Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
File: bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft (raw, json)
Hash identifier: feO1fuHwyj8D4/L+SZAA7KiFoMouPFKGuIWY0Gl8I4I=
Subject key identifier: 65:F4:53:9D:68:EE:ED:BF:58:08:14:FF:4B:08:A1:28:BD:80:54:80
Authority key identifier: 6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
Certificate issuer: /CN=F36C95F1AR/serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Certificate serial: 05AD
Authority info access: rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
Manifest number: 05AB
Signing time: Wed 11 Jun 2025 02:28:52 +0000
Manifest this update: Wed 11 Jun 2025 02:28:51 +0000
Manifest next update: Fri 13 Jun 2025 02:28:51 +0000
Files and hashes: 1: bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl (hash: X0FZ9nooCPMUCms60h7XAKOpW60/1UkbzPSusnjYyJs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Jun 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1453 (0x5ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C95F1AR, serialNumber=6C735075B286EE4AECBCC18103B606C40B76B4E4
Validity
Not Before: Jun 11 02:28:51 2025 GMT
Not After : Jun 13 02:28:51 2025 GMT
Subject: CN=6848e9e4-d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:09:e0:41:88:bb:3c:ab:3b:82:3e:8e:4b:
72:73:1e:3a:26:f2:87:04:d5:c9:4a:2e:66:2c:f1:
1a:80:c6:7b:da:d9:aa:37:cf:20:82:27:65:89:93:
ab:62:55:d6:2a:58:2f:2d:4d:ec:63:86:a7:9f:34:
23:c7:6a:b3:e7:90:02:2f:74:80:fa:70:d2:70:d6:
1b:cf:fe:ec:1e:56:6b:7f:c6:2e:d7:82:41:a0:7d:
b4:22:2a:b9:76:8c:6e:c7:49:78:69:fc:64:28:6a:
85:6b:57:bb:b2:9b:65:68:c4:b1:f6:95:31:e8:ec:
78:c9:c5:68:18:e0:32:6b:38:a5:5f:d5:11:3c:f4:
30:d9:bc:b5:26:f5:6b:d6:65:d7:6b:f4:50:a1:3a:
a4:bb:ec:c3:72:4e:a5:6f:03:27:d9:64:a2:c3:78:
b6:b9:78:cc:9b:d8:80:e6:38:d0:06:02:9a:76:e1:
86:cd:36:ad:26:16:8a:74:98:e9:5b:f7:21:36:17:
2e:6f:b7:d9:0a:75:cc:03:6e:60:04:00:58:9c:03:
10:6d:35:48:72:35:7d:8c:c0:81:9c:83:9b:26:69:
dc:c5:8b:83:e6:79:26:ad:3b:0a:dc:81:d1:cc:1b:
5e:c5:07:a7:80:9c:4a:8b:63:0e:ae:99:82:45:78:
c0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F4:53:9D:68:EE:ED:BF:58:08:14:FF:4B:08:A1:28:BD:80:54:80
X509v3 Authority Key Identifier:
keyid:6C:73:50:75:B2:86:EE:4A:EC:BC:C1:81:03:B6:06:C4:0B:76:B4:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bHNQdbKG7krsvMGBA7YGxAt2tOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/3AF0B674F39611EBB04CDA47D8A014CE/bHNQdbKG7krsvMGBA7YGxAt2tOQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:fe:0d:4a:a1:b3:28:19:eb:4e:c6:99:ef:12:32:01:aa:
17:ed:41:69:a8:7a:0e:85:68:cd:32:5e:ff:62:5b:f2:16:0e:
3c:76:fc:fe:71:6b:c7:ba:78:47:0b:ff:0e:6e:97:d2:fe:9d:
19:6c:34:b4:ae:a0:65:3d:c9:71:77:7c:74:78:fb:e5:66:0e:
b0:6e:48:80:a6:3c:f1:ce:a4:fd:4b:9b:d4:5e:b7:40:51:8f:
14:af:38:a3:d2:03:9d:3e:47:d1:ee:27:db:51:69:42:7a:40:
de:fa:e1:32:8b:54:08:2b:e6:d0:b9:f9:2a:03:31:26:9f:91:
dc:e3:24:34:80:89:f5:da:ce:d4:eb:4e:2e:25:a2:95:a7:9e:
80:50:58:14:5f:ae:89:23:ac:e6:62:e0:68:60:88:d6:46:31:
6a:05:f5:83:6a:ab:79:c4:b1:51:37:4d:ed:9a:0f:69:58:09:
e5:06:17:27:cb:1d:7d:81:1d:06:65:dd:12:f0:31:04:a9:55:
dc:fe:9d:60:9c:9d:e3:79:bd:02:e9:73:d4:28:a7:a0:43:7b:
22:ce:f8:b5:69:25:83:e6:bb:c0:d7:7f:d4:92:6f:c7:1f:b3:
ec:35:60:e0:15:10:e5:10:58:b1:aa:02:d0:51:88:cf:39:72:
d1:06:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:08:57 2025 by rpki-client