Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File: 3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier: IqVbG7siJXpZAqh3ypHwWcPuAlRHXsHRihfDzhgtSmo=
Subject key identifier: FB:47:6C:AB:71:2C:D1:82:34:7B:EC:EE:55:00:68:9B:C8:48:DF:11
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer: /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial: 028F
Authority info access: rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number: 028E
Signing time: Mon 05 May 2025 03:58:39 +0000
Manifest this update: Mon 05 May 2025 03:58:38 +0000
Manifest next update: Wed 07 May 2025 03:58:38 +0000
Files and hashes: 1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: JQt0ckTR1K5Xhu8OKzpfBL4OlF/GJeTkxMYS7CTJy0s=)
2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 03:58:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 655 (0x28f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Validity
Not Before: May 5 03:58:38 2025 GMT
Not After : May 7 03:58:38 2025 GMT
Subject: CN=6818376f-b010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fe:ea:c8:ec:af:b4:1e:fe:dd:38:61:e4:0c:
14:09:d5:cf:df:bf:80:ea:70:c9:76:0b:9a:40:e3:
c1:2d:2c:27:cd:4d:43:fe:58:d2:12:0f:6c:09:2f:
5f:54:e1:ab:7b:b7:a3:7d:f5:da:95:d3:3f:83:ed:
c9:08:ef:0a:4f:e1:7a:5c:af:b0:67:e1:db:a1:1b:
88:56:5e:9a:7d:8b:b9:dc:0d:c9:be:e0:bb:e1:53:
3b:b3:54:b1:4e:2c:14:05:93:b8:21:6c:db:e4:76:
e2:f1:47:6d:bd:be:73:a4:df:44:4d:da:a1:0f:52:
7d:61:fe:eb:b3:b6:75:ae:3d:5e:74:c0:6b:11:0f:
05:71:6e:2f:3e:32:ed:ea:75:54:2f:0f:4d:21:6f:
0a:a3:1e:92:70:81:18:fc:11:fb:f5:bf:94:d9:c0:
cd:3c:94:53:01:f4:c9:9c:b3:c8:8d:d0:2f:2d:c2:
77:df:d5:d7:f2:f5:fd:45:18:5d:f9:02:c5:c9:67:
e8:dd:13:e0:50:56:7f:9b:7b:75:ae:a0:bc:e2:39:
cb:56:01:b0:7c:14:ff:e0:2f:f0:da:f0:e5:53:31:
0c:fa:06:50:b1:2a:73:b4:b2:8a:bd:d2:e3:18:6d:
30:0c:6d:15:b9:0f:36:77:0f:fb:03:a4:57:c4:ec:
aa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:47:6C:AB:71:2C:D1:82:34:7B:EC:EE:55:00:68:9B:C8:48:DF:11
X509v3 Authority Key Identifier:
keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0b:ee:a4:c2:57:62:94:3b:c2:81:d2:9b:6c:26:73:fe:8c:
37:65:b6:5b:73:c9:58:fb:42:6d:50:14:50:f6:cb:ea:ad:11:
b1:90:18:27:e6:97:57:09:53:53:4c:ca:cf:f3:8a:aa:a2:04:
e7:5d:5c:45:87:c4:88:24:82:61:90:54:9d:1f:05:a0:54:18:
9b:ef:4b:a7:ec:67:a1:8d:92:c6:ac:4c:1c:1b:e8:1c:28:01:
1d:1f:31:5d:6b:c3:70:0e:7e:4f:2f:9b:c9:ce:4a:58:11:ba:
a9:3a:5e:c0:5c:82:cd:e8:de:ed:b0:f4:54:5f:8e:5a:e9:6a:
46:36:96:08:aa:f0:10:eb:55:c6:ec:fc:14:48:41:aa:b8:74:
0d:be:4b:cf:65:67:76:6c:7b:95:49:dc:26:f0:71:a1:be:f5:
73:be:0e:fd:a4:85:58:cd:8d:5e:6d:6f:63:01:e7:b8:c7:b1:
5e:31:e7:b5:93:38:06:81:cf:69:f3:47:96:48:e4:a9:8a:a3:
24:b5:e5:e9:9a:bf:3c:21:30:2a:76:f5:a8:43:c5:7b:dd:8b:
ee:a1:f5:9f:a0:88:03:f0:13:96:a9:88:1f:b8:5e:b4:0f:26:
c6:89:ab:5c:4d:ac:ba:40:5a:25:4c:d6:5b:79:6c:ab:8b:63:
1b:2b:29:9c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTA1MDUwMzU4MzhaFw0yNTA1MDcwMzU4MzhaMBgxFjAU
BgNVBAMTDTY4MTgzNzZmLWIwMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP/urI7K+0Hv7dOGHkDBQJ1c/fv4DqcMl2C5pA48EtLCfNTUP+WNISD2wJ
L19U4at7t6N99dqV0z+D7ckI7wpP4Xpcr7Bn4duhG4hWXpp9i7ncDcm+4LvhUzuz
VLFOLBQFk7ghbNvkduLxR229vnOk30RN2qEPUn1h/uuztnWuPV50wGsRDwVxbi8+
Mu3qdVQvD00hbwqjHpJwgRj8Efv1v5TZwM08lFMB9Mmcs8iN0C8twnff1dfy9f1F
GF35AsXJZ+jdE+BQVn+be3WuoLziOctWAbB8FP/gL/Da8OVTMQz6BlCxKnO0soq9
0uMYbTAMbRW5DzZ3D/sDpFfE7KolAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU+0ds
q3Es0YI0e+zuVQBom8hI3xEwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANC+6kwldilDvCgdKbbCZz/ow3ZbZbc8lY
+0JtUBRQ9svqrRGxkBgn5pdXCVNTTMrP84qqogTnXVxFh8SIJIJhkFSdHwWgVBib
70un7GehjZLGrEwcG+gcKAEdHzFda8NwDn5PL5vJzkpYEbqpOl7AXILN6N7tsPRU
X45a6WpGNpYIqvAQ61XG7PwUSEGquHQNvkvPZWd2bHuVSdwm8HGhvvVzvg79pIVY
zY1ebW9jAee4x7FeMee1kzgGgc9p80eWSOSpiqMkteXpmr88ITAqdvWoQ8V73Yvu
ofWfoIgD8BOWqYgfuF60DybGiatcTay6QFolTNZbeWyri2MbKymc
-----END CERTIFICATE-----
Generated at Tue May 6 03:43:12 2025 by rpki-client