Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File: aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier: SNVfb/6YCSQ1JAIsWTNvUKIgsCrqvvD8/H21q7c2eAw=
Subject key identifier: 8E:FE:9F:65:61:7C:73:27:24:A2:ED:9A:BD:C3:C3:C2:65:2C:61:1E
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer: /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial: 0580
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number: 0580
Signing time: Mon 28 Apr 2025 02:31:58 +0000
Manifest this update: Mon 28 Apr 2025 02:31:57 +0000
Manifest next update: Wed 30 Apr 2025 02:31:57 +0000
Files and hashes: 1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: 71WQI39f9jmk+TdV9fGgHp6nGYKGaA9eBNGCyKUv4eY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 02:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Validity
Not Before: Apr 28 02:31:57 2025 GMT
Not After : Apr 30 02:31:57 2025 GMT
Subject: CN=680ee89e-f554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:26:ea:8c:84:1e:3a:f6:21:ec:20:f8:67:3a:
0e:b0:68:24:31:38:51:2f:33:3b:78:f1:14:33:22:
db:13:7e:c4:b4:e6:f0:3b:6b:58:80:09:31:99:61:
7d:f4:cb:d5:44:b8:c5:f9:9c:ea:26:43:67:1d:97:
a8:63:8e:05:85:31:15:31:e0:1e:45:de:77:52:aa:
4f:f0:de:d7:b4:d5:90:1d:34:96:c5:aa:f7:17:07:
8d:f0:c2:6c:82:a3:94:e3:59:30:cf:eb:35:40:94:
dc:59:fe:bb:00:99:0f:f9:f6:f7:9d:41:64:42:59:
33:e4:6d:9d:43:3c:62:3f:77:8f:21:ca:b8:62:7c:
42:34:98:64:74:35:04:81:9e:ff:ec:23:fa:bf:54:
3e:f7:a8:39:6b:3e:66:df:c1:ee:72:10:0c:3e:cc:
81:64:05:c9:3b:49:72:4b:14:02:4d:0b:16:30:2c:
42:85:f6:fa:53:7c:6e:50:aa:dc:f8:19:c7:c6:e3:
c1:d2:b1:42:d2:d5:d3:14:ff:b6:67:61:23:f3:fe:
da:7b:e1:c1:4b:6e:2c:d7:17:07:a4:54:bc:91:0b:
fa:77:49:3a:77:aa:78:11:b1:fd:62:e3:2f:dd:56:
26:88:04:76:72:77:b6:79:58:60:78:49:88:50:44:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FE:9F:65:61:7C:73:27:24:A2:ED:9A:BD:C3:C3:C2:65:2C:61:1E
X509v3 Authority Key Identifier:
keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e6:66:bb:bf:36:12:a7:75:79:51:06:7d:fd:3e:e5:2c:2b:
16:8b:bb:5c:38:36:c9:af:8b:af:1d:ea:11:6e:9f:56:91:bc:
52:14:f7:cc:e7:29:2f:f6:da:9c:15:11:e7:9e:22:13:4e:3d:
d0:13:92:42:d6:36:e7:20:49:f4:72:9e:90:77:57:aa:be:c5:
d2:b7:70:06:86:2b:c7:b4:70:4c:94:93:49:29:81:18:4e:49:
d6:9e:ff:fd:6f:aa:0e:a5:e7:ad:20:c3:73:8a:85:2a:87:fb:
41:e7:03:0c:04:2c:7c:01:2b:26:62:11:43:d5:25:69:a1:3f:
97:08:d5:41:09:f1:a3:d0:4d:48:48:fc:fb:74:b1:17:5d:66:
d0:21:00:6f:1a:56:f9:24:d6:5c:81:74:c4:64:74:84:55:64:
e3:2f:7c:4f:08:01:ec:7e:b6:e9:0c:b1:60:4d:db:81:7e:1c:
23:76:02:bd:4d:fa:53:d6:84:12:30:dd:28:6e:ed:bf:dc:17:
e7:9c:84:cf:78:ad:b7:d4:db:11:f1:a6:9c:ee:22:cf:da:de:
87:22:96:7b:a3:39:b6:8b:3a:3d:44:87:e2:72:c8:43:c9:a3:
b5:de:ce:38:4b:ef:27:b3:f8:16:04:22:bc:26:92:e4:7c:34:
29:bd:e8:9f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTU4MjZBRjExMC8GA1UEBRMoNjkxMUQ1NTBGMzhBNEY2RUM5MTAxQ0ZFNzJFRDdG
NkQ5MTYxNDc3MTAeFw0yNTA0MjgwMjMxNTdaFw0yNTA0MzAwMjMxNTdaMBgxFjAU
BgNVBAMTDTY4MGVlODllLWY1NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDlJuqMhB469iHsIPhnOg6waCQxOFEvMzt48RQzItsTfsS05vA7a1iACTGZ
YX30y9VEuMX5nOomQ2cdl6hjjgWFMRUx4B5F3ndSqk/w3te01ZAdNJbFqvcXB43w
wmyCo5TjWTDP6zVAlNxZ/rsAmQ/59vedQWRCWTPkbZ1DPGI/d48hyrhifEI0mGR0
NQSBnv/sI/q/VD73qDlrPmbfwe5yEAw+zIFkBck7SXJLFAJNCxYwLEKF9vpTfG5Q
qtz4GcfG48HSsULS1dMU/7ZnYSPz/tp74cFLbizXFwekVLyRC/p3STp3qngRsf1i
4y/dViaIBHZyd7Z5WGB4SYhQRHsbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjv6f
ZWF8cyckou2avcPDwmUsYR4wHwYDVR0jBBgwFoAUaRHVUPOKT27JEBz+cu1/bZFh
R3EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1ODI2LzM4MTg2RDEyRjA1NzExRUI5M0Y5QTEzOEQ4QTAxNENFL2FSSFZV
UE9LVDI3SkVCei1jdTFfYlpGaFIzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FSSFZVUE9LVDI3SkVCei1jdTFfYlpGaFIzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTU4MjYvMzgxODZEMTJGMDU3MTFFQjkzRjlBMTM4RDhB
MDE0Q0UvYVJIVlVQT0tUMjdKRUJ6LWN1MV9iWkZoUjNFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC75ma7vzYSp3V5UQZ9/T7lLCsWi7tc
ODbJr4uvHeoRbp9WkbxSFPfM5ykv9tqcFRHnniITTj3QE5JC1jbnIEn0cp6Qd1eq
vsXSt3AGhivHtHBMlJNJKYEYTknWnv/9b6oOpeetIMNzioUqh/tB5wMMBCx8ASsm
YhFD1SVpoT+XCNVBCfGj0E1ISPz7dLEXXWbQIQBvGlb5JNZcgXTEZHSEVWTjL3xP
CAHsfrbpDLFgTduBfhwjdgK9TfpT1oQSMN0obu2/3BfnnITPeK231NsR8aac7iLP
2t6HIpZ7ozm2izo9RIficshDyaO13s44S+8ns/gWBCK8JpLkfDQpveif
-----END CERTIFICATE-----
Generated at Tue Apr 29 02:02:50 2025 by rpki-client