Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
File: IGKsHBhX7ixX9xZrmADtH4952XE.mft (raw, json)
Hash identifier: 8+nHNjjM4qOzg62jJ4VcMRMo1YEWQLROIKd5lX/pgto=
Subject key identifier: 8A:A9:F5:DA:CF:34:E3:02:F1:CD:45:62:B5:2F:78:7A:79:8F:92:20
Authority key identifier: 20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
Certificate issuer: /CN=F369C3F1AF/serialNumber=2062AC1C1857EE2C57F7166B9800ED1F8F79D971
Certificate serial: CA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
Manifest number: C8
Signing time: Thu 13 Mar 2025 03:14:42 +0000
Manifest this update: Thu 13 Mar 2025 03:14:42 +0000
Manifest next update: Sat 15 Mar 2025 03:14:42 +0000
Files and hashes: 1: IGKsHBhX7ixX9xZrmADtH4952XE.crl (hash: 5hliv3lqQNDd/omNwph0u0oHFC9uYSS0irGOloMMAhw=)
2: 730CF53E6F7811EFB7469458762E951A.roa (hash: 4Xr+HaCJbqAah+5S3H7APXwnc3AnA1LsHigd1Wadgok=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202 (0xca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369C3F1AF
Validity
Not Before: Mar 13 03:14:42 2025 GMT
Not After : Mar 15 03:14:42 2025 GMT
Subject: CN=67d24da2-3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:7a:ef:75:9a:8c:2a:51:f5:0a:69:82:04:
34:15:4a:c6:4a:d5:08:9d:3d:a3:cb:46:63:86:9f:
1d:8b:60:ad:6b:24:55:94:3d:cc:5e:00:ff:28:92:
0f:ec:7c:62:11:fb:89:37:17:ec:bc:81:d5:34:60:
3e:7f:f1:42:a8:80:c2:eb:43:6a:52:ea:8f:ab:6a:
ab:bf:cb:c9:98:c4:a4:7e:1f:59:3f:e4:57:f5:e5:
e2:89:c4:cb:31:4f:be:b0:d6:8c:e6:d5:42:10:7d:
25:62:c8:81:ad:22:92:3a:7a:55:dc:94:49:e2:5f:
33:aa:93:3c:c5:e2:d4:04:fd:a6:5b:12:a4:4e:1c:
a1:69:dc:0e:2a:cf:e8:7d:43:cd:b4:8c:97:88:b8:
7d:09:46:54:a7:c2:51:50:2a:0d:1a:c3:c8:bb:23:
c6:23:73:83:32:ac:58:f9:47:13:91:c9:c4:98:f3:
b0:fc:86:62:98:cc:b6:4f:34:a0:85:53:ad:d1:1a:
de:b8:f5:93:9d:9d:d3:fb:33:82:e6:a5:a0:9e:84:
69:c5:7a:7d:2d:97:95:d5:3c:60:28:29:4b:3f:9c:
46:83:74:f6:08:43:8d:6e:eb:53:de:d9:ea:6f:71:
cb:b2:45:e6:1b:8a:ef:3d:f1:10:0d:ab:c1:24:31:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A9:F5:DA:CF:34:E3:02:F1:CD:45:62:B5:2F:78:7A:79:8F:92:20
X509v3 Authority Key Identifier:
keyid:20:62:AC:1C:18:57:EE:2C:57:F7:16:6B:98:00:ED:1F:8F:79:D9:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IGKsHBhX7ixX9xZrmADtH4952XE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C3F1/F4BE55A06C3F11EF95D9E89B762E951A/IGKsHBhX7ixX9xZrmADtH4952XE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
