Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File: 5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier: M41es+yzWpPwLE2N1FsQH3ScJj1RXN4VEiV0EFHBT7w=
Subject key identifier: 02:08:F9:8B:4F:68:F5:73:6A:99:09:25:97:AE:E8:D1:BA:00:E1:58
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer: /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial: 073A
Authority info access: rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number: 0739
Signing time: Sat 05 Apr 2025 01:26:21 +0000
Manifest this update: Sat 05 Apr 2025 01:26:20 +0000
Manifest next update: Mon 07 Apr 2025 01:26:20 +0000
Files and hashes: 1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: FE+K1ZodOSH/COGw8mQ9m/QVjFv6DGGl9gVK3W17kno=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 07 Apr 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1850 (0x73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6034AR
Validity
Not Before: Apr 5 01:26:20 2025 GMT
Not After : Apr 7 01:26:20 2025 GMT
Subject: CN=67f086bd-3f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:bc:75:39:d4:af:1d:f9:fc:2e:b7:31:ac:
d7:89:80:ed:17:38:1a:51:3f:6e:76:a4:80:ed:f7:
ee:34:b4:38:4d:c6:a4:01:24:71:86:2d:fb:d3:d9:
02:80:33:15:ec:8a:bb:19:cc:1e:09:9b:a1:49:80:
f7:a3:cf:65:01:c1:ce:ce:2b:7b:90:71:1b:4c:54:
8e:68:16:40:f3:ee:33:69:9c:19:fd:94:6e:99:24:
e3:f6:0b:d0:d4:0e:73:e1:cb:94:91:10:36:ab:ec:
a7:ca:2c:08:b1:ec:31:c2:d1:13:2f:9b:34:24:70:
80:a5:86:be:c6:18:02:fa:af:62:0f:af:f5:5a:89:
de:22:a6:9f:a3:1f:aa:ff:d3:5d:47:28:5e:da:8b:
64:17:18:6c:4b:c1:5e:d4:c1:f4:a5:1c:b2:95:9e:
4f:67:16:e2:a9:18:4a:e8:ba:0c:a8:df:40:8a:d7:
83:52:c0:a0:ca:70:99:a1:0b:7d:dc:c7:62:27:d8:
cc:3f:ea:ff:a6:90:a9:3f:bf:03:f6:e7:fc:d6:73:
48:96:db:fc:da:a8:1b:d8:30:32:1c:92:1e:b4:46:
25:0d:06:ab:bf:e6:1a:9d:ea:c6:69:b1:0f:f8:6e:
08:2f:84:8e:4e:86:54:3c:a8:0d:04:84:4e:0f:e4:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:08:F9:8B:4F:68:F5:73:6A:99:09:25:97:AE:E8:D1:BA:00:E1:58
X509v3 Authority Key Identifier:
keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b4:0a:4e:47:8a:81:85:4e:b5:a2:6d:25:f6:6e:eb:e6:18:
65:6b:0b:55:3f:ae:43:42:4c:7e:90:65:c2:22:88:89:0a:8d:
0d:f2:ef:1e:ec:fe:86:21:c3:7a:b5:7c:da:1a:5f:2a:65:8e:
ba:3d:3a:e6:28:11:63:f1:88:fd:37:65:4c:46:90:f8:07:ca:
69:e8:c9:7f:b8:87:66:fa:91:ec:6a:92:24:7f:7f:67:71:a4:
2e:34:f2:f6:ff:b1:3c:48:1a:a3:cc:c9:cd:cb:14:0f:8b:4b:
d2:e4:1a:a2:41:12:a4:5f:3d:c9:c2:ea:1b:2d:e2:4a:e6:e2:
3a:4e:ed:da:d8:67:46:9a:cc:99:d7:77:44:00:71:01:3c:0a:
18:35:a4:d4:4d:10:bd:78:48:e2:3a:5c:e4:22:04:40:8f:60:
f4:49:54:2e:35:16:a0:df:b8:2a:b8:c1:97:92:34:d8:60:4d:
bf:39:44:7b:ee:f2:ad:9b:40:c8:0c:28:dc:3b:a6:91:4c:5d:
c7:1d:f2:5a:3c:f8:66:de:c8:40:19:f5:e9:a1:e3:38:ed:75:
a0:27:08:41:3e:c6:ef:23:56:ad:9e:27:e6:4a:f3:1c:a3:04:
78:1a:64:80:74:44:27:2c:3a:e9:42:80:78:2b:45:11:65:5d:
a0:03:69:13
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBzowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBUjExMC8GA1UEBRMoRTczNTM0RjhFMENDQjlDMzg0MTMxMThENzdGREVB
NEU4MDhGRUEzMTAeFw0yNTA0MDUwMTI2MjBaFw0yNTA0MDcwMTI2MjBaMBgxFjAU
BgNVBAMTDTY3ZjA4NmJkLTNmNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB7Lx1OdSvHfn8LrcxrNeJgO0XOBpRP252pIDt9+40tDhNxqQBJHGGLfvT
2QKAMxXsirsZzB4Jm6FJgPejz2UBwc7OK3uQcRtMVI5oFkDz7jNpnBn9lG6ZJOP2
C9DUDnPhy5SREDar7KfKLAix7DHC0RMvmzQkcIClhr7GGAL6r2IPr/Vaid4ipp+j
H6r/011HKF7ai2QXGGxLwV7UwfSlHLKVnk9nFuKpGErougyo30CK14NSwKDKcJmh
C33cx2In2Mw/6v+mkKk/vwP25/zWc0iW2/zaqBvYMDIckh60RiUNBqu/5hqd6sZp
sQ/4bggvhI5OhlQ8qA0EhE4P5FPLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAgj5
i09o9XNqmQkll67o0boA4VgwHwYDVR0jBBgwFoAU5zU0+ODMucOEExGNd/3qToCP
6jEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0VBMTc2NzA0OTBGQzExRUE4QzRGNUI2RUY4QUVBMjI4LzV6VTAt
T0RNdWNPRUV4R05kXzNxVG9DUDZqRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzV6VTAtT0RNdWNPRUV4R05kXzNxVG9DUDZqRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjYwMzQvRUExNzY3MDQ5MEZDMTFFQThDNEY1QjZFRjhBRUEy
MjgvNXpVMC1PRE11Y09FRXhHTmRfM3FUb0NQNmpFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBatApOR4qBhU61om0l9m7r5hhlawtVP65D
Qkx+kGXCIoiJCo0N8u8e7P6GIcN6tXzaGl8qZY66PTrmKBFj8Yj9N2VMRpD4B8pp
6Ml/uIdm+pHsapIkf39ncaQuNPL2/7E8SBqjzMnNyxQPi0vS5BqiQRKkXz3Jwuob
LeJK5uI6Tu3a2GdGmsyZ13dEAHEBPAoYNaTUTRC9eEjiOlzkIgRAj2D0SVQuNRag
37gquMGXkjTYYE2/OUR77vKtm0DIDCjcO6aRTF3HHfJaPPhm3shAGfXpoeM47XWg
JwhBPsbvI1atnifmSvMcowR4GmSAdEQnLDrpQoB4K0URZV2gA2kT
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:42 2025 by rpki-client