Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File: 4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier: 1rWCV61PWSP9IYSy59HnwcgghE+pkkE/Z6+eb1tImrA=
Subject key identifier: D3:EC:83:F0:31:81:43:16:F4:9A:EC:65:52:FA:2E:CE:2D:62:D2:E2
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer: /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial: 0187
Authority info access: rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number: 0186
Signing time: Sun 20 Apr 2025 04:27:00 +0000
Manifest this update: Sun 20 Apr 2025 04:26:59 +0000
Manifest next update: Tue 22 Apr 2025 04:26:59 +0000
Files and hashes: 1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: oT9RyxXu5m3PbhNAoZgZzRsE5YknwzY0PK5DbZRBcRc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 22 Apr 2025 04:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 391 (0x187)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DBC4BAR, serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Validity
Not Before: Apr 20 04:26:59 2025 GMT
Not After : Apr 22 04:26:59 2025 GMT
Subject: CN=68047794-5750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:e0:81:de:66:5f:79:7f:46:b7:1b:ea:9f:
2f:b9:9c:93:be:16:87:53:c7:7b:e7:50:b2:ab:ae:
96:60:db:77:10:a0:18:d7:a6:2f:72:50:46:8c:55:
1d:40:d8:57:02:cb:34:cc:4c:1b:02:74:5a:34:d7:
d4:8e:4c:c5:67:25:b2:7c:e0:e3:65:39:18:67:80:
ca:4d:3e:eb:8b:4b:64:a6:6e:76:ff:a6:4f:2d:a1:
b6:77:d3:ca:95:2c:4d:66:84:9b:73:52:a6:b7:43:
aa:c5:6f:10:8d:1c:d9:50:11:cf:90:5f:aa:4e:0a:
c0:5f:ab:7a:21:bb:e7:ca:27:53:9e:51:a0:a5:a5:
2f:ad:d5:b6:e9:76:ea:30:48:6c:6e:c3:f8:b6:b4:
59:f0:d3:3d:ea:b1:c0:30:60:7b:57:e3:68:4c:0f:
e1:8f:81:e4:8d:d2:48:02:80:36:9f:74:4e:da:d3:
21:d4:68:31:6c:e8:6a:d7:fa:b9:75:a7:ca:f5:93:
3e:3f:b2:4f:37:18:96:0b:8c:ce:a2:27:85:54:a5:
90:70:3a:33:ae:4a:a9:e1:40:e4:f0:e6:73:d0:3b:
28:a3:5b:7f:b0:3d:ea:b2:e6:60:3a:f8:11:ea:d6:
07:10:15:0a:43:8c:7b:90:92:8b:34:c0:69:ce:bf:
50:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EC:83:F0:31:81:43:16:F4:9A:EC:65:52:FA:2E:CE:2D:62:D2:E2
X509v3 Authority Key Identifier:
keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:f0:cf:0e:f9:b5:1a:8e:ce:7f:a9:77:c5:ba:cc:50:d1:
ff:d0:1b:1c:01:71:32:46:07:65:5a:62:f5:fc:1d:e5:c6:e3:
0c:45:3e:3f:0a:f1:43:08:cc:90:68:aa:18:cd:f9:74:0d:de:
5a:50:72:4e:75:1c:08:fe:09:65:42:d8:b9:bd:26:47:77:b9:
29:d9:e7:af:6b:62:67:86:93:f4:29:63:5b:c3:bb:d5:dd:88:
dd:11:a2:94:21:9d:f5:e6:0c:e5:e0:c0:55:65:a8:a0:0b:5e:
87:7e:b7:30:7e:70:a6:b0:21:70:89:6b:3b:bf:3e:f3:47:f1:
1b:09:db:fb:db:ba:d2:8b:91:d7:5d:5f:97:b7:df:3c:e8:83:
84:af:b2:1b:d7:34:1f:f7:ca:a9:d9:bb:0c:5e:37:ed:ea:75:
16:2c:c7:cb:a0:44:0c:bb:2c:0a:50:2a:44:46:1f:24:7f:79:
59:26:fb:25:78:f9:04:a4:d4:bc:11:90:17:c2:69:22:21:83:
a1:49:ce:3f:4a:1c:17:2e:3a:3e:fd:41:d7:8e:f0:d1:8c:d7:
f0:1f:09:0b:62:20:77:de:a9:a6:b8:b2:d7:91:6a:40:14:38:
90:af:60:46:41:2a:55:d1:5f:b1:06:6f:f4:c6:b1:fa:8b:7e:
c4:c1:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:55 2025 by rpki-client