Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
File: avc50Bd3BoQ35SESTux6ZtiYCW8.mft (raw, json)
Hash identifier: 7DgWo/QxGgIiRmw9uG1D0DIDQiEGTTZ/wpq92OUamz4=
Subject key identifier: BB:C8:B0:A4:AE:A2:A0:8C:DC:07:D5:68:62:80:E8:F6:13:0A:25:3C
Authority key identifier: 6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
Certificate issuer: /CN=F36BA57FAF/serialNumber=6AF739D01777068437E521124EEC7A66D898096F
Certificate serial: A6
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
Manifest number: A5
Signing time: Thu 13 Mar 2025 03:18:27 +0000
Manifest this update: Thu 13 Mar 2025 03:18:26 +0000
Manifest next update: Sat 15 Mar 2025 03:18:26 +0000
Files and hashes: 1: avc50Bd3BoQ35SESTux6ZtiYCW8.crl (hash: //zndEThpl4D9cSMLfpLuQRQaj+N3P5a/rwI35A280w=)
2: 9CBCEE06857C11EF9C88A445762E951A.roa (hash: LUsLFkZOS70t3FhGjAlxHf+8d7Gfxjit3yut3LdzsB0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166 (0xa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA57FAF
Validity
Not Before: Mar 13 03:18:26 2025 GMT
Not After : Mar 15 03:18:26 2025 GMT
Subject: CN=67d24e83-0c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:27:f6:cd:e9:0b:93:ed:34:66:0d:ea:95:
f3:8d:bd:c7:66:7f:1d:56:47:3a:83:08:45:b2:79:
8b:26:fe:f6:e7:f7:7e:f1:d8:12:4f:ed:15:0b:73:
cc:6b:f7:b2:ff:65:ff:c9:e0:d1:88:7c:10:11:40:
44:a8:09:82:07:16:4b:bf:34:73:3c:9c:4a:17:f3:
2c:25:4d:95:de:15:ff:24:95:8b:f2:94:cf:9c:0c:
b6:fa:ff:fe:4c:30:41:b4:5d:df:9a:0d:cd:49:09:
88:ec:55:aa:55:60:ae:5f:b4:3c:4e:ae:0a:5f:10:
1b:be:ec:ba:02:b0:26:d5:f8:f8:09:be:ca:c9:ae:
90:19:5e:fa:7f:e7:e2:8f:00:5d:51:45:a1:43:1d:
65:c4:d5:ed:07:8e:21:ac:82:2d:df:f7:29:eb:e7:
5a:75:8e:2e:02:98:79:45:c9:dc:a1:8f:0f:19:ab:
8b:1b:31:cd:ef:8b:46:04:cc:cf:29:91:9c:db:c8:
f3:f8:0b:27:ef:0c:23:2d:63:be:fc:0c:d0:1c:cc:
79:8e:7a:13:71:76:9f:c0:8a:fc:df:8a:3a:5e:10:
82:00:2f:00:a7:07:00:30:96:c3:79:55:b0:be:c9:
c4:60:1c:35:c1:0e:e6:03:25:b3:a1:c6:36:74:ca:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C8:B0:A4:AE:A2:A0:8C:DC:07:D5:68:62:80:E8:F6:13:0A:25:3C
X509v3 Authority Key Identifier:
keyid:6A:F7:39:D0:17:77:06:84:37:E5:21:12:4E:EC:7A:66:D8:98:09:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/avc50Bd3BoQ35SESTux6ZtiYCW8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA57F/2D8FC3C4857B11EFB64467BB762E951A/avc50Bd3BoQ35SESTux6ZtiYCW8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:24:a6:83:94:26:30:99:01:cb:02:41:6f:66:47:eb:36:13:
61:fb:c6:67:3e:81:10:0b:4b:fc:87:31:eb:ba:77:56:a8:b3:
13:c6:1a:a8:41:bf:16:6d:ff:8d:58:c5:93:a8:80:6d:dc:0a:
77:58:b7:42:ff:45:83:05:f3:0a:ca:71:dd:b4:0a:2e:e5:53:
36:3e:a8:f3:38:b7:df:08:34:2f:3f:b4:9a:60:d5:97:c7:a5:
61:c0:d0:e5:90:8c:d7:31:8f:c0:f5:ed:43:7d:ef:32:bb:f0:
dc:58:b0:d9:f8:f6:70:51:f1:3c:68:13:03:a7:03:46:91:97:
68:58:b2:b5:dd:67:e8:99:fe:ae:92:d0:39:0c:40:fd:78:f2:
65:23:6f:7c:b7:f5:e3:0b:f2:d4:03:67:b1:83:11:0b:5c:8c:
35:68:26:f2:dc:6f:90:10:da:93:e9:0d:85:3f:c5:e3:4b:e4:
d6:c9:01:40:75:a1:93:00:ba:29:6e:38:bf:31:ba:0c:6d:82:
ae:a3:ce:a7:02:b7:6b:4c:65:13:fb:9e:7e:00:44:a8:52:b5:
ea:b3:ad:75:90:bb:af:d0:21:8e:b3:53:9f:47:8f:5d:fe:54:
f2:7c:49:13:8c:1b:2f:dd:9a:8b:fd:34:0a:67:bc:0c:3e:b6:
6d:c5:0a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:34:15 2025 by rpki-client