Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
File: DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft (raw, json)
Hash identifier: AyVJLlgn8BuLHb37jwzx9yzaX2RXiXkJwBel7stLqJs=
Subject key identifier: 62:F7:0E:02:35:F3:07:06:3F:7F:67:25:E5:7E:35:EB:D1:F0:7A:BF
Authority key identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
Certificate issuer: /CN=F36177FDAF/serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Certificate serial: 0451
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
Manifest number: 0450
Signing time: Mon 28 Apr 2025 03:01:46 +0000
Manifest this update: Mon 28 Apr 2025 03:01:45 +0000
Manifest next update: Wed 30 Apr 2025 03:01:45 +0000
Files and hashes: 1: DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl (hash: R9BEnZpAg2YfjdWA1at3mdLJl2P7khlQAbZxvxuvNTo=)
2: 60ED4636F92F11ECB2841083F1222468.roa (hash: +OqQfy+sVKv4R+tkPpa18z23bTOCNf4eXR6WRiM8IYA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1105 (0x451)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36177FDAF, serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Validity
Not Before: Apr 28 03:01:45 2025 GMT
Not After : Apr 30 03:01:45 2025 GMT
Subject: CN=680eef9a-075d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:d0:47:0a:64:7e:de:b7:53:c2:d1:67:36:
bb:2e:c9:a8:83:e2:7e:e0:ce:00:43:2b:4e:85:53:
dd:e3:36:ba:84:3a:a6:ac:99:6b:5f:a9:52:d6:8b:
57:35:23:f4:10:09:04:0b:42:cf:0a:41:9d:7a:f7:
3c:be:50:de:34:3b:96:ba:50:de:4f:94:e7:35:98:
04:68:b5:25:00:79:f1:2a:39:0c:51:fe:9c:19:e8:
a6:b9:ef:55:6c:54:51:de:16:9c:42:cd:3f:d9:85:
fe:3a:3f:03:13:eb:37:08:3c:92:87:75:5a:24:39:
d6:05:d0:cd:c7:9e:16:3f:ce:be:dd:eb:c7:7e:1a:
8b:13:9c:60:3f:88:42:31:4d:a3:0c:5a:02:1c:57:
4b:85:b5:ff:7d:c5:bd:96:56:3d:01:d0:5f:ff:1f:
60:d7:64:4f:02:ea:ed:5a:2f:0d:60:19:42:e1:38:
15:33:c9:70:4b:b6:29:5b:62:e4:3f:44:84:b5:43:
fd:c9:66:ad:12:ab:6a:78:78:c5:5e:18:e5:7e:cd:
4d:c7:fd:6f:11:e7:4a:19:f0:e3:c7:26:7d:8b:1f:
2b:66:8f:1a:16:e3:38:08:fc:de:4d:8a:aa:e4:0e:
18:3c:8b:b6:f0:4d:40:49:99:13:53:36:ab:31:f7:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F7:0E:02:35:F3:07:06:3F:7F:67:25:E5:7E:35:EB:D1:F0:7A:BF
X509v3 Authority Key Identifier:
keyid:0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b1:93:3a:92:23:2f:e7:6c:9c:cf:99:06:15:aa:45:ba:23:b5:
77:9d:a2:69:3b:fd:ac:4b:0e:3e:82:e2:c5:57:de:0f:fe:27:
82:2e:0d:ff:ee:ff:65:bb:ac:a8:8f:d5:d7:5e:8b:cd:f0:56:
e4:12:ef:28:40:ad:6a:a1:f8:fb:5c:35:24:c6:fc:b8:6e:59:
1b:78:d1:72:cd:ec:0e:04:d2:f3:b6:ad:08:d0:7f:d2:12:79:
51:ca:17:80:f9:8c:47:80:ac:0d:1e:60:ee:c7:e1:36:ca:ff:
40:8c:27:d7:be:88:72:ed:7d:07:34:93:d4:7d:3d:c5:2f:4c:
e0:25:35:86:f2:be:4f:ce:a3:d5:ce:0c:ad:7a:b8:be:4f:cb:
48:ed:c7:13:35:30:a3:ca:28:1b:7b:20:80:8b:14:c4:c2:f1:
17:71:b0:5e:57:ed:32:58:26:3e:e8:e9:9b:c2:9a:ee:81:f1:
c4:db:e0:87:11:19:1d:bc:4f:4f:ad:dd:9e:98:d9:2e:42:10:
4a:e6:06:2a:90:53:89:e5:4b:01:0a:17:90:a2:cc:bc:58:31:
f5:e2:50:35:cf:59:f0:64:ae:9a:30:94:48:4b:73:29:5d:1a:
6d:75:d7:76:a2:c6:42:78:11:2d:80:09:3d:2e:4b:2b:6e:0c:
2f:8a:45:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:31 2025 by rpki-client