
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File: CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier: y0qwlUKNB6IKxtX9Ac7+/txSogIMzg+xzqe3lR49Q+E=
Subject key identifier: C0:47:92:3B:E9:4C:61:7E:DF:B7:1E:82:C3:F6:91:D4:29:FC:7A:A0
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer: /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial: 03C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number: 03C6
Signing time: Wed 04 Jun 2025 03:18:48 +0000
Manifest this update: Wed 04 Jun 2025 03:18:48 +0000
Manifest next update: Fri 06 Jun 2025 03:18:47 +0000
Files and hashes: 1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: a1cr+59w5Ulq4V3BFOPAl0FUKDyVBnQvVBNcgmQ6yVw=)
2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 967 (0x3c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Validity
Not Before: Jun 4 03:18:48 2025 GMT
Not After : Jun 6 03:18:47 2025 GMT
Subject: CN=683fbb18-4739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:e6:06:51:d6:94:b2:de:f5:22:29:bd:e8:
75:e0:08:05:15:63:c7:e4:8b:85:70:fd:16:2a:41:
79:06:49:5e:d4:84:e5:47:30:d2:d3:94:c9:a9:f5:
31:de:42:b4:08:54:05:df:f9:f9:84:7e:a2:83:de:
e8:69:ff:93:12:88:16:a8:15:a2:a4:c7:df:7c:03:
38:50:f9:df:fe:09:e5:05:47:be:3f:0a:e2:20:89:
80:1c:fc:ac:ac:9e:e4:e9:9b:c0:59:e9:ab:c0:f4:
b1:b0:44:9c:14:9c:b5:cb:e9:1a:c1:ac:e6:6d:fe:
f3:b5:e6:94:94:22:4d:e4:2d:4b:ba:57:02:06:a7:
82:04:11:c5:d8:7a:66:9f:e3:4a:ce:e0:ca:80:07:
5a:a9:d0:8e:7b:05:76:d7:cd:ab:50:dc:5a:72:db:
96:4b:40:2f:70:d9:eb:54:69:27:44:7a:2e:35:aa:
03:9c:08:3b:ed:2e:43:7b:ab:07:c1:a2:c7:ab:6d:
1f:9a:a1:08:49:37:18:51:34:11:80:71:84:78:50:
6b:a5:71:4a:50:d0:03:c9:90:a4:b6:fe:1b:aa:0e:
63:3d:67:b5:65:d4:06:3b:e0:30:dd:47:04:3a:ac:
9d:a9:5e:2a:2d:d4:32:dd:3b:4d:e1:63:83:5e:3c:
6b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:92:3B:E9:4C:61:7E:DF:B7:1E:82:C3:F6:91:D4:29:FC:7A:A0
X509v3 Authority Key Identifier:
keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:45:6d:c4:33:df:e6:d0:1b:9a:58:ae:0a:ad:30:e7:a7:f2:
66:51:f6:95:6f:e2:35:cf:6e:f9:3f:9e:82:9a:ab:b0:97:a0:
62:08:99:71:d1:8b:79:82:01:57:6f:bf:e5:3c:1c:25:f5:19:
eb:d6:19:52:fe:87:cb:87:7e:d2:fa:fc:bd:78:de:b9:9c:b2:
9f:28:5f:35:c4:b0:42:6c:46:ed:0f:45:6d:71:01:94:d5:b7:
28:06:13:28:e5:b7:da:1c:9c:af:e3:af:2c:67:d9:0f:16:13:
43:bb:37:5c:9c:94:08:b1:b6:fb:4f:36:8b:99:8a:98:2c:69:
fd:9f:be:ed:82:74:5f:fd:c3:e2:a1:a1:01:8a:65:04:2f:43:
cf:71:bd:f4:85:26:f5:38:83:85:3c:a4:fb:ee:fd:be:e1:fc:
9f:b3:e2:4a:42:b5:af:59:0c:aa:46:73:90:49:ba:c3:bd:39:
93:96:c3:11:c1:28:b5:32:72:18:8f:ff:e6:8a:e3:9e:54:12:
e0:df:4c:f4:fe:45:e9:d6:96:9a:8a:6a:1d:bf:f6:1f:19:61:
c2:e6:29:fc:db:0b:00:03:fe:1c:7e:fb:fc:a3:d2:45:27:24:
96:b7:1a:5f:64:2b:17:df:1e:f1:53:d3:74:07:1b:3a:fb:4e:
eb:7d:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:12:57 2025 by rpki-client