94:b2:04:50:62:66:8e:da:f8:01:7f:78:4b:85:80:83:fb:75:
16:a4:93:e4:df:76:5d:ca:1a:b1:15:be:3f:76:05:cb:3a:8b:
0b:39:86:65:06:6b:57:48:1c:d2:d6:06:de:bc:06:11:c0:1b:
76:1a:39:61:6c:15:08:82:6d:4c:11:e3:d2:b8:e0:7a:ec:26:
69:dc:8b:cf:32:bb:72:51:dc:cd:1d:b3:0c:91:be:9c:6c:4e:
ac:6a:69:58:b0:3b:f7:61:bd:cf:3e:e9:4a:b8:52:03:c0:1c:
94:bc:99:44:04:2f:68:b0:37:a4:ff:ad:fc:2c:3d:9d:4f:4c:
e3:f2:71:40:56:2a:85:ef:7d:cc:11:41:31:23:46:50:4e:20:
63:8d:9c:95:69:05:3b:b8:92:c5:ab:5f:dc:6f:c7:32:6d:b8:
f9:5c:65:77:ae:c0:a2:72:09:c3:a3:99:86:63:0a:05:a9:3a:
33:37:91:63:76:09:3f:20:12:b0:33:60:ba:7b:3a:c7:65:f4:
88:5d:65:84:52:7a:70:23:5a:da:6f:c7:e8:13:f7:a1:b4:a2:
16:62:af:bb:8b:89:2f:59:33:62:29:12:c2:c0:fd:79:c1:eb:
24:fe:b1:33:99:47:f4:3b:cd:d7:70:00:28:63:5e:86:5e:9b:
7b:89:6a:0c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUMzRjFBRjExMC8GA1UEBRMoMjA2MkFDMUMxODU3RUUyQzU3RjcxNjZCOTgwMEVE
MUY4Rjc5RDk3MTAeFw0yNTAzMTMwMzE0NDJaFw0yNTAzMTUwMzE0NDJaMBgxFjAU
BgNVBAMTDTY3ZDI0ZGEyLTMzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjM3rvdZqMKlH1CmmCBDQVSsZK1QidPaPLRmOGnx2LYK1rJFWUPcxeAP8o
kg/sfGIR+4k3F+y8gdU0YD5/8UKogMLrQ2pS6o+raqu/y8mYxKR+H1k/5Ff15eKJ
xMsxT76w1ozm1UIQfSViyIGtIpI6elXclEniXzOqkzzF4tQE/aZbEqROHKFp3A4q
z+h9Q820jJeIuH0JRlSnwlFQKg0aw8i7I8Yjc4MyrFj5RxORycSY87D8hmKYzLZP
NKCFU63RGt649ZOdndP7M4LmpaCehGnFen0tl5XVPGAoKUs/nEaDdPYIQ41u61Pe
2epvccuyReYbiu898RANq8EkMchLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiqn1
2s804wLxzUVitS94enmPkiAwHwYDVR0jBBgwFoAUIGKsHBhX7ixX9xZrmADtH495
2XEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDM0YxL0Y0QkU1NUEwNkMzRjExRUY5NUQ5RTg5Qjc2MkU5NTFBL0lHS3NI
QmhYN2l4WDl4WnJtQUR0SDQ5NTJYRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lHS3NIQmhYN2l4WDl4WnJtQUR0SDQ5NTJYRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUMzRjEvRjRCRTU1QTA2QzNGMTFFRjk1RDlFODlCNzYy
RTk1MUEvSUdLc0hCaFg3aXhYOXhacm1BRHRINDk1MlhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCUsgRQYmaO2vgBf3hLhYCD+3UWpJPk
33ZdyhqxFb4/dgXLOosLOYZlBmtXSBzS1gbevAYRwBt2GjlhbBUIgm1MEePSuOB6
7CZp3IvPMrtyUdzNHbMMkb6cbE6samlYsDv3Yb3PPulKuFIDwByUvJlEBC9osDek
/638LD2dT0zj8nFAViqF733MEUExI0ZQTiBjjZyVaQU7uJLFq1/cb8cybbj5XGV3
rsCicgnDo5mGYwoFqTozN5Fjdgk/IBKwM2C6ezrHZfSIXWWEUnpwI1rab8foE/eh
tKIWYq+7i4kvWTNiKRLCwP15wesk/rEzmUf0O83XcAAoY16GXpt7iWoM
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:46:49 2025 by rpki-client