Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File: IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier: tqbaGgcT53lvZ1OhloNGZ+YFlJkraxgxKwjB1TAPTzE=
Subject key identifier: 18:97:05:13:78:50:AC:8F:31:47:06:DE:22:D2:BF:99:45:05:23:77
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer: /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial: D6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number: D5
Signing time: Sat 07 Jun 2025 05:04:29 +0000
Manifest this update: Sat 07 Jun 2025 05:04:28 +0000
Manifest next update: Mon 09 Jun 2025 05:04:28 +0000
Files and hashes: 1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: v9wIKKbr4KNyYoyaTNQufoA2tmktjmzTS3SovvEs7VE=)
2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Jun 2025 05:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214 (0xd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Validity
Not Before: Jun 7 05:04:28 2025 GMT
Not After : Jun 9 05:04:28 2025 GMT
Subject: CN=6843c85d-acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:8a:2b:d1:36:cd:49:76:a6:ca:d5:16:78:
a5:9e:bf:85:30:c9:8b:83:db:27:19:99:4f:18:c7:
19:26:f2:3e:a0:cc:5d:23:ca:63:92:fa:8f:b1:5f:
6e:12:6c:95:b6:a4:f1:52:28:95:a2:a5:eb:bf:b4:
5d:94:8c:62:c7:84:07:f1:01:6e:32:c4:16:34:d3:
1a:e8:1f:d9:b0:22:13:fa:e8:ee:cb:f4:20:1b:cc:
eb:3e:e8:81:09:af:01:15:1b:01:cf:a0:b3:73:35:
06:76:3f:92:67:4e:b8:9f:e4:56:7b:96:d9:06:dd:
2c:d3:ff:69:20:2c:a8:c9:7e:77:07:25:86:1e:90:
98:f2:fd:7c:9d:ba:39:15:76:fb:f9:3a:7c:a5:b9:
33:55:90:b4:a0:5e:6c:db:52:7e:84:72:46:d7:91:
4b:e1:a5:1d:7e:a1:2d:7a:db:11:65:61:76:9f:9c:
a3:a1:83:8a:cd:f4:bf:ae:53:d9:c9:f1:33:f1:37:
c6:4c:22:95:6d:7e:26:af:dd:bc:6c:7b:31:17:de:
c1:56:06:32:44:07:67:b9:87:51:9f:83:b7:b5:59:
b6:69:c0:8d:ce:f4:3b:0a:3f:36:cc:57:bf:2c:3b:
c9:0c:5a:23:3f:16:d8:85:a0:eb:f8:91:cd:06:d7:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:97:05:13:78:50:AC:8F:31:47:06:DE:22:D2:BF:99:45:05:23:77
X509v3 Authority Key Identifier:
keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ac:e8:9e:ed:a8:2b:c0:70:11:b0:3a:cf:25:21:1a:55:f0:
26:d1:5d:16:8f:4a:81:7e:55:7e:7c:a5:b5:6f:a2:13:bc:f0:
b0:98:97:8e:6a:c3:a5:3b:da:1e:dd:84:bf:71:9d:81:e9:b8:
d5:37:05:9d:5f:28:28:63:e1:66:6a:71:40:36:33:1f:8f:f3:
55:c7:62:0b:a0:2c:0b:8c:32:79:f1:ec:b2:ed:b0:cf:09:91:
8b:8d:ca:3c:8f:62:a3:61:df:ef:ac:c0:fc:f7:d9:1d:e1:8d:
53:05:2d:f9:e1:5b:f7:7f:91:64:5d:57:52:78:d0:59:87:8b:
b6:5c:2a:e9:55:94:83:f8:71:b7:1f:8c:e4:e3:06:36:ac:7e:
d6:2c:fd:3e:2a:03:75:70:8d:da:e7:b2:98:17:e0:81:ad:1c:
cb:99:52:9d:2c:32:db:a8:78:ce:79:cf:31:6b:eb:8f:ab:87:
6d:eb:5a:9f:57:54:37:66:44:c5:46:5a:2b:fc:0e:18:a1:d3:
66:29:76:f8:9f:82:9b:0e:4a:5e:6c:1e:5f:fe:5b:3a:e4:0a:
b9:8d:89:11:8a:81:24:d5:7c:c5:b7:b1:43:1e:86:9c:37:6b:
7b:30:2d:a8:0b:96:5c:78:65:26:4d:b2:7f:c6:f3:b0:1d:0f:
78:6d:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:31:14 2025 by rpki-client