Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
File: ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft (raw, json)
Hash identifier: cXLl0hcWkjG6RSav/Qgg97WM1McZrSrpqd4xTqXem4I=
Subject key identifier: D5:5F:AE:FB:B6:AF:0F:00:F8:38:B3:8D:68:2C:C3:10:FB:22:37:C5
Authority key identifier: CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
Certificate issuer: /CN=F36F6A4DAF/serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Certificate serial: E8
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
Manifest number: E4
Signing time: Wed 04 Jun 2025 05:01:23 +0000
Manifest this update: Wed 04 Jun 2025 05:01:22 +0000
Manifest next update: Fri 06 Jun 2025 05:01:22 +0000
Files and hashes: 1: ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl (hash: kZWX7b2tjXi2o6b255BJkzpj+hhbLkp2/kWY9nxdCeo=)
2: 68314CFA9E6711EF831C3572762E951A.roa (hash: +2OyFRy+2ufdlClFPPFiOYpBXJw/swztJHB2roxpChk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Jun 2025 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 232 (0xe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F6A4DAF, serialNumber=CA941F10D8010F95C8049E0102DCCAA883D9A0DB
Validity
Not Before: Jun 4 05:01:22 2025 GMT
Not After : Jun 6 05:01:22 2025 GMT
Subject: CN=683fd323-b0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:55:a0:fc:3c:29:d2:b8:23:18:de:23:2c:1b:
e7:51:5c:0b:e7:a7:ee:97:06:3a:d9:3e:bb:3c:b9:
26:cb:8f:01:5a:29:a0:1b:ef:ed:bc:bb:5a:3e:02:
7e:87:a1:32:1e:78:a9:6f:5d:99:b7:79:c8:1f:c7:
00:52:03:03:bd:7f:e1:27:6d:8f:73:87:f6:26:d5:
5c:2f:8e:85:29:a4:f2:a2:ab:af:bc:0e:cd:6f:93:
81:b1:b8:a1:d0:a4:2e:34:38:9c:f1:06:78:82:3d:
29:55:a8:44:2a:8f:28:5e:77:a2:d3:bd:18:45:34:
2f:06:d9:c2:66:11:2a:de:c5:41:95:51:4c:54:f7:
90:0a:12:46:2b:ee:68:1d:7c:c3:c5:33:d5:be:27:
dc:af:cb:62:d9:f7:ca:03:79:cc:5f:4e:45:c4:bb:
d0:59:b1:9a:f7:b6:50:51:f6:09:46:45:2d:27:f1:
28:4c:be:91:70:db:91:c9:92:c0:a4:24:21:18:a8:
6f:6f:d8:4d:8c:8f:11:d2:85:45:2d:29:44:d9:0d:
34:86:5d:c1:09:f3:b9:fe:01:cd:9d:21:5e:c1:ea:
1b:25:11:44:44:6f:10:2c:b8:51:d3:15:d1:c4:41:
94:ad:88:18:69:c1:76:66:b3:7b:e0:60:00:dd:32:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:AE:FB:B6:AF:0F:00:F8:38:B3:8D:68:2C:C3:10:FB:22:37:C5
X509v3 Authority Key Identifier:
keyid:CA:94:1F:10:D8:01:0F:95:C8:04:9E:01:02:DC:CA:A8:83:D9:A0:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ypQfENgBD5XIBJ4BAtzKqIPZoNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6A4D/AE1A00C89B3C11EF9E97257F762E951A/ypQfENgBD5XIBJ4BAtzKqIPZoNs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:72:a3:14:d4:31:54:50:37:5b:27:5f:32:1b:b9:a8:a8:df:
