Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: yFEPoxpz7uoRbWYrPQD+X0Opk7RzmbPYF92Fs13Oh+0=
Subject key identifier: 95:99:85:28:CF:D9:9A:37:9A:E0:76:1A:D4:82:92:A8:18:65:D4:3B
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 02E0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 02DE
Signing time: Thu 13 Mar 2025 02:27:22 +0000
Manifest this update: Thu 13 Mar 2025 02:27:21 +0000
Manifest next update: Sat 15 Mar 2025 02:27:21 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: JOB8z59mBcg5j/NEtrTTRvBNQxQOxoExZB8BKGoQhDU=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 15 Mar 2025 00:05:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 736 (0x2e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF
Validity
Not Before: Mar 13 02:27:21 2025 GMT
Not After : Mar 15 02:27:21 2025 GMT
Subject: CN=67d2428a-a79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:2f:8e:47:d5:60:1e:92:e8:53:cf:cf:96:
cb:77:2f:ce:4d:5d:29:66:4b:e5:92:2f:be:7f:56:
cd:5b:61:eb:fa:d2:7a:ea:6e:ef:3a:f5:c6:d1:f2:
d1:9d:06:41:22:e4:d4:e2:23:38:95:24:29:51:67:
07:df:d7:10:12:d0:59:a7:2a:09:ec:59:1e:b5:40:
cf:5d:31:8a:7d:95:09:bc:82:c3:60:5a:0e:b1:71:
8a:dc:6c:9b:ce:90:6f:73:ab:83:a7:3c:a9:d7:69:
28:83:f2:02:04:ff:c1:14:da:67:fa:60:90:47:8e:
43:fd:ce:d8:01:71:8c:37:39:09:f6:8f:43:51:d1:
56:5d:2b:72:6c:f7:2e:fa:94:00:2a:9e:57:02:74:
48:be:ea:da:55:2a:2e:50:23:fb:b9:7c:7a:7b:5e:
2a:de:09:80:c7:95:54:b2:10:ae:47:07:f6:2f:1a:
2e:0c:46:2d:94:b3:79:00:d8:de:79:82:2b:39:fc:
f5:61:3d:ed:8d:e5:b8:81:74:0d:6b:39:f5:b5:e1:
24:70:99:30:11:fb:60:8e:f7:20:bd:da:81:77:f4:
6a:ee:f3:37:c0:0a:4d:4e:55:dd:10:b4:5c:39:31:
6b:1a:ef:69:1c:89:b3:32:1f:97:5c:eb:f5:44:1b:
d2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:85:28:CF:D9:9A:37:9A:E0:76:1A:D4:82:92:A8:18:65:D4:3B
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:42:98:d8:26:61:67:e0:47:4c:03:be:95:c8:9a:f7:78:37:
ae:38:a8:ea:d4:06:fe:e8:a1:59:d5:59:1f:83:10:47:64:28:
c0:7f:56:b3:f6:c2:40:cc:f4:b5:0d:5a:f2:2e:a3:40:74:52:
18:af:85:10:cc:38:db:a9:8d:f5:92:4a:36:10:9d:b7:ad:ae:
e4:5e:7c:99:89:d6:92:0b:25:67:32:36:5c:7e:36:3a:aa:97:
fe:0f:95:e6:32:65:96:f4:4e:d3:fb:5a:d0:fc:d3:ff:c6:c8:
ff:88:a5:94:4b:ed:5e:f5:4c:08:6a:29:af:9c:28:80:bf:d7:
ba:39:76:8e:8c:21:8a:77:99:7c:20:53:0f:56:a7:4f:d6:b9:
de:71:11:8a:35:d3:df:85:1b:fa:25:99:1c:f1:75:31:33:af:
4f:c2:17:1c:0e:55:80:1f:53:81:d6:d3:18:c4:86:ca:4b:88:
d7:80:ce:c2:e2:a2:01:77:a4:7b:77:d7:ef:24:d8:41:ba:29:
4d:79:1c:bf:e1:2d:1f:a2:32:79:88:19:7f:45:7d:ba:5a:36:
c3:35:6e:3c:34:91:30:1d:ca:46:3e:12:b5:d3:49:bc:d3:37:
de:25:03:4d:ad:bf:cd:da:d6:73:97:37:11:93:69:c4:9e:17:
d2:96:2e:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAuAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REQwMEZBRjExMC8GA1UEBRMoMjBDODEzMDdENDE1NEExNTc5QzAwNDA5MDAyMzAw
NjgyNTk1QkQzNTAeFw0yNTAzMTMwMjI3MjFaFw0yNTAzMTUwMjI3MjFaMBgxFjAU
BgNVBAMTDTY3ZDI0MjhhLWE3OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDS7i+OR9VgHpLoU8/Plst3L85NXSlmS+WSL75/Vs1bYev60nrqbu869cbR
8tGdBkEi5NTiIziVJClRZwff1xAS0FmnKgnsWR61QM9dMYp9lQm8gsNgWg6xcYrc
bJvOkG9zq4OnPKnXaSiD8gIE/8EU2mf6YJBHjkP9ztgBcYw3OQn2j0NR0VZdK3Js
9y76lAAqnlcCdEi+6tpVKi5QI/u5fHp7XireCYDHlVSyEK5HB/YvGi4MRi2Us3kA
2N55gis5/PVhPe2N5biBdA1rOfW14SRwmTAR+2CO9yC92oF39Gru8zfACk1OVd0Q
tFw5MWsa72kcibMyH5dc6/VEG9JDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlZmF
KM/Zmjea4HYa1IKSqBhl1DswHwYDVR0jBBgwFoAUIMgTB9QVShV5wAQJACMAaCWV
vTUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkREMDBGLzZDQzgzM0IyRDY2NTExRUQ4Q0E1NzNCMEYxMjIyNDY4L0lNZ1RC
OVFWU2hWNXdBUUpBQ01BYUNXVnZUVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0lNZ1RCOVFWU2hWNXdBUUpBQ01BYUNXVnZUVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REQwMEYvNkNDODMzQjJENjY1MTFFRDhDQTU3M0IwRjEy
MjI0NjgvSU1nVEI5UVZTaFY1d0FRSkFDTUFhQ1dWdlRVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfQpjYJmFn4EdMA76VyJr3eDeuOKjq
1Ab+6KFZ1VkfgxBHZCjAf1az9sJAzPS1DVryLqNAdFIYr4UQzDjbqY31kko2EJ23
ra7kXnyZidaSCyVnMjZcfjY6qpf+D5XmMmWW9E7T+1rQ/NP/xsj/iKWUS+1e9UwI
aimvnCiAv9e6OXaOjCGKd5l8IFMPVqdP1rnecRGKNdPfhRv6JZkc8XUxM69Pwhcc
DlWAH1OB1tMYxIbKS4jXgM7C4qIBd6R7d9fvJNhBuilNeRy/4S0fojJ5iBl/RX26
WjbDNW48NJEwHcpGPhK100m80zfeJQNNrb/N2tZzlzcRk2nEnhfSli4Z
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:54:33 2025 by rpki-client