Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File: ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier: +2aecy2Gs/F3nZHQJ5CPK/Sxhpr8APKrWCQKtDDIkBo=
Subject key identifier: EF:58:29:8A:CE:84:8C:99:8F:4B:13:4E:C6:2F:AA:B5:8B:7D:15:51
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer: /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial: 9E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number: 9D
Signing time: Sun 15 Jun 2025 05:09:50 +0000
Manifest this update: Sun 15 Jun 2025 05:09:50 +0000
Manifest next update: Tue 17 Jun 2025 05:09:50 +0000
Files and hashes: 1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: ePFqLbZ2wEwmwRx1ZBOixX33WQI1qFfeY2CTAM/yTO8=)
2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 05:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Validity
Not Before: Jun 15 05:09:50 2025 GMT
Not After : Jun 17 05:09:50 2025 GMT
Subject: CN=684e559e-c145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:20:a1:cd:00:d6:1a:7a:8a:86:95:0d:29:
ca:06:21:40:b6:3b:bc:61:fa:3f:18:a7:4e:24:ba:
42:7e:d1:3c:6f:f6:e5:cb:87:04:96:ac:57:8a:e8:
3f:32:81:3c:a4:bf:9f:8a:41:96:59:88:98:35:9b:
73:63:dc:ac:ec:90:54:43:47:a6:6c:9f:5b:da:4a:
9a:c7:7c:74:e5:e8:a8:15:66:ad:85:18:53:a1:b1:
1b:b7:9a:e9:04:11:00:4f:6c:3c:87:59:3a:ec:05:
c1:8d:b6:ac:ae:61:99:0c:7e:63:45:ef:71:fe:51:
56:0d:4f:dd:40:5f:98:a2:92:ef:58:40:69:27:80:
f4:8d:de:c6:04:aa:8b:b4:14:4c:dc:79:47:51:d2:
4b:9e:14:08:d1:17:5c:5d:61:65:7a:4c:33:51:a8:
d4:2a:9f:28:7a:ac:83:8f:09:e5:84:f1:89:a2:da:
ac:f3:4f:06:cc:6c:09:f3:e6:c7:ea:4b:2b:1b:cd:
ee:0a:25:c6:02:60:71:60:16:f7:b6:d0:fa:e3:2e:
d4:4e:a4:b4:20:bd:98:0d:4e:e1:b9:34:ce:4a:9f:
14:39:74:78:0d:2c:e4:4f:96:a2:4e:1a:eb:a7:79:
33:bd:11:bd:96:31:e4:55:6c:d3:7f:59:81:79:81:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:29:8A:CE:84:8C:99:8F:4B:13:4E:C6:2F:AA:B5:8B:7D:15:51
X509v3 Authority Key Identifier:
keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:42:c9:c8:f9:1b:14:1b:38:a0:7a:00:59:48:12:9d:ea:f8:
8a:1c:e3:1d:af:1b:f8:8e:75:ea:ed:74:d3:f6:50:67:ce:08:
e1:97:19:6b:5d:8f:7e:0b:9f:ff:11:73:34:02:a3:7d:77:4f:
a6:1a:c3:96:18:5f:70:8d:92:29:99:d1:3c:81:03:b5:21:4b:
69:23:d7:49:e3:95:fc:c9:1f:1b:45:a1:1f:84:19:4b:34:de:
2d:58:09:37:aa:35:4f:1c:45:22:ad:d5:65:3c:cc:a9:23:73:
d4:48:a8:2a:87:09:72:37:17:dc:d9:c5:b8:49:64:01:c2:9f:
3e:78:81:1b:40:11:fe:e9:53:d5:67:42:07:68:4a:8c:c4:b6:
8b:ab:9b:24:d1:20:dc:44:0c:26:20:a2:f5:8f:4e:03:79:9f:
7f:48:80:33:89:55:e8:aa:14:56:79:65:3e:2c:c3:5d:64:86:
e7:c6:eb:e9:64:41:b0:f8:b1:ff:50:b3:26:a0:f0:b8:b6:ad:
49:a4:95:19:58:1e:a1:09:41:59:11:6a:b4:6f:51:41:43:d6:
66:8e:5e:72:cd:a6:98:8b:cc:2c:6b:84:91:0d:97:ba:ce:a0:
58:41:5d:d2:c2:8a:a0:28:c5:77:4f:41:7b:b0:c4:7b:33:b7:
06:fd:b5:ca
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMzJBRjExMC8GA1UEBRMoOTJDQTJCNDFFRUMzRTAxQTE5Mzg5RTIyMjA4OEFD
M0ZDM0ExNDhFRDAeFw0yNTA2MTUwNTA5NTBaFw0yNTA2MTcwNTA5NTBaMBgxFjAU
BgNVBAMTDTY4NGU1NTllLWMxNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCt4yChzQDWGnqKhpUNKcoGIUC2O7xh+j8Yp04kukJ+0Txv9uXLhwSWrFeK
6D8ygTykv5+KQZZZiJg1m3Nj3KzskFRDR6Zsn1vaSprHfHTl6KgVZq2FGFOhsRu3
mukEEQBPbDyHWTrsBcGNtqyuYZkMfmNF73H+UVYNT91AX5iiku9YQGkngPSN3sYE
qou0FEzceUdR0kueFAjRF1xdYWV6TDNRqNQqnyh6rIOPCeWE8Ymi2qzzTwbMbAnz
5sfqSysbze4KJcYCYHFgFve20PrjLtROpLQgvZgNTuG5NM5KnxQ5dHgNLORPlqJO
GuuneTO9Eb2WMeRVbNN/WYF5gQnhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU71gp
is6EjJmPSxNOxi+qtYt9FVEwHwYDVR0jBBgwFoAUksorQe7D4BoZOJ4iIIisP8Oh
SO0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTMyLzhCRkJEOTUyRDFBQzExRUZBNUQxMTY1NTc2MkU5NTFBL2tzb3JR
ZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzb3JRZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCqQsnI+RsUGzigegBZSBKd6viKHOMd
rxv4jnXq7XTT9lBnzgjhlxlrXY9+C5//EXM0AqN9d0+mGsOWGF9wjZIpmdE8gQO1
IUtpI9dJ45X8yR8bRaEfhBlLNN4tWAk3qjVPHEUirdVlPMypI3PUSKgqhwlyNxfc
2cW4SWQBwp8+eIEbQBH+6VPVZ0IHaEqMxLaLq5sk0SDcRAwmIKL1j04DeZ9/SIAz
iVXoqhRWeWU+LMNdZIbnxuvpZEGw+LH/ULMmoPC4tq1JpJUZWB6hCUFZEWq0b1FB
Q9Zmjl5yzaaYi8wsa4SRDZe6zqBYQV3SwoqgKMV3T0F7sMR7M7cG/bXK
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:11 2025 by rpki-client