82:79:b2:13:22:0c:44:34:33:35:88:bf:2a:0d:a2:f4:bb:29:
3b:14:33:2a:ea:bf:41:1f:0b:19:07:0c:77:0d:57:94:48:5a:
b8:b4:0b:45:de:ff:9f:6a:e7:fa:45:1f:e0:8d:c2:ba:24:6b:
89:ff:6c:46:8b:0d:b8:1c:cb:0b:b7:30:5c:d1:b5:73:ea:70:
8b:6d:33:26:20:1b:c6:4c:46:f7:d9:40:e9:b4:8c:07:86:4c:
4b:64:6c:e1:29:cd:04:0d:75:64:eb:29:ac:4a:4a:8c:fb:f5:
6d:0f:8b:3f:d4:a1:34:72:3a:65:43:ff:57:8c:a0:cc:9d:9f:
78:3c:87:6b:96:a0:60:13:bf:27:3c:7c:10:f2:84:be:f3:bc:
6b:f1:2f:c8:79:f5:65:fa:43:5c:d5:ab:82:3e:8e:ac:bd:c2:
d8:a5:cc:4f:68:33:80:83:48:08:e7:08:ac:e3:a1:b4:bb:b4:
e5:f7:55:74:25:32:9f:c4:14:53:dc:41:9d:fa:8a:c7:ed:80:
48:67:eb:98:89:bc:c8:f3:57:a3:ad:c2:5a:5c:1a:e4:b5:d8:
60:d4:a4:ee:81:22:85:5d:de:2e:d1:46:7e:f8:a0:05:c2:f9:
a0:68:c4:55
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjZBNERBRjExMC8GA1UEBRMoQ0E5NDFGMTBEODAxMEY5NUM4MDQ5RTAxMDJEQ0NB
QTg4M0Q5QTBEQjAeFw0yNTA2MDQwNTAxMjJaFw0yNTA2MDYwNTAxMjJaMBgxFjAU
BgNVBAMTDTY4M2ZkMzIzLWIwYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD0VaD8PCnSuCMY3iMsG+dRXAvnp+6XBjrZPrs8uSbLjwFaKaAb7+28u1o+
An6HoTIeeKlvXZm3ecgfxwBSAwO9f+EnbY9zh/Ym1VwvjoUppPKiq6+8Ds1vk4Gx
uKHQpC40OJzxBniCPSlVqEQqjyhed6LTvRhFNC8G2cJmESrexUGVUUxU95AKEkYr
7mgdfMPFM9W+J9yvy2LZ98oDecxfTkXEu9BZsZr3tlBR9glGRS0n8ShMvpFw25HJ
ksCkJCEYqG9v2E2MjxHShUUtKUTZDTSGXcEJ87n+Ac2dIV7B6hslEUREbxAsuFHT
FdHEQZStiBhpwXZms3vgYADdMm+xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1V+u
+7avDwD4OLONaCzDEPsiN8UwHwYDVR0jBBgwFoAUypQfENgBD5XIBJ4BAtzKqIPZ
oNswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2QTREL0FFMUEwMEM4OUIzQzExRUY5RTk3MjU3Rjc2MkU5NTFBL3lwUWZF
TmdCRDVYSUJKNEJBdHpLcUlQWm9Ocy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lwUWZFTmdCRDVYSUJKNEJBdHpLcUlQWm9Ocy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjZBNEQvQUUxQTAwQzg5QjNDMTFFRjlFOTcyNTdGNzYy
RTk1MUEveXBRZkVOZ0JENVhJQko0QkF0ektxSVBab05zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLcqMU1DFUUDdbJ18yG7moqN+CebIT
IgxENDM1iL8qDaL0uyk7FDMq6r9BHwsZBwx3DVeUSFq4tAtF3v+fauf6RR/gjcK6
JGuJ/2xGiw24HMsLtzBc0bVz6nCLbTMmIBvGTEb32UDptIwHhkxLZGzhKc0EDXVk
6ymsSkqM+/VtD4s/1KE0cjplQ/9XjKDMnZ94PIdrlqBgE78nPHwQ8oS+87xr8S/I
efVl+kNc1auCPo6svcLYpcxPaDOAg0gI5wis46G0u7Tl91V0JTKfxBRT3EGd+orH
7YBIZ+uYibzI81ejrcJaXBrktdhg1KTugSKFXd4u0UZ++KAFwvmgaMRV
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:07:07 2025 by rpki-client