Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
File: kGRTy4rcpLXHpuU7LsUREsTH_iw.mft (raw, json)
Hash identifier: YmjYHzzc+s+aWFaa/bn+korPylkqMflU7A4Ydak7bKI=
Subject key identifier: C1:21:18:0A:0D:E4:F2:6A:A7:04:CD:C9:E8:DB:38:E0:DD:FF:83:EA
Authority key identifier: 90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
Certificate issuer: /CN=F36F9BF2AF/serialNumber=906453CB8ADCA4B5C7A6E53B2EC51112C4C7FE2C
Certificate serial: 04C7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
Manifest number: 04C4
Signing time: Thu 03 Apr 2025 01:56:56 +0000
Manifest this update: Thu 03 Apr 2025 01:56:55 +0000
Manifest next update: Sat 05 Apr 2025 01:56:55 +0000
Files and hashes: 1: kGRTy4rcpLXHpuU7LsUREsTH_iw.crl (hash: McxxuMkTpToWgvs4T6opaVC23RRB39U1BW0zP0o0/XA=)
2: 9728765CB35211ED96B1EF87F1222468.roa (hash: TzuMAa1S+XUMBkWN3ANfTjwvxoQZORKA4C1/zSsf48o=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 05 Apr 2025 00:06:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1223 (0x4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36F9BF2AF
Validity
Not Before: Apr 3 01:56:55 2025 GMT
Not After : Apr 5 01:56:55 2025 GMT
Subject: CN=67edeae8-0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:af:d9:8c:d2:d8:8f:50:02:60:4c:bd:0c:85:
34:66:4f:1e:ad:e3:92:b7:ab:3f:96:3d:23:a1:fa:
e1:ea:22:47:11:17:28:cc:e3:a7:42:75:75:59:cd:
53:4a:b0:e3:c6:71:99:93:33:37:a0:3d:14:b8:e2:
81:b5:44:a1:d6:5a:61:13:30:a6:da:03:ce:8b:c1:
26:cd:e8:e3:18:4a:da:83:21:33:24:49:26:48:5e:
a2:82:10:63:c3:c7:0e:62:a5:e0:cd:97:17:c2:9f:
71:74:60:3d:f8:0a:97:7c:c2:3a:d8:e7:55:dc:da:
9b:4b:68:b1:c1:1d:8e:b8:44:bf:a0:2d:86:1c:9a:
d6:37:ba:c0:46:9b:a0:91:a8:16:f2:49:d2:32:22:
0a:3f:dd:1e:08:59:9a:9a:53:a5:ee:e4:91:ed:3e:
b3:12:65:8f:a3:b8:34:c8:2a:cf:fb:d2:d6:ed:8c:
f3:47:c6:24:38:2f:95:dc:45:75:f3:ba:9a:32:13:
71:52:90:7a:26:01:07:ac:ac:1f:a6:1b:f9:61:c9:
fd:83:1f:04:6d:e5:d0:d7:37:f9:c9:7d:81:93:5b:
6e:61:4a:98:23:40:db:02:07:fc:63:cc:86:69:5a:
39:dc:9f:84:5e:63:5c:8e:dd:04:ee:95:41:cb:5d:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:21:18:0A:0D:E4:F2:6A:A7:04:CD:C9:E8:DB:38:E0:DD:FF:83:EA
X509v3 Authority Key Identifier:
keyid:90:64:53:CB:8A:DC:A4:B5:C7:A6:E5:3B:2E:C5:11:12:C4:C7:FE:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kGRTy4rcpLXHpuU7LsUREsTH_iw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/6DE7F71C6FF711ECA7B831CA5A40D577/kGRTy4rcpLXHpuU7LsUREsTH_iw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e0:81:c1:a2:04:20:d0:3e:ab:ae:bf:29:46:c2:2f:a4:e5:
2a:6d:90:53:87:b2:25:38:b7:dd:b3:92:50:31:17:eb:64:b2:
33:a4:07:20:f3:7e:28:57:3c:93:9c:44:17:e0:d7:d4:35:f4:
9a:be:b6:18:bc:b8:ee:a4:d1:1c:7d:0e:c2:d2:c5:53:69:0a:
c8:25:c9:35:0e:ae:ec:22:62:5d:59:71:88:33:ff:73:c7:f1:
02:63:59:0c:c7:00:f5:58:be:29:08:9c:2b:87:d2:73:56:25:
96:09:d2:6f:39:26:81:3e:6c:ee:c0:c5:dd:d7:7f:b5:8b:df:
df:ed:ef:60:4a:0c:9f:14:6a:99:c2:10:bd:0f:37:7a:d9:0b:
c9:ba:19:ac:1a:b6:df:ae:ba:a9:d0:97:fb:a8:87:2b:44:e4:
ed:d2:3a:ff:e2:a0:2f:8f:48:74:0d:e1:80:37:b6:69:b5:06:
b9:b2:8a:ff:1e:8a:47:ed:ba:9e:ac:38:b9:4c:ff:62:1a:a5:
99:dc:2a:ce:df:46:6a:e8:18:3a:ed:e8:a9:34:23:91:4a:e7:
ae:f9:ba:a2:6a:7e:a7:02:88:1d:ea:09:e7:a4:35:e8:3c:ab:
26:2e:8d:1f:34:6c:74:fc:69:e5:82:5b:32:3b:eb:1f:ad:85:
71:58:1d:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjlCRjJBRjExMC8GA1UEBRMoOTA2NDUzQ0I4QURDQTRCNUM3QTZFNTNCMkVDNTEx
MTJDNEM3RkUyQzAeFw0yNTA0MDMwMTU2NTVaFw0yNTA0MDUwMTU2NTVaMBgxFjAU
BgNVBAMTDTY3ZWRlYWU4LTA4ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsr9mM0tiPUAJgTL0MhTRmTx6t45K3qz+WPSOh+uHqIkcRFyjM46dCdXVZ
zVNKsOPGcZmTMzegPRS44oG1RKHWWmETMKbaA86LwSbN6OMYStqDITMkSSZIXqKC
EGPDxw5ipeDNlxfCn3F0YD34Cpd8wjrY51Xc2ptLaLHBHY64RL+gLYYcmtY3usBG
m6CRqBbySdIyIgo/3R4IWZqaU6Xu5JHtPrMSZY+juDTIKs/70tbtjPNHxiQ4L5Xc
RXXzupoyE3FSkHomAQesrB+mG/lhyf2DHwRt5dDXN/nJfYGTW25hSpgjQNsCB/xj
zIZpWjncn4ReY1yO3QTulUHLXQWjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwSEY
Cg3k8mqnBM3J6Ns44N3/g+owHwYDVR0jBBgwFoAUkGRTy4rcpLXHpuU7LsUREsTH
/iwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY5QkYyLzZERTdGNzFDNkZGNzExRUNBN0I4MzFDQTVBNDBENTc3L2tHUlR5
NHJjcExYSHB1VTdMc1VSRXNUSF9pdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tHUlR5NHJjcExYSHB1VTdMc1VSRXNUSF9pdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjlCRjIvNkRFN0Y3MUM2RkY3MTFFQ0E3QjgzMUNBNUE0
MEQ1Nzcva0dSVHk0cmNwTFhIcHVVN0xzVVJFc1RIX2l3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa4IHBogQg0D6rrr8pRsIvpOUqbZBT
h7IlOLfds5JQMRfrZLIzpAcg834oVzyTnEQX4NfUNfSavrYYvLjupNEcfQ7C0sVT
aQrIJck1Dq7sImJdWXGIM/9zx/ECY1kMxwD1WL4pCJwrh9JzViWWCdJvOSaBPmzu
wMXd13+1i9/f7e9gSgyfFGqZwhC9Dzd62QvJuhmsGrbfrrqp0Jf7qIcrROTt0jr/
4qAvj0h0DeGAN7ZptQa5sor/HopH7bqerDi5TP9iGqWZ3CrO30Zq6Bg67eipNCOR
Sueu+bqian6nAogd6gnnpDXoPKsmLo0fNGx0/GnlglsyO+sfrYVxWB1v
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:36:15 2025 by rpki-client