Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File: pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier: GeDJdBQzFs7nDFbsaLvHtC7eH+7CXUqk7wknIHom3IY=
Subject key identifier: F8:1A:37:F8:ED:DD:EA:27:25:53:F8:BB:00:F1:D0:4D:65:91:53:82
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer: /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial: 016B
Authority info access: rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number: 016B
Signing time: Sat 14 Jun 2025 04:39:49 +0000
Manifest this update: Sat 14 Jun 2025 04:39:48 +0000
Manifest next update: Mon 16 Jun 2025 04:39:48 +0000
Files and hashes: 1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: oVAYnc1YggwT+huEZaF406qK39zcMlYfqDSObERui5k=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Jun 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363 (0x16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Validity
Not Before: Jun 14 04:39:48 2025 GMT
Not After : Jun 16 04:39:48 2025 GMT
Subject: CN=684cfd15-98c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:4c:81:cd:9f:98:db:03:4c:c3:98:1d:03:
43:8a:06:57:2f:d0:35:0d:30:5a:4f:d5:eb:9a:fd:
03:c3:a6:ae:14:a2:4b:d3:ea:ec:61:0a:81:4b:67:
41:2b:96:81:93:ae:2a:cd:d4:84:13:ad:db:86:ef:
a2:4d:37:82:bf:d5:9c:74:2b:b1:aa:f2:d9:6b:dc:
0f:ca:9d:a1:aa:d5:3b:51:b3:40:0e:d3:46:a1:e0:
4a:8a:4e:26:d8:56:a0:a0:ad:03:a3:0f:0f:c0:41:
56:06:ec:6f:bd:65:43:5b:fb:4e:41:a8:52:8a:cc:
8a:ef:6c:89:e9:d5:ab:df:ad:8d:15:d1:31:40:35:
57:39:cb:12:d7:e5:51:52:93:6d:1c:d5:8a:0e:0a:
e0:91:36:63:c7:a8:e2:72:59:ed:9c:7e:4a:2a:3d:
58:7f:82:b5:8f:fe:c1:53:d6:1e:25:72:e6:b6:0f:
9f:af:ba:14:06:31:fb:98:ac:56:63:ce:2f:93:0b:
2a:b3:ba:c3:c2:8a:e3:da:4d:19:46:47:64:c9:40:
81:5d:10:3c:c9:ab:5e:0f:83:b2:8c:d7:0f:21:3b:
6d:0d:ad:91:7a:49:bc:ea:45:9f:40:47:aa:31:25:
ff:c4:a8:1a:9c:a4:33:6c:5b:84:5e:cf:1d:5e:88:
47:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:37:F8:ED:DD:EA:27:25:53:F8:BB:00:F1:D0:4D:65:91:53:82
X509v3 Authority Key Identifier:
keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0d:77:93:5a:7b:01:a9:bf:83:52:68:c2:d5:54:7f:45:3e:
c9:16:f1:9d:4a:23:43:fe:84:ae:5e:f4:ba:8b:76:16:00:9e:
ef:22:18:73:67:7b:54:9d:22:2c:9a:c2:be:6b:80:cb:27:7a:
e7:f8:3a:48:6b:c6:2c:2a:08:48:da:d0:ac:30:ba:30:29:a9:
78:33:1f:eb:a6:47:ca:f4:fb:48:fa:e9:9f:fe:3c:86:68:60:
59:3b:ab:eb:d5:1a:a0:5d:8a:af:fa:36:3a:df:72:fb:d7:2a:
00:10:03:96:68:63:c4:9f:24:f0:79:4d:08:5f:b6:e3:46:f3:
12:a9:ca:73:70:c4:dd:f5:fc:c2:e9:c7:f4:ac:34:5d:b7:96:
8f:0e:15:29:c1:f6:18:2e:c1:c1:47:91:8a:b4:41:51:53:d1:
7b:fc:2d:45:7c:fd:f8:6f:2d:a7:42:28:74:09:05:62:68:50:
ca:36:48:f2:21:f5:11:86:55:22:d8:76:a4:6d:34:ca:8e:de:
b2:d0:c4:9c:8b:10:b2:19:2f:c0:34:89:ea:4e:70:eb:d9:d3:
a2:41:d7:c9:ab:9a:df:c3:23:e4:2b:4b:bf:fc:44:bd:a2:49:
07:aa:7c:3e:1f:24:43:48:f2:69:d1:65:4e:98:2a:c6:a8:32:
79:83:e1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:00:04 2025 by rpki-client