Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File: imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier: 7z0m8B7JtPMNXDQWWybLc7MuixuBriyD1y8Nq136TVc=
Subject key identifier: 60:FA:66:E7:E8:9D:3D:8A:C0:3B:E6:18:81:0A:95:8B:F3:73:D3:AF
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer: /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial: 0DF0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number: 0DF0
Signing time: Tue 08 Apr 2025 00:54:43 +0000
Manifest this update: Tue 08 Apr 2025 00:54:43 +0000
Manifest next update: Thu 10 Apr 2025 00:54:43 +0000
Files and hashes: 1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: rP9Rh3ewLHrpQy8Bm+zRbfz7AUTCGfJSrCF9byILbPs=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 10 Apr 2025 00:06:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36CAF37AF
Validity
Not Before: Apr 8 00:54:43 2025 GMT
Not After : Apr 10 00:54:43 2025 GMT
Subject: CN=67f473d3-2d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f8:dd:51:f8:a4:1f:96:d1:a2:69:f3:49:26:
cb:f3:13:8e:4d:99:aa:ec:6c:3f:8a:b0:ae:11:3b:
d8:eb:3d:39:28:81:9f:f9:b6:3f:0a:84:40:a3:55:
7a:e4:5b:e9:a2:2c:7c:14:4c:c2:68:92:7b:f4:9a:
8e:73:c0:53:d0:9e:75:76:06:5b:ec:bd:5a:02:18:
09:70:2d:5d:6a:1d:4f:91:cd:83:9f:72:1e:97:7f:
7a:93:78:b3:94:94:c7:f7:06:8d:ae:75:34:fe:d0:
db:f1:3a:a8:43:23:9f:23:3d:8f:2d:6f:4e:0b:48:
a8:b6:63:cd:44:c9:47:9a:33:a3:e6:00:97:b4:aa:
29:a3:a8:63:7c:7f:80:c5:f0:af:e3:34:c2:f6:d7:
a2:2a:af:01:b0:e9:49:3c:65:42:3b:dc:87:34:2b:
87:03:16:05:92:6a:94:70:03:1c:51:61:33:d3:03:
9e:ae:0a:36:5f:b1:76:e7:17:3a:49:9b:36:e0:f4:
b4:cd:ba:c1:b3:5c:f5:3f:93:1f:cc:94:12:77:13:
02:c7:96:43:c7:63:2a:81:5b:1a:3d:eb:56:e5:28:
a5:7d:07:7e:32:de:91:b7:5a:81:b4:86:8f:bc:9a:
46:ae:ee:4b:04:75:70:06:b4:45:1d:f4:47:96:ae:
6c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:66:E7:E8:9D:3D:8A:C0:3B:E6:18:81:0A:95:8B:F3:73:D3:AF
X509v3 Authority Key Identifier:
keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4a:fc:f1:45:1b:93:19:f9:2b:80:ce:53:cd:93:72:02:d8:7f:
54:ce:8e:92:2e:21:30:60:48:1d:ba:dd:26:49:a1:4f:34:a7:
b6:42:58:e9:a7:87:b2:3a:43:b4:2b:f5:a9:f4:47:0b:0a:d1:
7d:e7:11:e3:3c:f2:64:c0:d1:fa:d0:c8:71:ee:09:b9:3b:25:
85:9a:02:2e:b4:56:6b:d2:52:36:1b:af:77:c3:df:52:95:c1:
72:b8:bf:31:ce:50:e8:65:1f:6c:c3:6a:1f:d0:04:33:44:3d:
85:47:23:a8:f2:47:37:76:64:34:e4:44:ea:a1:8e:63:81:25:
99:bf:ab:55:72:00:40:3e:7e:e5:81:83:57:30:13:bf:a1:d8:
58:62:0d:67:f3:df:e4:e8:4f:6b:84:43:53:c8:fb:76:85:1c:
ac:16:05:af:7e:1a:29:99:e0:9d:3e:2a:3a:4e:c8:2b:cb:4f:
78:5c:34:97:27:ea:2c:89:00:32:32:0a:94:4f:e6:2d:85:c7:
ea:c3:e1:92:d7:1b:42:da:e2:e8:66:77:a9:1b:42:74:3f:d2:
16:c7:bf:80:2b:b1:66:6d:6e:ca:98:d6:ca:cb:6c:54:51:03:
fd:02:a3:7b:94:f1:ce:05:09:3d:23:0a:cb:01:6e:a4:d1:94:
7a:4b:90:b3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDfAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FGMzdBRjExMC8GA1UEBRMoOEE2OUUzMTM5QkQ3RUZDMDgwQTQyRTE2MDQ4MzM5
OEZBNkM3NUJCNjAeFw0yNTA0MDgwMDU0NDNaFw0yNTA0MTAwMDU0NDNaMBgxFjAU
BgNVBAMTDTY3ZjQ3M2QzLTJkMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDV+N1R+KQfltGiafNJJsvzE45NmarsbD+KsK4RO9jrPTkogZ/5tj8KhECj
VXrkW+miLHwUTMJoknv0mo5zwFPQnnV2BlvsvVoCGAlwLV1qHU+RzYOfch6Xf3qT
eLOUlMf3Bo2udTT+0NvxOqhDI58jPY8tb04LSKi2Y81EyUeaM6PmAJe0qimjqGN8
f4DF8K/jNML216IqrwGw6Uk8ZUI73Ic0K4cDFgWSapRwAxxRYTPTA56uCjZfsXbn
FzpJmzbg9LTNusGzXPU/kx/MlBJ3EwLHlkPHYyqBWxo961blKKV9B34y3pG3WoG0
ho+8mkau7ksEdXAGtEUd9EeWrmwJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYPpm
5+idPYrAO+YYgQqVi/Nz068wHwYDVR0jBBgwFoAUimnjE5vX78CApC4WBIM5j6bH
W7YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRjM3LzQyNkEwQUQ2NTg2RjExRTVBMzI3NjIzMUY4QUVBMjI4L2ltbmpF
NXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ltbmpFNXZYNzhDQXBDNFdCSU01ajZiSFc3WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FGMzcvNDI2QTBBRDY1ODZGMTFFNUEzMjc2MjMxRjhB
RUEyMjgvaW1uakU1dlg3OENBcEM0V0JJTTVqNmJIVzdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK/PFFG5MZ+SuAzlPNk3IC2H9Uzo6S
LiEwYEgdut0mSaFPNKe2Qljpp4eyOkO0K/Wp9EcLCtF95xHjPPJkwNH60Mhx7gm5
OyWFmgIutFZr0lI2G693w99SlcFyuL8xzlDoZR9sw2of0AQzRD2FRyOo8kc3dmQ0
5ETqoY5jgSWZv6tVcgBAPn7lgYNXMBO/odhYYg1n89/k6E9rhENTyPt2hRysFgWv
fhopmeCdPio6Tsgry094XDSXJ+osiQAyMgqUT+Ythcfqw+GS1xtC2uLoZnepG0J0
P9IWx7+AK7FmbW7KmNbKy2xUUQP9AqN7lPHOBQk9IwrLAW6k0ZR6S5Cz
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:13:11 2025 by rpki-client