Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
File: R_ufMc9PLRlxHITTLiO9AG4ALpY.mft (raw, json)
Hash identifier: l2Tokp94Q54HoJjYHxNFvDG68sQ88hi0vi27gGoaayQ=
Subject key identifier: C1:78:EB:65:27:31:8E:65:90:76:B1:73:D4:E6:81:63:3C:EF:AD:D9
Authority key identifier: 47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
Certificate issuer: /CN=F36A36C8AF/serialNumber=47FB9F31CF4F2D19711C84D32E23BD006E002E96
Certificate serial: 0534
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
Manifest number: 0530
Signing time: Thu 03 Apr 2025 01:51:47 +0000
Manifest this update: Thu 03 Apr 2025 01:51:46 +0000
Manifest next update: Sat 05 Apr 2025 01:51:46 +0000
Files and hashes: 1: R_ufMc9PLRlxHITTLiO9AG4ALpY.crl (hash: 9MUIke/BTx2/AHQaQTj2seJxBSNCpKxvwxPioX/wB8Q=)
2: 3CBE5F76212011ECA2098832D8A014CE.roa (hash: 8d9G2F7SeXBUC0RrFhpkoC1cMwO502CPGYGL0obQDBM=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1332 (0x534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A36C8AF
Validity
Not Before: Apr 3 01:51:46 2025 GMT
Not After : Apr 5 01:51:46 2025 GMT
Subject: CN=67ede9b3-d50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:56:c1:f0:3f:bc:e4:5a:90:12:cd:bc:43:
1f:21:23:8b:79:4f:42:a4:e4:90:e2:3f:bd:47:3a:
5c:1e:66:03:a0:2f:4e:58:03:54:47:66:90:7f:be:
57:40:29:18:74:4a:ee:c4:7b:c4:aa:90:59:06:37:
3e:fb:01:8e:2c:6f:6e:58:bc:9f:9f:02:c9:ba:72:
0e:80:90:bc:16:a6:2c:e3:11:ea:8e:bb:d7:a1:53:
7d:ca:4f:d7:d7:4b:ee:86:07:d8:78:4d:f3:c0:f8:
50:34:00:b1:95:a4:87:93:63:94:bf:b1:f9:98:50:
47:86:dc:ed:ec:dd:46:c1:0c:9b:d2:a6:cc:ec:2d:
7d:ee:45:8c:bd:64:40:e3:d4:67:f1:c9:9b:e8:c0:
77:71:e2:c4:37:0a:ea:d2:3b:22:bb:99:da:f7:70:
ce:78:02:cd:b2:08:ed:b7:3f:39:5e:fb:13:46:76:
c0:d1:96:d4:d8:ec:c8:c3:f6:56:00:34:5e:a8:9c:
73:0d:07:34:36:58:a5:c3:db:35:ea:41:44:83:d2:
7b:fc:03:15:17:70:d2:98:a3:4d:b3:5a:81:0c:52:
0f:77:4b:ed:83:2a:5e:0a:21:73:b3:e1:00:7a:46:
7b:c2:a9:3e:a5:d8:88:ab:5e:48:c9:48:3e:80:3d:
75:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:EB:65:27:31:8E:65:90:76:B1:73:D4:E6:81:63:3C:EF:AD:D9
X509v3 Authority Key Identifier:
keyid:47:FB:9F:31:CF:4F:2D:19:71:1C:84:D3:2E:23:BD:00:6E:00:2E:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/R_ufMc9PLRlxHITTLiO9AG4ALpY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A36C8/82AA150A210E11ECA6F7CC17D8A014CE/R_ufMc9PLRlxHITTLiO9AG4ALpY.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
