Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
File: Y2BaihJPjsom32anMaZF3MgxlJU.mft (raw, json)
Hash identifier: FZwJwXccebUZfsUbYseomecwb4/OCcTWzTQdlB7jFbk=
Subject key identifier: 4A:8D:F1:EC:24:0D:86:07:41:A0:AF:F0:56:21:E7:0C:B0:1F:BD:17
Authority key identifier: 63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
Certificate issuer: /CN=F36150C1AF/serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Certificate serial: 0C83
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
Manifest number: 0C83
Signing time: Sun 27 Apr 2025 01:07:22 +0000
Manifest this update: Sun 27 Apr 2025 01:07:21 +0000
Manifest next update: Tue 29 Apr 2025 01:07:21 +0000
Files and hashes: 1: Y2BaihJPjsom32anMaZF3MgxlJU.crl (hash: GaxeEmjW8D+p+jyGQ88VIntevdQx5cAmEUnNfdcOtwo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3203 (0xc83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36150C1AF, serialNumber=63605A8A124F8ECA26DF66A731A645DCC8319495
Validity
Not Before: Apr 27 01:07:21 2025 GMT
Not After : Apr 29 01:07:21 2025 GMT
Subject: CN=680d834a-6b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:e1:f5:d3:b8:07:86:3e:79:30:00:94:b4:
30:12:87:b5:de:aa:39:df:c9:40:0c:77:e4:b0:28:
ad:ae:1e:c7:b4:21:e1:c0:8f:88:9e:00:76:a5:55:
f3:d5:57:f7:e6:3f:54:e6:38:2b:ce:2d:4e:5a:cd:
0c:78:ce:a4:c6:0f:da:b4:26:ee:8a:b6:b6:fd:80:
1d:66:a1:7c:8a:29:19:bf:e3:c0:60:ca:6b:ef:8d:
ff:2c:73:e1:b5:0d:e8:95:af:e1:50:9c:73:da:20:
9b:95:ed:70:ab:b9:76:10:5c:8e:31:3f:cc:f7:20:
99:a4:a5:93:d5:6e:8b:2f:0d:b3:c0:c9:cb:da:35:
aa:53:f4:2a:4e:9d:af:d5:17:65:cf:3e:73:b9:52:
22:39:8d:69:ac:0f:c0:65:aa:1e:51:1e:e1:ff:ae:
b7:6a:a8:73:35:20:bd:0b:0f:a9:9c:5f:4c:0b:b8:
01:cc:7f:1f:bb:6e:5f:b8:f5:af:16:9b:2b:4a:b8:
34:23:7a:62:a0:fc:0e:c6:b2:c3:c2:f6:33:0b:c9:
e1:36:80:b0:38:5d:cf:bc:3e:93:77:92:39:a8:98:
3e:bf:e2:19:2b:e4:fa:72:8f:f9:cd:9c:01:85:6c:
50:80:18:f6:84:4a:68:6f:90:5c:8b:52:a4:42:8c:
56:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8D:F1:EC:24:0D:86:07:41:A0:AF:F0:56:21:E7:0C:B0:1F:BD:17
X509v3 Authority Key Identifier:
keyid:63:60:5A:8A:12:4F:8E:CA:26:DF:66:A7:31:A6:45:DC:C8:31:94:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y2BaihJPjsom32anMaZF3MgxlJU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/F04F6A8A855311E6BA35374BF8AEA228/Y2BaihJPjsom32anMaZF3MgxlJU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:f8:f0:ab:c7:96:dc:d6:54:38:ec:e1:b5:38:a9:45:a2:
