Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: UGHzaRPu+o77JrDd/sHdt090yHaAAhHic2fKqlE/5Q8=
Subject key identifier: AB:3B:B2:80:5E:7E:F9:CF:CC:E7:7D:54:FA:9D:1A:53:E7:B7:7E:19
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 01B8
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 01B7
Signing time: Sun 08 Jun 2025 04:27:30 +0000
Manifest this update: Sun 08 Jun 2025 04:27:30 +0000
Manifest next update: Tue 10 Jun 2025 04:27:30 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: WJgfaAv+PyGL2qXMNDDR6g8dlxWaXunLl0l7Mu7rn/E=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 10 Jun 2025 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440 (0x1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Jun 8 04:27:30 2025 GMT
Not After : Jun 10 04:27:30 2025 GMT
Subject: CN=68451132-3185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:31:29:5d:e7:14:75:c5:54:f0:47:79:12:
40:ef:44:3e:8f:f4:ba:ce:c4:05:22:35:b8:3b:0a:
15:81:7a:fa:12:04:9e:b2:1d:4a:79:30:f4:0b:b7:
a6:c0:32:1f:5e:a5:03:14:ca:31:b9:2d:22:3a:a8:
e7:d2:3e:6f:1d:d5:ba:ee:47:76:ac:de:b9:a1:6f:
55:09:7f:27:e8:76:1c:2c:7c:fb:e5:e7:5d:9d:de:
a6:12:f7:b7:e4:3b:16:9e:24:47:e4:7b:3a:8e:8f:
5b:da:20:2a:fc:ae:73:50:80:08:7c:df:e7:92:51:
09:b1:ff:5e:79:82:ba:4d:9a:ad:d5:55:28:3c:92:
84:07:ad:e0:90:2c:3f:af:93:34:25:37:2c:a7:21:
00:16:95:d1:23:18:9a:31:7e:0f:62:67:75:df:de:
5b:63:cf:8d:e0:9b:79:1e:6c:c5:8f:3a:d3:ff:70:
de:2b:ec:e6:53:96:70:e0:2a:f3:d9:f0:39:eb:27:
af:58:14:67:1a:89:e2:a2:b3:61:d9:36:11:cd:55:
2f:f2:c4:11:12:79:12:47:f0:86:19:6c:3e:00:27:
b0:a4:48:57:2d:72:07:fa:8b:c7:d2:88:06:24:d4:
64:88:c5:9a:58:f4:60:74:5c:b9:51:97:b0:aa:0e:
b3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:B2:80:5E:7E:F9:CF:CC:E7:7D:54:FA:9D:1A:53:E7:B7:7E:19
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:15:56:b7:20:7e:0d:b2:ed:66:45:30:00:70:5d:d6:93:18:
85:45:5e:a3:80:28:b9:55:6a:47:33:ea:4a:f4:66:32:2c:31:
21:b7:5d:f7:9e:d5:e4:95:7f:ff:f0:13:65:a7:74:2b:76:26:
92:e7:b1:35:a1:3e:39:d5:a5:c7:48:8a:25:00:33:52:9e:5a:
e9:af:f8:00:d6:11:b8:bd:73:f7:c3:a7:ac:1f:f0:64:57:4f:
54:94:bc:5a:d6:89:f2:0b:4d:b0:dd:60:e0:dd:69:dc:6c:3f:
23:3d:57:64:a4:12:56:63:0c:6a:ac:6b:84:8b:6b:9f:59:d6:
25:80:cc:87:bb:52:2d:0c:a5:d7:16:60:91:94:fd:06:32:d9:
ce:c2:3a:d3:32:19:18:22:8a:1a:cd:9d:d7:f5:3e:06:2a:1d:
fa:25:fe:fc:67:d5:71:5a:8b:22:1b:58:d4:e3:ab:28:80:2d:
eb:9c:85:30:bb:1e:77:d5:af:b0:cf:46:71:dc:01:a0:ad:56:
6d:e0:a4:37:76:12:2f:aa:87:d6:58:1e:9c:2d:70:7a:79:74:
68:4e:b1:14:17:08:dd:50:6a:5a:1b:56:19:11:a8:69:49:47:
f4:da:5c:01:00:02:cc:ba:4b:04:6d:62:ff:6a:6f:12:23:0b:
78:8f:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:48:15 2025 by rpki-client