8f:0c:91:29:2a:db:e6:dc:6d:57:2c:80:1b:fc:71:b5:4a:28:
d6:e5:85:e5:b9:c1:1c:0a:fa:71:84:57:94:9d:cb:d4:55:fe:
b4:09:d4:a8:dc:fc:7b:df:20:b1:6e:74:e3:2a:cf:c5:02:a6:
4d:40:71:18:35:7e:a9:28:1f:a0:00:0d:f0:29:f3:8b:ca:ef:
84:02:8e:1d:9a:c2:c9:99:24:f8:f2:dc:e3:7e:1e:01:14:84:
f5:5f:39:8c:7e:af:30:ed:a5:cc:4c:ff:10:98:69:33:f7:25:
2a:ca:59:fa:2b:0f:9d:ea:bd:8f:c6:11:7a:69:ca:d2:1c:38:
ca:ff:64:63:24:05:64:2e:95:36:b1:93:22:29:94:8b:88:3b:
1f:ef:2c:e4:ab:8f:13:03:70:ab:9b:93:96:9e:40:7a:3f:a0:
cc:94:56:cd:28:38:e2:14:ea:5c:8a:cf:d4:63:da:0d:a8:1e:
82:72:6c:76:b6:89:99:c4:a3:34:46:52:e9:1a:99:2f:31:7b:
8c:02:26:11:09:31:9d:17:c6:2a:6f:64:11:b4:21:d8:bd:26:
c4:90:31:fd:fa:5a:5b:c5:72:30:d8:11:5f:55:b9:85:b3:7f:
8a:57:b3:59:25:93:e0:1b:08:c3:52:85:de:3a:89:d4:f0:af:
b2:dd:ad:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM2QzhBRjExMC8GA1UEBRMoNDdGQjlGMzFDRjRGMkQxOTcxMUM4NEQzMkUyM0JE
MDA2RTAwMkU5NjAeFw0yNTA0MDMwMTUxNDZaFw0yNTA0MDUwMTUxNDZaMBgxFjAU
BgNVBAMTDTY3ZWRlOWIzLWQ1MGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6AFbB8D+85FqQEs28Qx8hI4t5T0Kk5JDiP71HOlweZgOgL05YA1RHZpB/
vldAKRh0Su7Ee8SqkFkGNz77AY4sb25YvJ+fAsm6cg6AkLwWpizjEeqOu9ehU33K
T9fXS+6GB9h4TfPA+FA0ALGVpIeTY5S/sfmYUEeG3O3s3UbBDJvSpszsLX3uRYy9
ZEDj1GfxyZvowHdx4sQ3CurSOyK7mdr3cM54As2yCO23Pzle+xNGdsDRltTY7MjD
9lYANF6onHMNBzQ2WKXD2zXqQUSD0nv8AxUXcNKYo02zWoEMUg93S+2DKl4KIXOz
4QB6RnvCqT6l2IirXkjJSD6APXXVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwXjr
ZScxjmWQdrFz1OaBYzzvrdkwHwYDVR0jBBgwFoAUR/ufMc9PLRlxHITTLiO9AG4A
LpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNkM4LzgyQUExNTBBMjEwRTExRUNBNkY3Q0MxN0Q4QTAxNENFL1JfdWZN
YzlQTFJseEhJVFRMaU85QUc0QUxwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JfdWZNYzlQTFJseEhJVFRMaU85QUc0QUxwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM2QzgvODJBQTE1MEEyMTBFMTFFQ0E2RjdDQzE3RDhB
MDE0Q0UvUl91Zk1jOVBMUmx4SElUVExpTzlBRzRBTHBZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPDJEpKtvm3G1XLIAb/HG1SijW5YXl
ucEcCvpxhFeUncvUVf60CdSo3Px73yCxbnTjKs/FAqZNQHEYNX6pKB+gAA3wKfOL
yu+EAo4dmsLJmST48tzjfh4BFIT1XzmMfq8w7aXMTP8QmGkz9yUqyln6Kw+d6r2P
xhF6acrSHDjK/2RjJAVkLpU2sZMiKZSLiDsf7yzkq48TA3Crm5OWnkB6P6DMlFbN
KDjiFOpcis/UY9oNqB6Ccmx2tomZxKM0RlLpGpkvMXuMAiYRCTGdF8Yqb2QRtCHY
vSbEkDH9+lpbxXIw2BFfVbmFs3+KV7NZJZPgGwjDUoXeOonU8K+y3a0B
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:07 2025 by rpki-client