
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
File: 0JparVoXc9hrHSbdXRxET8ys9uQ.mft (raw, json)
Hash identifier: k2RMHJQifD/OF9dnjs0p1MRR4L7L9AOPuy1mr14/Xgs=
Subject key identifier: CF:1D:AC:0E:C1:BA:43:6A:B2:D5:8F:2E:F7:6C:27:7F:0A:1B:3F:C5
Authority key identifier: D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
Certificate issuer: /CN=F36180A1AF/serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Certificate serial: 012D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
Manifest number: 012D
Signing time: Tue 29 Apr 2025 04:40:36 +0000
Manifest this update: Tue 29 Apr 2025 04:40:35 +0000
Manifest next update: Thu 01 May 2025 04:40:35 +0000
Files and hashes: 1: 0JparVoXc9hrHSbdXRxET8ys9uQ.crl (hash: tt9n6S3j/ySUJrn6pFxy+IsInRhi2k5aqMaPoQ+KjPA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 04:40:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36180A1AF, serialNumber=D09A5AAD5A1773D86B1D26DD5D1C444FCCACF6E4
Validity
Not Before: Apr 29 04:40:35 2025 GMT
Not After : May 1 04:40:35 2025 GMT
Subject: CN=68105844-0dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:76:db:d2:05:12:e8:56:c1:c3:ec:56:f9:35:
03:b0:4e:cd:50:19:79:86:6b:d8:4f:58:00:50:44:
e8:d7:8d:4e:19:36:de:1c:74:80:2c:8e:17:5c:f6:
ef:45:4b:94:17:ed:76:0e:44:3e:8b:69:3b:fc:6a:
36:ed:41:a6:fd:be:84:9f:37:f4:fe:98:d3:28:56:
bb:25:a8:fe:64:6a:c8:1b:63:17:e6:fd:65:3f:6c:
4d:86:ad:30:ec:ea:06:25:81:55:e7:09:f1:ac:9d:
23:26:4b:c2:81:cc:51:ec:45:17:10:71:d6:ff:97:
78:63:97:86:c3:3f:f3:1c:ae:f9:45:c6:48:6f:b5:
2b:13:c2:d7:9b:85:96:3b:92:e4:6b:90:82:ce:00:
c0:a7:56:ed:2e:98:d2:70:e3:6f:72:98:c6:0d:a1:
fe:db:62:68:f4:f1:07:5b:1c:95:13:7e:bd:fa:c5:
81:19:a3:43:42:95:68:ab:f4:9d:08:c1:40:1b:4b:
78:f8:70:48:29:24:e5:ed:90:3a:71:91:98:b9:35:
08:88:2c:10:1a:7f:12:6e:c3:87:f4:27:e2:d7:e5:
01:ab:75:9d:e0:66:43:85:cd:93:e0:ff:db:f8:3d:
e4:15:dd:88:e3:ce:34:5f:0c:24:32:a5:6a:f6:db:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:AC:0E:C1:BA:43:6A:B2:D5:8F:2E:F7:6C:27:7F:0A:1B:3F:C5
X509v3 Authority Key Identifier:
keyid:D0:9A:5A:AD:5A:17:73:D8:6B:1D:26:DD:5D:1C:44:4F:CC:AC:F6:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0JparVoXc9hrHSbdXRxET8ys9uQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36180A1/4EB508143F5A11EFB5925070762E951A/0JparVoXc9hrHSbdXRxET8ys9uQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
