Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
File: NokmebLgyF9VbZR98hkWGboqv-Y.mft (raw, json)
Hash identifier: YaQTvV9+78w9SCdj34TnM841QGce0ygR6na1LiVRQ1U=
Subject key identifier: 23:B9:3F:26:EC:57:F5:7C:00:9A:F6:BC:D7:43:37:B8:D3:9F:25:5A
Authority key identifier: 36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
Certificate issuer: /CN=F36F854AAF/serialNumber=36892679B2E0C85F556D947DF2191619BA2ABFE6
Certificate serial: 0420
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
Manifest number: 0418
Signing time: Thu 03 Apr 2025 02:07:32 +0000
Manifest this update: Thu 03 Apr 2025 02:07:31 +0000
Manifest next update: Sat 05 Apr 2025 02:07:31 +0000
Files and hashes: 1: NokmebLgyF9VbZR98hkWGboqv-Y.crl (hash: Ql9KgNqsSDECj3NYcZk+qxM25R5rUo2dfMurvrFPWFk=)
2: 4E341B66638F11EEAE8F3A334AD9E6FC.roa (hash: u8+tUOrRrY4s158s9cBRWpl8atAcZbRDPn+y7aqq15Q=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1056 (0x420)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F854AAF
Validity
Not Before: Apr 3 02:07:31 2025 GMT
Not After : Apr 5 02:07:31 2025 GMT
Subject: CN=67eded64-9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cd:a7:4d:f7:22:9b:17:10:34:cc:67:4d:1a:
3e:89:7c:0f:f4:98:71:31:4e:8b:2d:d8:33:e4:0b:
bf:56:bc:f3:5b:45:22:53:c4:e8:28:33:71:a5:1b:
0f:77:1e:2c:30:9e:79:56:59:f3:f9:de:5e:6b:29:
bc:fb:3b:a6:0f:2f:94:09:a0:9d:76:9a:f6:02:9f:
62:3f:30:df:d4:4a:8a:2a:0a:48:33:14:e2:46:e2:
c7:a5:c6:16:bc:46:a2:fa:13:55:41:6c:c5:81:78:
35:37:98:6d:e4:76:87:3c:85:19:95:32:97:a2:89:
06:70:ea:fd:5b:eb:19:dc:1c:fc:19:47:9f:f4:c1:
03:2b:3b:a7:c8:c2:38:50:cc:2e:23:81:4f:8b:31:
4b:a2:fb:bb:f8:6b:28:c2:2d:51:11:3d:48:37:c4:
4f:c9:f9:6c:c4:46:3a:9f:2f:3e:b8:b7:c6:0a:6b:
4d:50:6c:dc:42:2f:11:46:de:64:1f:03:8b:a7:5a:
3a:48:74:e5:c4:a6:4f:f6:bf:95:45:e2:4c:2e:09:
26:06:00:a5:86:5d:20:d7:45:85:91:ce:1b:70:b0:
c6:85:9d:21:ba:b6:4d:b2:0c:46:9f:c5:45:38:8d:
f7:79:54:b4:49:f2:f1:48:42:b3:00:1f:77:6d:b2:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:3F:26:EC:57:F5:7C:00:9A:F6:BC:D7:43:37:B8:D3:9F:25:5A
X509v3 Authority Key Identifier:
keyid:36:89:26:79:B2:E0:C8:5F:55:6D:94:7D:F2:19:16:19:BA:2A:BF:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NokmebLgyF9VbZR98hkWGboqv-Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F854A/202ED20208F411ED927C0D98F1222468/NokmebLgyF9VbZR98hkWGboqv-Y.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:a6:3a:94:a0:c2:8f:ae:5f:a9:60:11:96:63:c0:8f:bc:57:
ed:7a:ea:61:1c:6d:b7:98:86:c1:70:3a:58:6c:b0:6f:5c:96:
44:7c:4a:90:eb:7a:fb:9e:40:c5:6c:cd:09:c4:fc:c9:ac:19:
7c:e2:7f:39:1e:b4:1f:1d:f8:22:4c:52:05:0b:2f:3a:a2:5c:
d3:35:3d:e9:7d:f5:0f:a5:ad:2f:37:f3:86:6b:cd:d9:a4:76:
29:b6:9c:ec:bc:2b:ad:24:25:4f:40:03:e2:47:3a:06:b2:6b:
29:3d:28:98:57:b0:e5:2c:df:01:38:53:81:ff:1b:03:d0:c3:
bd:25:0f:bf:0d:c1:db:47:bc:cd:f9:82:1a:69:80:64:59:d3:
f7:a3:ef:33:d2:23:26:b4:e8:41:e0:b0:3b:56:92:19:2a:9c:
63:7a:3e:ef:87:7b:60:c2:e3:e6:a1:ee:c5:d9:35:fa:e0:c1:
5c:27:6f:56:7c:2d:25:f8:b5:9a:3f:51:b0:d1:90:c9:1e:cf:
4a:23:6b:57:f2:c1:6e:3e:93:69:38:4a:15:2b:69:9c:98:9c:
36:02:c1:82:67:85:84:92:fc:0b:37:be:0c:bd:e1:7c:62:e9:
cf:9c:23:af:06:6c:ae:4d:24:0b:4e:ff:d2:0f:41:00:7c:3b:
8b:fc:4b:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Rjg1NEFBRjExMC8GA1UEBRMoMzY4OTI2NzlCMkUwQzg1RjU1NkQ5NDdERjIxOTE2
MTlCQTJBQkZFNjAeFw0yNTA0MDMwMjA3MzFaFw0yNTA0MDUwMjA3MzFaMBgxFjAU
BgNVBAMTDTY3ZWRlZDY0LTllNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9zadN9yKbFxA0zGdNGj6JfA/0mHExTost2DPkC79WvPNbRSJTxOgoM3Gl
Gw93HiwwnnlWWfP53l5rKbz7O6YPL5QJoJ12mvYCn2I/MN/USooqCkgzFOJG4sel
xha8RqL6E1VBbMWBeDU3mG3kdoc8hRmVMpeiiQZw6v1b6xncHPwZR5/0wQMrO6fI
wjhQzC4jgU+LMUui+7v4ayjCLVERPUg3xE/J+WzERjqfLz64t8YKa01QbNxCLxFG
3mQfA4unWjpIdOXEpk/2v5VF4kwuCSYGAKWGXSDXRYWRzhtwsMaFnSG6tk2yDEaf
xUU4jfd5VLRJ8vFIQrMAH3dtsks5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUI7k/
JuxX9XwAmva810M3uNOfJVowHwYDVR0jBBgwFoAUNokmebLgyF9VbZR98hkWGboq
v+YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4NTRBLzIwMkVEMjAyMDhGNDExRUQ5MjdDMEQ5OEYxMjIyNDY4L05va21l
YkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05va21lYkxneUY5VmJaUjk4aGtXR2JvcXYtWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Rjg1NEEvMjAyRUQyMDIwOEY0MTFFRDkyN0MwRDk4RjEy
MjI0NjgvTm9rbWViTGd5RjlWYlpSOThoa1dHYm9xdi1ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRpjqUoMKPrl+pYBGWY8CPvFfteuph
HG23mIbBcDpYbLBvXJZEfEqQ63r7nkDFbM0JxPzJrBl84n85HrQfHfgiTFIFCy86
olzTNT3pffUPpa0vN/OGa83ZpHYptpzsvCutJCVPQAPiRzoGsmspPSiYV7DlLN8B
OFOB/xsD0MO9JQ+/DcHbR7zN+YIaaYBkWdP3o+8z0iMmtOhB4LA7VpIZKpxjej7v
h3tgwuPmoe7F2TX64MFcJ29WfC0l+LWaP1Gw0ZDJHs9KI2tX8sFuPpNpOEoVK2mc
mJw2AsGCZ4WEkvwLN74MveF8YunPnCOvBmyuTSQLTv/SD0EAfDuL/Ev4
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:48:18 2025 by rpki-client