Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File: CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier: zhlEc2cJ1UNdNWIX5XpfvWEis5H74h/vqEHG3OnhUa0=
Subject key identifier: 7B:47:92:15:8E:76:2F:2B:DE:A2:84:0C:BB:F1:E3:93:2F:E7:C0:4A
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer: /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial: 0442
Authority info access: rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number: 03F3
Signing time: Sat 26 Apr 2025 03:21:43 +0000
Manifest this update: Sat 26 Apr 2025 03:21:42 +0000
Manifest next update: Mon 28 Apr 2025 03:21:42 +0000
Files and hashes: 1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: jf0/hCkSatxrXwYhfDpKyMN/9sP0leMq5KCTeTSJ6Bo=)
2: E37F763C9B3011EFADA2C9B5762E951A.roa (hash: R47ybVaM3aUIws0k7/qUMq8A9wA1Q8F/inukxAruo/o=)
3: 1F4C8FDA8D1A11EFB7560A60762E951A.roa (hash: 8RVUtIlnT7mgvh4UJvsSR317h6/XdfB/Eycnwvwy8WE=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1090 (0x442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Validity
Not Before: Apr 26 03:21:42 2025 GMT
Not After : Apr 28 03:21:42 2025 GMT
Subject: CN=680c5147-1432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:ff:b4:d1:a8:30:2a:7c:2e:e5:78:db:85:
b3:f3:c5:e4:9a:e6:42:d7:c9:5b:11:3a:89:be:72:
90:4d:7d:31:5f:d0:29:2d:ac:ad:4d:f7:a3:e5:d8:
3b:03:9d:77:09:58:f1:36:64:a1:a0:76:dd:be:01:
ff:86:5b:0a:8c:2f:ce:b9:f6:41:39:d5:f8:11:36:
cc:a6:57:27:ae:11:e3:3c:39:66:f3:81:25:c3:9b:
5f:ab:e3:97:2a:c6:b8:46:28:7d:3f:71:93:80:ed:
97:2e:84:b4:3a:4b:a2:1c:da:5c:df:f5:62:01:31:
70:91:a8:a5:6c:bf:c2:b5:86:5a:09:5e:69:54:8a:
83:34:c6:16:7e:41:40:4c:bc:19:97:1c:42:e0:9b:
ee:db:41:d7:59:88:74:4f:25:33:38:0c:18:64:10:
0a:32:76:12:f9:24:45:89:3d:c9:af:07:60:46:8a:
24:d8:b1:20:1c:82:56:4a:de:db:59:46:7d:e7:e1:
f0:fa:e5:41:fa:ac:85:7d:86:2b:58:69:b1:a4:a9:
4f:37:45:d2:9e:34:3f:04:82:05:8d:98:77:90:b5:
12:a2:5c:37:2c:37:f9:42:81:38:a9:c7:3e:4b:df:
41:a2:f6:7e:f5:2b:ce:64:77:59:77:c3:df:60:a8:
32:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:47:92:15:8E:76:2F:2B:DE:A2:84:0C:BB:F1:E3:93:2F:E7:C0:4A
X509v3 Authority Key Identifier:
keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:18:9c:02:13:2e:5b:53:a4:9b:29:b0:8f:e2:7f:e8:50:4b:
40:58:1b:01:a2:76:d4:95:11:61:e0:cb:00:23:77:0f:59:dc:
47:95:14:68:e7:3a:bc:37:f9:a8:a7:ea:e3:fd:84:d2:af:36:
aa:51:00:e8:a1:34:4e:63:8c:4a:10:d1:2f:4d:35:4b:7e:bd:
57:6e:c7:d9:58:b9:03:9f:39:2d:56:57:86:c4:41:fe:8f:f1:
39:33:1b:82:1e:9f:10:b3:03:43:1b:91:0c:f8:23:bd:81:6f:
4f:5f:f7:aa:24:09:45:63:64:ba:40:e8:33:8b:30:fc:b5:91:
e9:77:75:fe:09:88:48:95:ae:2f:b2:fe:ba:39:28:30:fb:01:
a7:c7:bb:31:dd:ab:51:a1:42:92:df:f7:73:a3:f9:d5:62:34:
bc:dd:26:0f:b8:40:fe:25:d9:f8:ae:63:6c:97:8c:02:06:ac:
ab:aa:54:14:5f:f2:66:0d:16:84:78:72:e0:bf:c6:51:67:05:
91:93:27:20:78:96:fe:62:bd:9c:c2:ec:9c:62:d6:b8:5f:9c:
21:29:dc:85:db:8a:b3:ac:89:c2:b4:31:91:b8:8e:ca:f8:6d:
3c:be:c1:02:80:83:77:ff:4f:51:55:c9:5c:3f:96:06:a2:e8:
f6:08:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:30:36 2025 by rpki-client