Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File: zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier: ylhPtlj4JXBmJo7WzIE1ad1YiZhzd2m98odx/I5x4UI=
Subject key identifier: 25:8D:7D:C3:27:2D:02:92:E5:C8:03:97:3E:5A:DD:F0:4B:CE:C9:04
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer: /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial: 014F
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number: 014B
Signing time: Wed 04 Jun 2025 04:43:31 +0000
Manifest this update: Wed 04 Jun 2025 04:43:30 +0000
Manifest next update: Fri 06 Jun 2025 04:43:30 +0000
Files and hashes: 1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 7ej3GnMe9a8jJqVj32dwuOVy+lzlkpgWgO4FtUsJoNs=)
2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Validity
Not Before: Jun 4 04:43:30 2025 GMT
Not After : Jun 6 04:43:30 2025 GMT
Subject: CN=683fcef3-0bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:83:77:6a:fc:c5:2c:3e:43:6e:88:ff:45:
cb:84:4d:89:b7:90:3a:f2:e6:c5:af:cf:36:b2:f3:
40:26:70:d5:bd:8c:fe:53:39:de:e2:2c:49:48:d0:
af:49:53:b7:af:21:e1:8e:39:2d:43:3d:59:0a:a1:
c1:4b:78:fa:4a:11:a5:be:cc:8b:c3:38:7b:88:c8:
f2:d3:ce:d0:13:6d:07:d3:cd:ac:5f:74:e8:7a:70:
a7:82:ab:e5:50:5f:d0:d5:62:10:33:0e:92:ab:1e:
09:c9:7b:49:4c:f9:07:f6:c9:96:af:7b:b4:4a:c2:
52:0b:42:58:89:49:d1:d1:78:ee:e0:25:22:34:c2:
7e:64:81:eb:0b:49:5b:be:26:0f:47:bf:7d:a1:af:
40:c9:0b:14:99:f1:fb:65:2b:3c:8c:9b:88:24:0b:
d0:89:7a:a5:bd:7d:21:c5:d9:df:8b:5d:e9:bd:05:
1d:8b:8a:a5:1a:2d:1a:16:9f:d9:00:6d:25:ad:fe:
75:b0:2a:f1:0f:b3:3f:dd:c9:76:8a:b1:39:8d:50:
4b:1c:a5:06:5a:64:f7:6c:3f:a5:68:1a:16:c7:21:
06:e5:21:11:17:b0:30:51:66:78:27:fe:03:c9:a0:
ac:dc:59:ef:dd:d5:96:c9:4b:0d:e2:9a:0b:1b:22:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8D:7D:C3:27:2D:02:92:E5:C8:03:97:3E:5A:DD:F0:4B:CE:C9:04
X509v3 Authority Key Identifier:
keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4c:85:b7:c1:d7:bc:a2:5b:8b:f5:30:4e:9d:d8:f7:4f:b2:
70:5d:32:5c:28:b7:41:5e:3c:37:a3:55:ef:42:a2:2e:fa:c8:
e5:c5:84:4d:5f:59:58:a8:68:f9:f0:2e:c8:18:63:4b:93:5d:
3c:6a:c3:b4:a9:c1:9f:12:54:ec:5b:63:84:ce:80:89:8b:08:
47:bf:a9:2c:c4:f7:88:b6:5e:0a:ce:7a:00:b0:14:a1:30:44:
4b:d3:86:7e:5e:5f:7e:94:b8:63:6d:78:c0:dc:7b:dc:37:8e:
ae:3d:f0:a0:7e:cd:88:05:5f:a0:db:18:79:e3:c6:b8:47:53:
60:b9:99:5b:2b:b5:fd:49:af:25:9d:13:1c:f0:60:35:13:cf:
66:b4:e5:28:97:75:4f:29:76:6d:7f:f1:7e:34:08:0e:55:de:
69:0f:f5:10:d7:22:b8:84:82:aa:30:c7:49:de:aa:63:13:73:
3a:bf:00:16:80:ff:be:1a:73:bb:1d:fd:3f:3e:6f:4f:55:9d:
ab:85:e9:6b:06:d4:df:4d:8b:c4:1c:97:de:74:ac:6a:17:38:
5f:93:12:13:25:6c:15:c8:6c:8e:af:a4:46:ca:52:03:d8:ea:
c1:ea:dc:44:44:66:bf:49:86:14:bb:82:d9:16:e0:3e:16:44:
40:fb:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:33:17 2025 by rpki-client