Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File: FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier: YXVtn5z0Lm8tdsK30GjMWjV0Q+ToVW+9mXNqhYMlGn0=
Subject key identifier: 47:CC:F3:5F:A4:57:07:53:68:E5:B2:00:FC:AC:D5:51:71:78:ED:04
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer: /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial: D5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number: D4
Signing time: Thu 03 Apr 2025 03:13:16 +0000
Manifest this update: Thu 03 Apr 2025 03:13:15 +0000
Manifest next update: Sat 05 Apr 2025 03:13:15 +0000
Files and hashes: 1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: 4E1ZBXJmDsrUGBstjFwBhXcbjaO4Gg4L1tcmYH2oC3I=)
2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 213 (0xd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A32F5AF
Validity
Not Before: Apr 3 03:13:15 2025 GMT
Not After : Apr 5 03:13:15 2025 GMT
Subject: CN=67edfccb-a23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:99:ff:ec:4a:cf:48:ed:d6:3f:aa:6c:bc:
f0:d2:27:0b:7e:eb:0d:05:62:70:ab:07:9e:c5:19:
87:f2:c8:b9:12:51:fd:d7:0b:24:d7:90:d8:c5:48:
e1:54:ab:2c:a5:9c:54:e5:82:51:3c:20:15:7e:7e:
03:1b:01:9c:3e:ee:83:9f:80:21:38:91:e2:e5:de:
0e:6d:5d:12:5b:65:9b:c7:5a:ef:00:15:81:6c:6d:
31:64:7f:43:9e:63:72:91:c5:ab:d4:9e:fc:26:75:
b8:5f:07:66:7f:1f:af:ec:56:eb:5e:ed:99:33:ed:
6a:cc:74:a9:10:83:5c:9b:c2:96:38:cb:5f:3c:87:
ed:c5:1b:f6:ad:68:8b:5b:a7:69:a1:b2:82:cb:c6:
fc:3a:94:9d:65:ad:ef:0a:7e:2e:32:f0:2d:08:be:
f8:3b:ed:55:fe:2d:c1:0a:27:d6:03:3d:1a:db:1d:
51:e6:10:be:a3:e2:ad:6e:c4:e1:67:92:f5:b3:85:
be:32:25:b6:38:f2:4a:47:e4:42:c2:6c:dc:28:7a:
12:39:58:78:1d:2e:65:c6:33:47:25:b0:87:63:24:
86:8e:9b:8a:75:da:8f:0e:fc:92:65:7b:a3:19:1b:
ff:83:3e:e8:d5:7c:2b:83:c3:a1:f4:03:bb:ed:f3:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CC:F3:5F:A4:57:07:53:68:E5:B2:00:FC:AC:D5:51:71:78:ED:04
X509v3 Authority Key Identifier:
keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:82:d6:d1:5d:d2:00:b3:24:81:37:d4:7f:35:93:8e:11:63:
30:ef:40:21:c2:61:66:ea:e1:e1:8c:f1:51:3a:a4:84:2e:96:
79:50:a1:0f:d2:a8:fd:08:c7:8e:59:90:35:83:46:6a:3c:58:
a9:73:be:40:df:4e:38:4b:b6:1e:5c:3c:6f:f8:fd:50:a0:01:
0d:b9:09:49:9b:f8:da:c3:70:17:a0:64:80:00:3a:13:3d:b2:
f5:6f:d9:fa:c7:c7:f3:98:40:1f:ca:e9:c3:f1:6f:dd:46:1b:
aa:50:00:29:3c:77:fe:f4:6b:c2:38:ac:4f:bf:d2:b1:5e:3a:
ae:c3:fc:6e:13:2f:dd:da:08:24:7b:72:07:bf:45:eb:b4:25:
53:23:36:cf:7f:eb:9b:46:cf:a8:ef:c0:bb:a3:39:66:93:0a:
86:c9:e8:7f:95:bc:c2:62:18:a4:cd:3f:17:7f:e2:a7:ad:ed:
c1:20:35:cb:ae:06:0d:39:8a:0c:ed:be:79:89:ae:48:26:0d:
df:3e:ce:4d:b6:68:6b:22:95:09:50:83:f0:b3:6a:f7:bb:69:
05:28:9c:e9:90:b1:80:09:71:e7:75:0a:f1:0e:fe:d8:92:76:
d3:d1:5c:9c:e9:74:b2:ef:d1:bc:39:78:bc:d5:62:a5:dc:32:
66:48:d6:ca
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICANUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMyRjVBRjExMC8GA1UEBRMoMTVCQzA2MkIwQjcwRThGN0YyMEI0QTE1QkUwNTA5
MDA1QjczMTBDQjAeFw0yNTA0MDMwMzEzMTVaFw0yNTA0MDUwMzEzMTVaMBgxFjAU
BgNVBAMTDTY3ZWRmY2NiLWEyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZWZn/7ErPSO3WP6psvPDSJwt+6w0FYnCrB57FGYfyyLkSUf3XCyTXkNjF
SOFUqyylnFTlglE8IBV+fgMbAZw+7oOfgCE4keLl3g5tXRJbZZvHWu8AFYFsbTFk
f0OeY3KRxavUnvwmdbhfB2Z/H6/sVute7Zkz7WrMdKkQg1ybwpY4y188h+3FG/at
aItbp2mhsoLLxvw6lJ1lre8Kfi4y8C0Ivvg77VX+LcEKJ9YDPRrbHVHmEL6j4q1u
xOFnkvWzhb4yJbY48kpH5ELCbNwoehI5WHgdLmXGM0clsIdjJIaOm4p12o8O/JJl
e6MZG/+DPujVfCuDw6H0A7vt815NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUR8zz
X6RXB1No5bIA/KzVUXF47QQwHwYDVR0jBBgwFoAUFbwGKwtw6PfyC0oVvgUJAFtz
EMswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMkY1LzAzNDk5MEE0NzEwODExRUZBN0E5RTRBMzc2MkU5NTFBL0Zid0dL
d3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Zid0dLd3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMyRjUvMDM0OTkwQTQ3MTA4MTFFRkE3QTlFNEEzNzYy
RTk1MUEvRmJ3R0t3dHc2UGZ5QzBvVnZnVUpBRnR6RU1zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVgtbRXdIAsySBN9R/NZOOEWMw70Ah
wmFm6uHhjPFROqSELpZ5UKEP0qj9CMeOWZA1g0ZqPFipc75A3044S7YeXDxv+P1Q
oAENuQlJm/jaw3AXoGSAADoTPbL1b9n6x8fzmEAfyunD8W/dRhuqUAApPHf+9GvC
OKxPv9KxXjquw/xuEy/d2ggke3IHv0XrtCVTIzbPf+ubRs+o78C7ozlmkwqGyeh/
lbzCYhikzT8Xf+Knre3BIDXLrgYNOYoM7b55ia5IJg3fPs5NtmhrIpUJUIPws2r3
u2kFKJzpkLGACXHndQrxDv7YknbT0Vyc6XSy79G8OXi81WKl3DJmSNbK
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:58 2025 by rpki-client