F3694A3EAF/serialNumber=0E85676FDD8B2C8BEA794E8950D2734F3F8930C1
Certificate serial: A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
Manifest number: A0
Signing time: Thu 03 Apr 2025 03:18:01 +0000
Manifest this update: Thu 03 Apr 2025 03:18:00 +0000
Manifest next update: Sat 05 Apr 2025 03:18:00 +0000
Files and hashes: 1: DoVnb92LLIvqeU6JUNJzTz-JMME.crl (hash: wm+nVLHNcCAFRsa0wRRa58O58xn/QAOmUpS17zseSRQ=)
2: 0F329508984711EF85483C4D762E951A.roa (hash: a0BidHbztDQTPkWjYpuerywnpAYxfdwn5c2aRLRiLtE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3694A3EAF
Validity
Not Before: Apr 3 03:18:00 2025 GMT
Not After : Apr 5 03:18:00 2025 GMT
Subject: CN=67edfde9-952e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:27:f9:75:2f:86:09:5d:66:08:de:fb:e3:
0f:80:75:1f:b0:86:7b:10:a8:78:3e:7e:0f:a2:74:
6f:e1:46:34:13:eb:7a:06:9a:f9:93:b4:01:69:51:
c6:69:74:00:1a:b3:c4:67:ad:db:29:d0:ac:33:11:
64:9a:66:52:b0:d3:3f:1c:11:f7:a0:67:73:bf:3e:
67:4f:5b:4a:9b:05:b8:42:ae:f1:91:b9:90:9c:6f:
69:d3:37:63:eb:9c:94:ff:c8:e0:bd:5d:8b:c4:18:
02:2e:5f:33:ef:7f:e9:8a:cb:91:1c:84:51:18:50:
44:00:85:03:dd:dd:61:1a:38:ec:58:66:b5:7c:60:
ee:e8:f5:d8:3a:56:2e:7a:d4:00:ef:6d:98:e3:42:
36:40:c6:bd:d1:f9:8f:06:a9:84:c1:5c:7d:60:58:
a6:cc:cf:3f:81:d0:7f:b0:eb:d1:dc:69:d9:8a:76:
3d:1d:3d:05:16:d2:28:30:c0:33:37:59:f9:a0:4c:
74:e9:21:dd:c1:ed:53:65:b3:88:54:d7:70:25:c9:
c7:e6:14:73:5e:c6:8c:4f:66:de:84:28:b8:5b:05:
8d:36:94:9e:09:d9:0c:45:e8:a9:5f:8a:72:bf:77:
b0:c9:5d:20:17:58:d4:f6:49:02:c2:8a:18:0d:65:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7E:08:E2:0F:7E:4F:73:47:83:70:13:70:03:3A:5A:61:F1:BB:77
X509v3 Authority Key Identifier:
keyid:0E:85:67:6F:DD:8B:2C:8B:EA:79:4E:89:50:D2:73:4F:3F:89:30:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DoVnb92LLIvqeU6JUNJzTz-JMME.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3694A3E/A405B592984311EFB970F4B6762E951A/DoVnb92LLIvqeU6JUNJzTz-JMME.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
83:fb:33:36:a3:57:44:51:b9:ae:dc:1a:3e:ec:a9:21:eb:29:
f4:aa:76:09:d5:99:ef:fe:f0:65:f9:fe:f7:cf:a3:c4:10:83:
bb:c6:02:f8:57:8c:a2:8a:10:b2:4b:ba:23:44:ba:98:6d:fd:
82:0a:ee:dc:19:3b:21:b7:bd:cd:05:54:3f:87:9e:ee:15:1b:
3f:97:d9:2b:63:b5:77:af:f0:4f:c2:03:e8:6d:30:83:62:6c:
c0:94:ac:01:e8:82:0e:d3:ec:be:bd:5b:cb:5e:72:fc:23:b5:
da:3a:e4:95:cb:00:2f:71:33:41:f1:85:94:73:67:a9:34:03:
17:3c:27:b6:11:4c:75:09:d7:7a:7f:d5:d5:33:53:ba:31:e1:
b3:f4:0f:b8:49:af:28:22:36:8c:bf:dc:37:db:6b:d5:66:9a:
a1:58:92:50:c3:5d:f1:9d:4d:83:e3:aa:aa:49:db:ea:61:ee:
5c:e7:94:29:ee:38:1d:14:e8:19:5b:fc:22:fc:a2:a2:ea:17:
84:07:b1:c6:4f:ad:32:d9:9d:e6:ef:06:fb:46:cc:10:18:25:
9d:de:0d:52:7a:28:9a:a4:91:47:4b:a5:2a:67:ac:da:2e:a3:
de:48:6e:de:cd:ae:fe:a4:7d:a2:de:0f:e8:d0:c9:15:33:9b:
0a:ae:aa:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTRBM0VBRjExMC8GA1UEBRMoMEU4NTY3NkZERDhCMkM4QkVBNzk0RTg5NTBEMjcz
NEYzRjg5MzBDMTAeFw0yNTA0MDMwMzE4MDBaFw0yNTA0MDUwMzE4MDBaMBgxFjAU
BgNVBAMTDTY3ZWRmZGU5LTk1MmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCVSf5dS+GCV1mCN774w+AdR+whnsQqHg+fg+idG/hRjQT63oGmvmTtAFp
UcZpdAAas8Rnrdsp0KwzEWSaZlKw0z8cEfegZ3O/PmdPW0qbBbhCrvGRuZCcb2nT
N2PrnJT/yOC9XYvEGAIuXzPvf+mKy5EchFEYUEQAhQPd3WEaOOxYZrV8YO7o9dg6
Vi561ADvbZjjQjZAxr3R+Y8GqYTBXH1gWKbMzz+B0H+w69HcadmKdj0dPQUW0igw
wDM3WfmgTHTpId3B7VNls4hU13AlycfmFHNexoxPZt6EKLhbBY02lJ4J2QxF6Klf
inK/d7DJXSAXWNT2SQLCihgNZULZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx34I
4g9+T3NHg3ATcAM6WmHxu3cwHwYDVR0jBBgwFoAUDoVnb92LLIvqeU6JUNJzTz+J
MMEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk0QTNFL0E0MDVCNTkyOTg0MzExRUZCOTcwRjRCNjc2MkU5NTFBL0RvVm5i
OTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RvVm5iOTJMTEl2cWVVNkpVTkp6VHotSk1NRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTRBM0UvQTQwNUI1OTI5ODQzMTFFRkI5NzBGNEI2NzYy
RTk1MUEvRG9WbmI5MkxMSXZxZVU2SlVOSnpUei1KTU1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCD+zM2o1dEUbmu3Bo+7Kkh6yn0qnYJ
1Znv/vBl+f73z6PEEIO7xgL4V4yiihCyS7ojRLqYbf2CCu7cGTsht73NBVQ/h57u
FRs/l9krY7V3r/BPwgPobTCDYmzAlKwB6IIO0+y+vVvLXnL8I7XaOuSVywAvcTNB
8YWUc2epNAMXPCe2EUx1Cdd6f9XVM1O6MeGz9A+4Sa8oIjaMv9w322vVZpqhWJJQ
w13xnU2D46qqSdvqYe5c55Qp7jgdFOgZW/wi/KKi6heEB7HGT60y2Z3m7wb7RswQ
GCWd3g1SeiiapJFHS6UqZ6zaLqPeSG7eza7+pH2i3g/o0MkVM5sKrqpz
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:21 2025 by rpki-client