Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File: mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier: 6g482uWhnqhNj8+PQIe3m4e81ZEfce78dj9Z5XN2ueg=
Subject key identifier: DA:09:35:99:19:B9:DD:A6:BD:2B:AC:F2:FB:83:76:91:AA:4C:D0:A2
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer: /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial: 02D0
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number: 02CE
Signing time: Sun 15 Jun 2025 03:54:50 +0000
Manifest this update: Sun 15 Jun 2025 03:54:49 +0000
Manifest next update: Tue 17 Jun 2025 03:54:49 +0000
Files and hashes: 1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: peqXckM7338de9oXzOb0qOJ6Yw2eEdo64ZtpwlV5nls=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 17 Jun 2025 00:06:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Validity
Not Before: Jun 15 03:54:49 2025 GMT
Not After : Jun 17 03:54:49 2025 GMT
Subject: CN=684e440a-3ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fb:2b:ec:0e:10:18:51:88:4e:c8:2c:2f:cc:
79:be:4a:34:f1:9a:e7:35:51:b3:3f:23:fc:e0:84:
b8:49:9d:56:97:5e:5a:fc:b2:a7:86:c8:9d:7a:ce:
59:de:6a:66:38:9e:5c:a5:fd:10:3d:5f:4a:bf:c1:
23:87:57:a2:12:9f:e7:d3:63:a6:55:e9:25:77:48:
ef:06:06:0d:69:21:3c:3b:18:eb:7f:5e:f4:92:f9:
c2:09:0c:c3:f0:02:88:08:15:94:74:d3:e8:d8:66:
5c:9c:9c:16:d9:d3:a5:e1:69:2a:e4:fc:8e:56:64:
14:04:51:bb:b3:b0:fa:07:0d:72:98:e3:24:8b:0f:
1d:ea:58:60:b8:88:cc:6a:f0:49:d6:39:1a:31:41:
5a:5a:18:6b:c5:d3:0b:53:9f:2d:50:80:69:07:ad:
b1:95:3c:a9:83:ef:6e:80:10:2a:8a:5f:cb:8f:9f:
fc:8c:1e:23:71:94:07:fb:ff:74:60:99:76:15:d9:
8b:61:d5:09:88:75:eb:63:be:51:cd:f7:95:4e:a1:
e1:99:c9:d2:6c:f2:ad:6f:ed:83:23:25:7f:df:60:
17:d6:55:b3:d0:fd:9b:df:8e:18:e3:9a:bf:aa:79:
db:29:e9:f3:d6:96:f0:03:d0:cc:a6:9d:5e:6e:aa:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:35:99:19:B9:DD:A6:BD:2B:AC:F2:FB:83:76:91:AA:4C:D0:A2
X509v3 Authority Key Identifier:
keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:bd:95:ff:b8:db:5e:65:d3:11:78:e3:8b:31:c2:9f:c2:
c4:e9:86:be:3f:88:28:9a:cb:51:d0:41:1d:95:63:ad:49:7a:
21:b3:04:4a:b6:17:ec:b0:5e:ef:3c:21:1e:1e:96:9c:a1:90:
31:54:3a:24:be:14:ee:55:71:d9:47:2c:91:89:a5:b7:37:df:
bd:72:82:ee:57:4c:3c:da:61:bb:55:c0:b3:06:9d:b8:ba:a9:
05:4f:1d:2b:c6:1d:aa:24:b4:39:70:ed:78:fc:68:6a:d8:e7:
4b:e8:ea:e9:dd:66:d9:c7:33:f7:37:67:41:a4:93:92:0b:48:
e5:26:45:90:da:a5:0d:b0:fa:db:2a:4c:48:34:09:c1:49:89:
4f:f3:c4:03:4d:df:16:90:66:3f:79:dd:74:62:93:df:bb:4a:
50:e4:02:15:de:ca:9b:c4:04:e5:8a:13:c1:d4:33:8b:be:ee:
6c:58:16:f8:6a:01:8a:0f:a2:bf:6b:82:fe:31:e4:1d:70:99:
73:a5:de:c9:6b:a5:bd:82:6b:e8:f3:e7:38:ef:ea:00:4e:84:
d9:3a:ef:f9:60:80:23:76:cd:03:db:65:ac:74:1a:54:f4:ae:
63:8e:ce:f7:bc:d9:48:56:f3:20:49:91:e9:cb:10:4b:92:06:
f7:27:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:45 2025 by rpki-client