Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File: 9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier: MEuI08AlCQhsu7QV9/8sF13LZdWmq0jMhS0IZmTzruk=
Subject key identifier: BE:B4:60:67:8C:78:9D:2B:69:6F:55:7F:D2:34:C2:F2:BB:48:30:8A
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer: /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial: 0151
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number: 0150
Signing time: Wed 04 Jun 2025 04:41:32 +0000
Manifest this update: Wed 04 Jun 2025 04:41:31 +0000
Manifest next update: Fri 06 Jun 2025 04:41:31 +0000
Files and hashes: 1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: 5up6WkAkoZXJPZVLyV+Z3i18PnE+WC3fY4FvvkqizDg=)
2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Validity
Not Before: Jun 4 04:41:31 2025 GMT
Not After : Jun 6 04:41:31 2025 GMT
Subject: CN=683fce7c-3aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3e:ff:f8:0d:9b:39:27:09:4d:28:fc:00:37:
54:50:b1:bc:9c:a0:06:5f:6b:54:39:fe:54:52:5f:
19:c4:0e:ef:ee:45:18:14:1e:36:ff:47:5b:00:14:
1e:a3:69:32:bb:e8:e5:da:ab:75:a9:fe:1c:01:ae:
71:bc:4f:a6:a1:74:75:f7:84:40:1e:2a:e8:cb:7a:
56:12:8c:6e:55:0d:84:79:61:e8:a7:31:1f:b2:5f:
25:40:f1:63:93:48:f5:2b:2f:71:31:41:1c:4e:43:
0a:e7:8c:cf:fb:cc:d9:ac:17:25:58:66:d6:33:30:
c7:c4:e9:b8:8e:f7:c0:aa:df:5e:c5:6f:14:54:1f:
6a:ec:e3:50:ad:ad:8f:86:51:f9:e7:5e:8b:49:a5:
56:9f:9c:58:f2:55:c0:df:67:e6:b1:fe:46:17:b1:
56:a3:01:1d:34:f5:2e:50:4b:6e:d1:53:a4:11:1c:
d7:e7:2c:78:47:bd:3d:88:e3:0f:28:23:bf:5d:99:
db:7a:54:c0:19:44:4d:c0:c0:fa:c4:77:d8:3e:95:
77:34:57:18:d8:28:bd:3e:cc:f7:01:5e:46:2b:91:
a8:a4:8e:53:b0:6d:f4:31:f1:30:83:76:25:9c:72:
e7:bc:98:7f:d8:01:b8:2c:35:4e:05:54:43:3d:7a:
06:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:60:67:8C:78:9D:2B:69:6F:55:7F:D2:34:C2:F2:BB:48:30:8A
X509v3 Authority Key Identifier:
keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b6:5f:60:1c:78:17:79:9a:c4:ab:2f:ab:e6:20:d6:5d:c1:
db:42:1f:ba:3d:8a:7f:96:66:97:bc:04:1e:56:59:bf:34:6e:
4c:21:1d:90:d6:85:00:63:d7:37:33:f2:7d:e5:8a:b2:82:3d:
1f:3c:e3:c2:e9:e5:d8:fb:cf:ba:cc:34:04:86:58:96:fb:96:
e4:01:c2:79:b5:2f:4e:f1:e1:0c:6d:7d:f8:c0:24:9b:f1:69:
ea:0e:22:18:ee:f1:4d:4b:8e:73:ad:0b:32:e7:5c:23:b3:14:
24:99:4d:de:d0:29:b8:d8:f8:ba:a1:53:95:ff:57:8f:e8:9e:
8b:28:aa:82:f6:de:5c:a4:85:36:7c:26:bd:5e:5b:12:0d:d4:
18:df:d2:7b:90:70:03:3d:e8:2a:b9:86:80:2c:fe:87:50:ea:
b9:da:69:b2:d7:18:7e:ab:81:28:51:37:ff:1d:31:80:01:2f:
52:86:df:4e:73:1a:78:7f:92:7d:4e:16:22:0b:bb:27:fb:5b:
ad:e0:dd:b9:68:90:00:8e:4a:d6:06:8d:70:42:5d:45:76:48:
31:73:d3:13:f0:93:19:d7:02:9a:ba:bf:5e:40:6e:8a:37:84:
d6:0b:1a:9b:fc:25:c2:66:48:f6:a3:7f:01:cd:48:0c:dc:a3:
3c:62:c9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:16:10 2025 by rpki-client