Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
File: NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft (raw, json)
Hash identifier: tDCtaqo9OZCi6FHe6TJiZKZXiG4G+AZmRm1+dcP82TA=
Subject key identifier: C2:83:6D:2A:97:7E:46:D3:C4:B1:AE:65:92:38:15:88:89:4B:56:22
Authority key identifier: 36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
Certificate issuer: /CN=F36C6DD4AF/serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Certificate serial: 06C8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
Manifest number: 06C5
Signing time: Wed 04 Jun 2025 02:01:41 +0000
Manifest this update: Wed 04 Jun 2025 02:01:41 +0000
Manifest next update: Fri 06 Jun 2025 02:01:41 +0000
Files and hashes: 1: NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl (hash: xJ17Xd27oK9vz+DjWIzq/HcpaIlnZ6BeN7X+AHrVc9I=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1736 (0x6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C6DD4AF, serialNumber=36F7572A02E83F07BD81B7AE4266136ED56FA050
Validity
Not Before: Jun 4 02:01:41 2025 GMT
Not After : Jun 6 02:01:41 2025 GMT
Subject: CN=683fa905-916f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:10:c8:d0:d9:99:23:a2:8b:bd:2c:79:ad:
68:74:e0:15:ce:79:d8:18:23:3a:a6:a3:29:88:44:
cd:45:e9:d9:ff:b8:eb:19:34:41:2f:dc:2b:af:42:
23:8e:48:e3:de:81:dc:9e:82:5f:a4:d8:6e:1e:35:
4b:11:3e:69:80:6a:f3:50:6f:d6:21:9a:2a:91:3d:
3b:b9:37:d2:e4:7c:62:f3:a1:11:bb:3d:a2:a0:93:
32:72:d2:ad:f0:4b:6a:88:b1:a4:5d:5d:e4:b1:d5:
50:1a:37:8f:79:5f:ea:3d:25:82:f5:56:d7:9d:29:
2e:1e:7d:3f:96:c6:98:b8:34:8e:a7:3c:20:fa:79:
e5:1b:4c:4e:36:c4:cf:49:d3:c8:cc:d2:2c:d2:43:
9d:72:97:f7:fe:7b:7d:3a:71:cf:da:29:90:b3:80:
9b:3f:1c:b6:53:46:1e:2a:10:b5:c3:f6:28:30:eb:
51:b5:75:de:42:31:1b:64:71:8e:b8:fe:c4:52:ee:
f9:ac:e1:de:99:8b:b1:31:fa:ad:aa:d4:62:53:c6:
00:61:c4:fe:d8:5c:80:b5:d8:d6:86:ba:78:11:88:
0f:ac:40:70:ef:58:00:93:c3:f9:be:a9:cb:2c:27:
cc:42:6d:f4:eb:7e:07:0c:c2:67:51:33:3d:23:07:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:6D:2A:97:7E:46:D3:C4:B1:AE:65:92:38:15:88:89:4B:56:22
X509v3 Authority Key Identifier:
keyid:36:F7:57:2A:02:E8:3F:07:BD:81:B7:AE:42:66:13:6E:D5:6F:A0:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NvdXKgLoPwe9gbeuQmYTbtVvoFA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6DD4/A2D1F516125811EB984DCF79F8AEA228/NvdXKgLoPwe9gbeuQmYTbtVvoFA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:10:37:a5:7e:e6:82:f9:f9:37:85:e5:4a:9a:09:8b:cd:14:
9d:4e:d5:bc:1d:d9:fa:8d:21:8f:5e:2a:35:68:8b:da:af:b8:
e2:0e:1c:a4:ff:15:a4:07:51:57:91:cf:32:58:30:af:bc:f3:
1a:e6:e1:a6:44:10:60:74:e6:8d:1d:1a:e3:78:dd:79:3b:c5:
8c:fb:7c:6f:fe:b5:ce:8d:60:97:f7:a3:e0:64:5c:22:0f:7e:
a7:e5:4c:cb:f0:47:13:5c:9b:38:9c:56:85:0d:47:31:2b:3c:
de:f6:2a:11:f4:25:98:fe:28:c7:f4:17:2e:95:9e:3b:ae:c6:
aa:38:78:a6:43:59:d6:2c:b5:51:73:69:18:8b:07:8b:02:71:
bc:2e:d5:f1:b6:06:6a:37:98:57:39:b7:99:33:96:62:95:30:
30:c7:dc:6b:66:5f:77:73:cd:1d:32:1b:71:90:32:61:15:f8:
a3:91:88:e9:ec:1e:d4:51:b5:e9:d8:17:4b:dd:a7:8e:1d:eb:
d5:e8:10:b1:20:c5:49:e7:eb:35:d1:30:14:2f:14:0c:cc:56:
85:39:c6:9d:c3:2e:6e:7f:47:97:48:19:c3:37:db:8f:c9:c3:
d3:17:34:84:34:36:93:1f:7f:56:f5:5b:b5:4e:a8:f7:f5:a9:
aa:e3:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:37:37 2025 by rpki-client