Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File: IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier: X4LstzgPKyTyEPey279r7iwhGKkhvKSyc6RxdjyCwnM=
Subject key identifier: 8E:74:05:0E:33:5A:97:BC:A8:F0:7B:5E:EF:44:6B:A2:F9:A9:92:96
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer: /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial: 0334
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number: 0332
Signing time: Wed 04 Jun 2025 03:38:34 +0000
Manifest this update: Wed 04 Jun 2025 03:38:34 +0000
Manifest next update: Fri 06 Jun 2025 03:38:34 +0000
Files and hashes: 1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: OGK2LgOgPoxxoFbOaej11kJ9gn5fEE6/nmAxNePsJOA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 820 (0x334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
Validity
Not Before: Jun 4 03:38:34 2025 GMT
Not After : Jun 6 03:38:34 2025 GMT
Subject: CN=683fbfba-5a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:7e:8a:91:13:92:b5:2e:90:f9:b5:94:a7:
46:34:a7:5c:29:5e:e3:21:4c:fa:0e:8c:7e:91:e7:
f4:7c:c4:1e:ef:b7:f2:18:5a:44:26:6b:0b:6b:49:
8b:fc:d5:9b:16:97:38:5f:a2:37:58:39:13:8d:a9:
60:07:98:be:c4:8b:34:e2:cf:b4:37:2c:1d:23:f1:
03:31:29:ac:7f:1b:8a:a8:e3:ef:ad:02:0b:d5:b5:
fd:79:36:49:a0:c7:4f:17:58:b3:a4:d0:0d:00:0b:
5d:e7:ae:e9:fb:16:56:2b:e8:4d:87:26:29:70:ee:
22:fa:7c:4d:93:6a:ec:0a:e3:1d:f2:7e:47:4d:af:
df:da:e6:d6:41:a5:22:5d:2f:02:8e:e5:b7:cb:21:
6b:49:c9:e5:41:fa:e1:95:1f:68:bb:b4:b0:04:95:
0f:0e:e7:77:8f:8b:97:1c:da:90:f5:35:64:5b:a2:
b9:38:9f:bf:62:b3:8b:db:5c:9d:82:aa:a2:64:fe:
3f:2c:9d:9d:b7:42:aa:9d:5a:d3:23:cf:4e:6d:26:
7e:d1:ac:5f:39:83:22:68:2e:45:c8:3e:e0:8f:46:
bc:54:50:0a:60:11:28:88:7a:f8:e5:c2:7c:01:c8:
65:7d:bd:cc:a4:29:1a:d2:00:c5:9f:cd:aa:7e:b2:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:74:05:0E:33:5A:97:BC:A8:F0:7B:5E:EF:44:6B:A2:F9:A9:92:96
X509v3 Authority Key Identifier:
keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:23:77:f5:6b:74:ce:47:1e:ac:5d:81:b5:3b:82:bf:8e:ac:
b3:54:2a:1c:e4:f7:26:22:88:f8:89:9c:e0:2d:59:b3:d0:bb:
ee:a2:87:48:04:25:b2:dc:2d:8a:00:33:d3:a9:5d:e4:06:6f:
26:ae:89:44:98:80:8b:e7:7a:77:ab:f1:bb:3b:b6:f5:6e:3f:
12:2a:4a:dc:f0:2c:8a:e3:99:3d:a5:b2:81:8b:6d:e8:94:9c:
21:f7:41:38:0b:e6:39:ee:de:70:70:a4:29:a8:33:6e:97:0d:
d3:35:dc:b6:9a:f2:cb:b1:3e:51:f3:ad:87:4a:a3:e1:25:3c:
09:70:41:cb:fe:82:59:db:c2:38:f2:5c:65:32:e2:7c:f3:de:
44:44:5d:e2:81:9b:68:76:af:8f:84:53:0c:54:36:d0:22:92:
ed:1a:5a:9c:c5:51:39:e5:da:f5:21:73:57:b9:83:00:ff:e9:
6b:42:98:4c:e9:70:fd:ef:a8:6d:c2:3d:f3:06:1e:5b:fd:08:
88:2c:f5:d8:36:8e:18:62:15:7b:7d:24:dd:fe:03:4f:6d:01:
be:f9:b7:34:f7:9e:2c:1e:1e:91:d7:0a:96:bf:a5:40:d6:72:
18:99:d2:8d:7f:db:de:1d:9f:65:81:73:41:ab:f3:69:2f:22:
d5:34:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:17:58 2025 by rpki-client