Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File: X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier: ueIxq97NgdgPfeo+Ivn9MFuap8TRT9RvNsNYoMXEXww=
Subject key identifier: A9:BC:9C:3C:F0:A5:8D:55:66:E5:AE:8E:83:6E:D4:81:01:77:19:BC
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer: /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial: 0248
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number: 0242
Signing time: Mon 28 Apr 2025 04:10:18 +0000
Manifest this update: Mon 28 Apr 2025 04:10:17 +0000
Manifest next update: Wed 30 Apr 2025 04:10:17 +0000
Files and hashes: 1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: mCbQsttPhMlgqyoxR4V3JY9Ye2PZeOF9MB+QU7eEg+I=)
2: 6DA5A2565FD511EFA88ABB88762E951A.roa (hash: ro2wQBC/RLqE0zVlMpswfR5i9xWzti7o20ft60EsccY=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 584 (0x248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Validity
Not Before: Apr 28 04:10:17 2025 GMT
Not After : Apr 30 04:10:17 2025 GMT
Subject: CN=680effa9-42a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2d:9b:0e:54:db:07:37:44:2d:cd:3e:69:b7:
33:ab:09:33:00:e1:5d:dd:e9:24:cf:8e:11:70:fa:
e8:e8:3c:fb:e3:32:91:fa:18:77:6d:c3:ad:aa:ae:
78:b4:1b:9a:9a:8b:44:84:39:e2:66:c1:4c:32:31:
ad:26:b0:ba:54:fe:b2:e8:d9:05:07:d9:cf:fa:47:
60:11:94:ff:b6:2a:38:cc:b4:9b:48:79:83:c7:84:
aa:cf:1e:59:38:d8:c5:60:6c:f8:78:90:14:d1:43:
c3:f0:5a:9c:85:dc:e1:b0:36:17:b8:a7:0e:39:45:
16:4c:6e:70:c1:e3:9a:ae:c9:4a:74:f1:23:a7:53:
47:85:45:37:98:78:43:7c:cd:15:fe:b6:e1:a8:a3:
0f:86:a1:ce:27:7d:03:e4:24:dd:05:53:79:0c:ca:
57:fa:dd:d8:21:10:b7:f2:eb:55:0e:a6:7c:39:8e:
8c:ea:79:58:10:c8:22:98:30:f7:c4:55:ad:2f:46:
07:64:a0:b3:24:67:f6:bf:00:e9:39:d5:a3:eb:a2:
cc:c8:be:3a:6f:d3:bd:86:ef:d1:85:88:b3:7c:59:
30:ae:5b:42:3d:cf:58:a2:0a:16:ee:87:56:e3:c8:
9e:74:7c:ac:3e:25:23:75:51:e2:ff:c0:58:06:0b:
ba:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:9C:3C:F0:A5:8D:55:66:E5:AE:8E:83:6E:D4:81:01:77:19:BC
X509v3 Authority Key Identifier:
keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:70:88:13:cd:38:ff:a2:3e:82:43:4b:59:0a:c2:c1:1b:f4:
78:98:d9:8d:3c:08:9d:1c:88:b4:5a:f4:0c:c6:88:d1:a5:57:
58:05:48:5d:46:11:a9:a4:8b:35:91:76:14:fb:a0:ec:ba:cc:
5f:ee:22:75:6f:45:14:89:a9:4c:5e:03:35:4d:e6:c2:43:91:
43:97:57:81:d6:4d:34:ae:d9:b0:ad:fa:2b:86:f3:81:9c:1f:
21:0f:05:5a:4a:a2:e4:2e:85:a7:37:9f:51:52:37:a1:ca:40:
99:b5:0a:9c:19:90:08:8d:2e:18:db:fc:3a:b3:0f:f9:65:44:
21:9f:a0:22:4d:32:10:9d:55:39:7d:27:6a:af:dd:3f:ba:77:
f4:2e:83:99:3f:97:f9:f7:03:01:31:56:75:8f:72:bc:a0:65:
16:bb:3e:2d:2d:c3:62:52:91:c5:97:10:dd:d1:a5:64:cf:06:
d7:71:8c:e1:c3:5e:5a:28:a9:7b:56:95:f0:88:1b:9c:34:28:
e8:0c:fd:09:61:b1:e2:76:be:ad:59:ee:66:ef:0c:cf:93:9e:
4a:ef:24:06:16:b1:c2:99:b1:12:ed:88:ec:c0:6c:10:06:34:
02:75:5a:42:1b:f3:99:07:b3:d1:06:20:7a:d5:43:ab:ba:53:
5e:a8:58:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:15:05 2025 by rpki-client