Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier: 3AxjqljNLb7w+CJQBnCJH4vYUegexmGoe5bISqLZa7A=
Subject key identifier: 69:BD:5F:0A:3A:E9:65:87:4E:19:BB:1A:65:BB:C7:2D:9C:DF:49:99
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer: /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial: 0805
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number: 0800
Signing time: Sun 27 Apr 2025 01:43:20 +0000
Manifest this update: Sun 27 Apr 2025 01:43:19 +0000
Manifest next update: Tue 29 Apr 2025 01:43:19 +0000
Files and hashes: 1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: yLLtwlTmcg0S11Gprx/kV/8brJRSnmf3lPjSEI0sqIk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2053 (0x805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Validity
Not Before: Apr 27 01:43:19 2025 GMT
Not After : Apr 29 01:43:19 2025 GMT
Subject: CN=680d8bb8-8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:5d:b9:84:cc:fd:17:24:da:0c:b1:68:7e:
94:60:d0:38:35:ea:37:9a:52:b8:0a:28:47:c5:58:
84:52:3a:7f:c3:9d:84:6b:b2:8d:a0:97:b0:2c:b1:
a1:e7:85:54:d8:9e:9a:c1:1b:72:d2:17:4a:5f:2d:
30:ae:a8:17:92:0c:47:49:db:dc:9e:c2:a8:aa:30:
ba:f4:68:e9:87:e6:c2:3f:8b:19:5c:df:7c:d6:c9:
76:07:a1:2e:4c:57:af:e2:7d:c3:42:dd:61:a5:77:
24:08:36:4b:98:57:63:d7:d9:39:7a:68:e1:f8:cf:
16:0d:32:8f:89:78:0e:b8:a7:be:c3:86:5d:ba:50:
90:ab:93:3f:4c:8b:38:f6:1c:2c:d5:62:c2:b7:e3:
ec:2c:a0:6b:35:de:45:bf:94:a2:2e:d9:5a:69:49:
0b:88:86:a3:ac:00:29:f8:68:ac:ec:de:7f:fe:22:
76:6c:93:ab:13:78:c1:8c:aa:15:94:ef:12:f6:63:
cb:2c:98:bc:32:60:6a:a7:3b:b8:6a:38:a3:57:aa:
8f:cd:66:c8:5a:61:a0:6d:e6:73:eb:b2:46:2b:44:
f3:c6:4c:26:48:e6:fe:62:28:95:ee:9d:a4:d3:df:
95:86:24:b2:ad:84:4b:e1:14:e4:ee:f7:e2:56:2a:
2e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BD:5F:0A:3A:E9:65:87:4E:19:BB:1A:65:BB:C7:2D:9C:DF:49:99
X509v3 Authority Key Identifier:
keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
44:9d:03:aa:68:d2:ca:05:8c:24:96:73:7d:70:cf:60:63:35:
7a:88:9d:fe:46:47:83:f9:ee:70:a3:aa:ca:6c:07:d7:56:cf:
de:cf:88:80:db:73:3c:32:97:02:c4:cb:c6:22:b9:35:1a:89:
22:2a:2f:fa:a9:5e:59:10:78:5e:c6:2a:4d:c7:88:82:7a:20:
aa:63:74:d1:0f:20:60:64:09:8a:a1:3b:36:df:ad:24:5d:de:
c7:c4:9a:5f:66:af:7f:bd:c3:af:9e:ed:ce:c2:01:50:c7:56:
a2:0d:e0:3f:a0:4b:30:4e:c7:3a:f1:bf:6c:d9:f5:a9:07:f1:
42:8a:5c:31:50:5e:44:f4:00:9a:88:c3:2d:f8:34:de:21:d6:
36:9d:76:c5:d2:90:d4:85:31:d7:83:c7:25:ae:42:38:8d:2a:
91:73:5c:60:dc:97:b6:d3:f3:b7:21:04:07:67:7e:b4:d3:1f:
3e:e3:d2:7d:8d:42:9e:65:ef:6c:51:06:a5:66:2f:34:79:ff:
58:72:5e:c2:2c:06:0e:11:8d:9a:9d:eb:af:b3:4e:16:cb:19:
ab:e8:a9:d0:39:23:6f:b4:3e:35:8c:09:db:b3:1d:41:f5:25:
bf:15:93:02:2e:b8:2e:9c:f9:b8:67:e9:80:43:30:d7:74:fc:
ec:0e:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:10:45 2025 by rpki-client