57:81:e7:b3:42:f4:b9:e8:a4:67:02:eb:f2:c4:2d:f0:52:9b:
8b:c2:73:6d:90:ad:5d:30:a8:92:f6:39:6c:d8:e7:39:4c:c3:
79:b5:26:37:3a:71:35:35:87:f5:65:45:c6:98:b8:f7:8a:d9:
38:de:95:a1:8a:ce:64:90:fb:22:d0:01:bc:17:f2:b8:2c:d7:
bf:69:a9:00:cc:e7:59:b6:c3:93:a1:8e:d5:38:63:d4:6e:3f:
be:bc:13:8c:9d:12:39:8d:81:0d:81:4e:d9:96:85:b6:18:f1:
59:3b:e6:ce:7c:c2:a6:4b:64:20:7f:e0:aa:64:48:97:47:ba:
de:ae:4a:e8:73:85:ea:1a:4e:62:6a:b8:af:f4:e0:14:30:7c:
bc:db:1f:72:e9:8b:1a:18:42:d2:5f:7e:e6:80:9a:a7:6d:8e:
af:53:5a:30:6e:2f:91:d1:51:a9:ad:82:29:8a:1a:d3:9d:34:
fd:41:0e:a4:38:6a:c0:c9:13:c4:dd:93:f4:e1:09:dd:4f:1d:
2d:d4:d5:b9:02:dc:9f:9d:5f:04:05:3d:c7:85:ea:7a:2c:8e:
67:b1:46:70:7b:24:35:51:d9:0b:2e:4e:ad:0d:46:28:3e:2c:
70:59:df:8e:a1:0b:54:c8:6f:6e:b1:be:d9:25:60:03:a1:84:
17:bd:b0:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTgwQTFBRjExMC8GA1UEBRMoRDA5QTVBQUQ1QTE3NzNEODZCMUQyNkRENUQxQzQ0
NEZDQ0FDRjZFNDAeFw0yNTA0MjkwNDQwMzVaFw0yNTA1MDEwNDQwMzVaMBgxFjAU
BgNVBAMTDTY4MTA1ODQ0LTBkZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPdtvSBRLoVsHD7Fb5NQOwTs1QGXmGa9hPWABQROjXjU4ZNt4cdIAsjhdc
9u9FS5QX7XYORD6LaTv8ajbtQab9voSfN/T+mNMoVrslqP5kasgbYxfm/WU/bE2G
rTDs6gYlgVXnCfGsnSMmS8KBzFHsRRcQcdb/l3hjl4bDP/McrvlFxkhvtSsTwteb
hZY7kuRrkILOAMCnVu0umNJw429ymMYNof7bYmj08QdbHJUTfr36xYEZo0NClWir
9J0IwUAbS3j4cEgpJOXtkDpxkZi5NQiILBAafxJuw4f0J+LX5QGrdZ3gZkOFzZPg
/9v4PeQV3YjjzjRfDCQypWr2254JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzx2s
DsG6Q2qy1Y8u92wnfwobP8UwHwYDVR0jBBgwFoAU0JparVoXc9hrHSbdXRxET8ys
9uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4MEExLzRFQjUwODE0M0Y1QTExRUZCNTkyNTA3MDc2MkU5NTFBLzBKcGFy
Vm9YYzlockhTYmRYUnhFVDh5czl1US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBKcGFyVm9YYzlockhTYmRYUnhFVDh5czl1US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTgwQTEvNEVCNTA4MTQzRjVBMTFFRkI1OTI1MDcwNzYy
RTk1MUEvMEpwYXJWb1hjOWhySFNiZFhSeEVUOHlzOXVRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXgeezQvS56KRnAuvyxC3wUpuLwnNt
kK1dMKiS9jls2Oc5TMN5tSY3OnE1NYf1ZUXGmLj3itk43pWhis5kkPsi0AG8F/K4
LNe/aakAzOdZtsOToY7VOGPUbj++vBOMnRI5jYENgU7ZloW2GPFZO+bOfMKmS2Qg
f+CqZEiXR7rerkroc4XqGk5iariv9OAUMHy82x9y6YsaGELSX37mgJqnbY6vU1ow
bi+R0VGprYIpihrTnTT9QQ6kOGrAyRPE3ZP04QndTx0t1NW5AtyfnV8EBT3Hhep6
LI5nsUZweyQ1UdkLLk6tDUYoPixwWd+OoQtUyG9usb7ZJWADoYQXvbCv
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:21 2025 by rpki-client