Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File: zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier: GFKdBsLfXdJzZQBIud3sB33W9pHYrI+oZxCXYBUPtjE=
Subject key identifier: 43:4C:23:F2:8D:A9:D4:4D:E8:9D:6D:E9:25:A6:94:49:C6:6F:F3:B2
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer: /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial: 01C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number: 01C9
Signing time: Mon 28 Apr 2025 04:26:01 +0000
Manifest this update: Mon 28 Apr 2025 04:26:00 +0000
Manifest next update: Wed 30 Apr 2025 04:26:00 +0000
Files and hashes: 1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: PsYs4kWMe61vCfcLYR+E5/c2rp7WmPtafQLkJiOCFDo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 457 (0x1c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Validity
Not Before: Apr 28 04:26:00 2025 GMT
Not After : Apr 30 04:26:00 2025 GMT
Subject: CN=680f0358-456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:06:72:94:21:68:bb:15:27:f6:5c:a3:25:
87:e5:53:a3:40:9f:23:f9:3a:c5:4f:e5:25:a2:c1:
ed:2e:8b:92:fd:5e:ca:5d:3d:05:85:04:a6:e4:14:
4d:de:e7:5f:89:99:a7:fb:73:23:bd:da:04:5f:92:
7e:12:e2:45:e7:5f:9f:72:50:41:42:95:ec:e5:19:
f3:ff:af:b5:c6:f7:11:a4:a8:32:1f:53:22:85:56:
1c:20:11:bb:be:21:43:29:84:aa:d3:25:1c:1c:83:
bd:29:d3:21:64:80:a3:81:71:81:39:c6:27:f7:f7:
0d:1c:96:db:e4:e3:b7:5f:ed:aa:1d:84:ad:43:a5:
62:9a:10:ae:01:2a:f9:1f:d1:ee:3a:b9:ed:22:78:
32:a8:16:bd:12:df:c1:45:3e:fc:f5:5c:d7:b9:33:
0f:50:49:c5:8d:14:0d:b4:37:94:77:dd:92:ef:1e:
e7:29:77:f3:fc:05:8a:04:d7:67:52:0b:56:72:9f:
d3:26:05:1a:0c:a5:11:6e:8a:59:18:51:7f:4d:c6:
00:de:58:c9:b9:5c:04:f8:08:8b:f1:64:66:51:bc:
bc:d2:3c:29:a4:ee:0f:89:f5:21:6e:9d:19:b2:6b:
83:dd:76:5a:11:46:ba:06:38:3f:87:6e:1f:9e:69:
d8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:23:F2:8D:A9:D4:4D:E8:9D:6D:E9:25:A6:94:49:C6:6F:F3:B2
X509v3 Authority Key Identifier:
keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
13:26:f0:95:f6:90:f6:bf:f6:48:b0:4d:37:dc:3f:0f:7f:bb:
9d:03:17:d8:24:49:54:f6:1c:37:a8:7a:41:f8:16:a8:d5:63:
69:20:03:f9:6e:6f:42:4f:06:cf:fa:a4:7c:c9:56:d9:34:20:
6f:95:22:38:c1:99:63:9a:c0:5c:21:49:58:ea:2e:6d:12:b6:
d9:84:7f:a3:95:b0:30:e8:8c:15:ef:d5:62:62:28:77:b8:4d:
74:1c:d7:19:22:bf:71:be:fb:f7:da:42:03:b4:29:68:88:a5:
d3:9b:3c:52:5f:4d:17:b3:22:30:0b:1b:f6:b1:66:12:a4:3b:
84:33:2f:a7:87:64:be:c6:7c:bf:b6:a7:5e:28:4a:db:d9:da:
95:c4:ec:35:47:f6:ee:b4:7e:41:4f:14:ae:56:7a:86:2f:c4:
82:7d:71:03:65:45:29:47:21:f1:9f:a8:a0:01:4b:39:37:cc:
57:37:b0:07:bb:72:b5:cd:3d:9a:5d:03:93:60:c1:88:6a:5d:
b5:82:c1:c1:71:b6:30:24:23:89:0e:ba:ec:2f:b5:f9:5b:aa:
43:24:5f:d7:35:3d:1e:04:75:d8:8d:28:63:84:f9:ee:ca:41:
1c:84:24:92:f6:59:67:c9:69:4d:c5:a1:9d:ce:36:e0:92:7a:
4f:2f:59:b7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAckwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjI4RDBBRjExMC8GA1UEBRMoQ0YzRjRGOTI0M0E2MUQzQkVEOTMzQ0MwRjM1MzND
QTJCRTA5M0JEQzAeFw0yNTA0MjgwNDI2MDBaFw0yNTA0MzAwNDI2MDBaMBgxFjAU
BgNVBAMTDTY4MGYwMzU4LTQ1NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA8QZylCFouxUn9lyjJYflU6NAnyP5OsVP5SWiwe0ui5L9XspdPQWFBKbk
FE3e51+Jmaf7cyO92gRfkn4S4kXnX59yUEFClezlGfP/r7XG9xGkqDIfUyKFVhwg
Ebu+IUMphKrTJRwcg70p0yFkgKOBcYE5xif39w0cltvk47df7aodhK1DpWKaEK4B
Kvkf0e46ue0ieDKoFr0S38FFPvz1XNe5Mw9QScWNFA20N5R33ZLvHucpd/P8BYoE
12dSC1Zyn9MmBRoMpRFuilkYUX9NxgDeWMm5XAT4CIvxZGZRvLzSPCmk7g+J9SFu
nRmya4PddloRRroGOD+Hbh+eadizAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQ0wj
8o2p1E3onW3pJaaUScZv87IwHwYDVR0jBBgwFoAUzz9PkkOmHTvtkzzA81M8or4J
O9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyOEQwLzRGNTAxMDI4QzczNDExRUVCNEExODk2NTc3NTQxMkU2L3p6OVBr
a09tSFR2dGt6ekE4MU04b3I0Sk85dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3p6OVBra09tSFR2dGt6ekE4MU04b3I0Sk85dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjI4RDAvNEY1MDEwMjhDNzM0MTFFRUI0QTE4OTY1Nzc1
NDEyRTYveno5UGtrT21IVHZ0a3p6QTgxTThvcjRKTzl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATJvCV9pD2v/ZIsE033D8Pf7udAxfY
JElU9hw3qHpB+Bao1WNpIAP5bm9CTwbP+qR8yVbZNCBvlSI4wZljmsBcIUlY6i5t
ErbZhH+jlbAw6IwV79ViYih3uE10HNcZIr9xvvv32kIDtCloiKXTmzxSX00XsyIw
Cxv2sWYSpDuEMy+nh2S+xny/tqdeKErb2dqVxOw1R/butH5BTxSuVnqGL8SCfXED
ZUUpRyHxn6igAUs5N8xXN7AHu3K1zT2aXQOTYMGIal21gsHBcbYwJCOJDrrsL7X5
W6pDJF/XNT0eBHXYjShjhPnuykEchCSS9llnyWlNxaGdzjbgknpPL1m3
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:26:27 2025 by rpki-client