e0:0e:c6:ba:ee:64:9f:bf:9b:56:5e:42:33:05:8d:d4:4b:14:
02:66:8a:f4:15:88:58:d9:6b:a2:f4:8a:e5:3c:34:9b:c5:c6:
2f:fc:c0:d1:ff:46:e1:78:aa:df:a2:d5:56:46:dc:48:93:5c:
58:d3:fe:2b:20:c9:09:f9:40:34:d7:54:d2:7c:15:48:8b:6c:
da:5e:bc:45:8f:ce:12:bd:01:16:da:55:0f:a5:60:59:c1:39:
66:c7:f0:da:37:52:e3:f5:55:81:cf:ed:82:8b:03:3c:a2:18:
96:b1:2f:78:48:f3:82:de:40:53:ca:f8:ad:73:2b:1a:9b:81:
be:21:a8:91:4f:62:68:d1:12:20:1f:fe:93:eb:58:83:96:2d:
5d:62:6a:c3:6a:b7:1d:85:d9:c9:41:c8:34:dd:3f:96:4b:a0:
2c:39:52:86:3c:13:9d:04:80:05:b2:16:fd:86:e1:5b:37:f7:
1a:c8:70:84:a0:a4:be:07:f5:85:dc:da:db:35:be:90:97:7e:
e4:a3:a3:96:ca:27:9a:ff:f8:b0:c1:60:9d:d7:52:39:fb:d3:
7a:de:a5:a6:c7:d8:9d:a9:6d:69:23:1a:17:2e:48:ad:94:0b:
ec:81:0b:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTUwQzFBRjExMC8GA1UEBRMoNjM2MDVBOEExMjRGOEVDQTI2REY2NkE3MzFBNjQ1
RENDODMxOTQ5NTAeFw0yNTA0MjcwMTA3MjFaFw0yNTA0MjkwMTA3MjFaMBgxFjAU
BgNVBAMTDTY4MGQ4MzRhLTZiNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOnOH107gHhj55MACUtDASh7XeqjnfyUAMd+SwKK2uHse0IeHAj4ieAHal
VfPVV/fmP1TmOCvOLU5azQx4zqTGD9q0Ju6Ktrb9gB1moXyKKRm/48Bgymvvjf8s
c+G1DeiVr+FQnHPaIJuV7XCruXYQXI4xP8z3IJmkpZPVbosvDbPAycvaNapT9CpO
na/VF2XPPnO5UiI5jWmsD8Blqh5RHuH/rrdqqHM1IL0LD6mcX0wLuAHMfx+7bl+4
9a8WmytKuDQjemKg/A7GssPC9jMLyeE2gLA4Xc+8PpN3kjmomD6/4hkr5Ppyj/nN
nAGFbFCAGPaESmhvkFyLUqRCjFYhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSo3x
7CQNhgdBoK/wViHnDLAfvRcwHwYDVR0jBBgwFoAUY2BaihJPjsom32anMaZF3Mgx
lJUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1MEMxL0YwNEY2QThBODU1MzExRTZCQTM1Mzc0QkY4QUVBMjI4L1kyQmFp
aEpQanNvbTMyYW5NYVpGM01neGxKVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1kyQmFpaEpQanNvbTMyYW5NYVpGM01neGxKVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTUwQzEvRjA0RjZBOEE4NTUzMTFFNkJBMzUzNzRCRjhB
RUEyMjgvWTJCYWloSlBqc29tMzJhbk1hWkYzTWd4bEpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyn/jwq8eW3NZUOOzhtTipRaLgDsa6
7mSfv5tWXkIzBY3USxQCZor0FYhY2Wui9IrlPDSbxcYv/MDR/0bheKrfotVWRtxI
k1xY0/4rIMkJ+UA011TSfBVIi2zaXrxFj84SvQEW2lUPpWBZwTlmx/DaN1Lj9VWB
z+2CiwM8ohiWsS94SPOC3kBTyvitcysam4G+IaiRT2Jo0RIgH/6T61iDli1dYmrD
arcdhdnJQcg03T+WS6AsOVKGPBOdBIAFshb9huFbN/cayHCEoKS+B/WF3NrbNb6Q
l37ko6OWyiea//iwwWCd11I5+9N63qWmx9idqW1pIxoXLkitlAvsgQt3
-----END CERTIFICATE-----
Generated at Sun Apr 27 19:09:20 2025 by rpki-client