Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File: osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier: b3wUheNGb9I+rZiNB5oOzGoK+lcn9myDKJDpj5b3LLk=
Subject key identifier: 41:28:6A:2C:4A:F4:9A:9A:8F:22:03:B4:A2:57:29:FF:32:F2:55:BC
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer: /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial: 0D1A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number: 0D0E
Signing time: Sun 27 Apr 2025 01:03:20 +0000
Manifest this update: Sun 27 Apr 2025 01:03:19 +0000
Manifest next update: Tue 29 Apr 2025 01:03:19 +0000
Files and hashes: 1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: iqDjDE1bXqxYUkpIiNDGRl9O/xe0rQc+C0sB6B88yPM=)
2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3354 (0xd1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Validity
Not Before: Apr 27 01:03:19 2025 GMT
Not After : Apr 29 01:03:19 2025 GMT
Subject: CN=680d8258-a5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:59:c5:3d:3b:ca:0d:d6:11:ea:db:e0:58:fe:
c5:41:34:f2:9e:49:bd:b3:1f:72:30:75:55:cd:55:
b8:28:70:e7:e2:14:ae:2a:35:34:8e:f2:4b:94:2b:
4e:74:5f:15:32:68:35:63:04:d2:06:e4:f0:a6:75:
85:50:9a:1d:5a:d7:d9:22:29:48:b1:cb:13:6a:04:
8d:cf:51:ad:39:3a:fc:68:b5:63:78:3f:c2:88:4f:
72:81:a2:c7:11:6f:fc:7d:ef:18:a7:a4:c2:9f:21:
8a:67:d3:05:2c:aa:b5:af:0f:7e:c6:90:3c:dd:75:
99:fe:4a:71:62:09:89:f2:5c:80:b0:c2:5e:31:6e:
aa:80:d8:36:3b:ec:27:20:99:43:e7:a8:0c:09:b7:
56:da:8c:29:83:c8:d2:de:64:55:0e:23:04:e0:4a:
c1:99:f0:7e:ef:da:31:6a:68:30:79:69:a7:3e:35:
96:79:55:f5:2e:57:1e:75:6c:88:c1:10:87:ec:bd:
cb:34:32:28:d2:ef:5b:47:5f:8b:11:5b:58:a6:07:
5b:24:57:4e:98:8c:ed:50:a9:53:1a:db:99:7d:d5:
4f:49:76:db:0f:67:2c:45:13:54:0c:5a:9c:66:7a:
e7:f0:19:2d:48:ed:53:a4:7f:f1:7a:57:7a:91:ec:
e7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:28:6A:2C:4A:F4:9A:9A:8F:22:03:B4:A2:57:29:FF:32:F2:55:BC
X509v3 Authority Key Identifier:
keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e7:ed:5a:8c:a2:94:b9:38:2b:d1:ed:e4:cc:2f:12:a6:21:05:
ac:98:8b:21:51:35:3a:da:c7:33:d2:7d:30:94:54:95:03:91:
1c:b2:ad:fd:b2:f9:c3:ca:4c:bd:ae:bf:62:2e:65:9c:5e:80:
83:c7:a8:55:f6:f9:ac:a0:8d:1f:15:cd:b6:be:df:28:21:89:
78:ac:bd:78:16:98:00:a1:96:45:73:28:b2:40:1c:9b:f1:ab:
b4:3e:99:bb:de:b5:f3:b8:09:74:1d:a8:89:6f:53:09:60:28:
01:51:f9:ed:62:b3:94:65:37:db:51:75:6c:53:b3:f5:10:38:
90:50:35:09:6a:e9:c9:fa:65:39:5e:da:62:46:02:d1:c0:be:
93:0c:6c:39:74:77:26:a9:f7:ac:79:2f:bf:56:be:7d:27:ec:
51:33:5a:3c:38:7f:b9:58:33:ee:7f:bc:c3:4a:96:a4:08:48:
1e:56:f1:c4:f1:6b:66:aa:64:83:4d:08:13:cf:a6:e8:a5:0d:
b1:bd:06:f6:00:b2:fa:68:a0:80:f7:3e:d9:94:f4:f7:c4:85:
c0:26:7a:65:c7:b0:db:38:a5:86:6a:27:54:7d:f3:e5:88:c8:
18:0f:b7:86:6d:26:60:30:80:2c:ce:18:0b:ca:73:4e:42:ce:
75:09:6b:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDRowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdCRDZBRjExMC8GA1UEBRMoQTJDNkE4NDdCOEYzMTIwMDMwODM0MTg3MTQ3REZD
NjVDOEVFOTRDMDAeFw0yNTA0MjcwMTAzMTlaFw0yNTA0MjkwMTAzMTlaMBgxFjAU
BgNVBAMTDTY4MGQ4MjU4LWE1YzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfWcU9O8oN1hHq2+BY/sVBNPKeSb2zH3IwdVXNVbgocOfiFK4qNTSO8kuU
K050XxUyaDVjBNIG5PCmdYVQmh1a19kiKUixyxNqBI3PUa05OvxotWN4P8KIT3KB
oscRb/x97xinpMKfIYpn0wUsqrWvD37GkDzddZn+SnFiCYnyXICwwl4xbqqA2DY7
7CcgmUPnqAwJt1bajCmDyNLeZFUOIwTgSsGZ8H7v2jFqaDB5aac+NZZ5VfUuVx51
bIjBEIfsvcs0MijS71tHX4sRW1imB1skV06YjO1QqVMa25l91U9JdtsPZyxFE1QM
WpxmeufwGS1I7VOkf/F6V3qR7OcTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQShq
LEr0mpqPIgO0olcp/zLyVbwwHwYDVR0jBBgwFoAUosaoR7jzEgAwg0GHFH38Zcju
lMAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QkQ2LzM2NjAzNUE0MjNGMjExRTZCRDE3RDgyM0Y4QUVBMjI4L29zYW9S
N2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29zYW9SN2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdCRDYvMzY2MDM1QTQyM0YyMTFFNkJEMTdEODIzRjhB
RUEyMjgvb3Nhb1I3anpFZ0F3ZzBHSEZIMzhaY2p1bE1BLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDn7VqMopS5OCvR7eTMLxKmIQWsmIsh
UTU62scz0n0wlFSVA5Ecsq39svnDyky9rr9iLmWcXoCDx6hV9vmsoI0fFc22vt8o
IYl4rL14FpgAoZZFcyiyQByb8au0Ppm73rXzuAl0HaiJb1MJYCgBUfntYrOUZTfb
UXVsU7P1EDiQUDUJaunJ+mU5XtpiRgLRwL6TDGw5dHcmqfeseS+/Vr59J+xRM1o8
OH+5WDPuf7zDSpakCEgeVvHE8WtmqmSDTQgTz6bopQ2xvQb2ALL6aKCA9z7ZlPT3
xIXAJnplx7DbOKWGaidUffPliMgYD7eGbSZgMIAszhgLynNOQs51CWvw
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:32 2025 by rpki-client