Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
File: shxmbZvNmMAZWRBxeUg3JoQDINk.mft (raw, json)
Hash identifier: b5FsUTRgJPzTRilcBwaeqv/MqZH6/lHonejguZmQ8LU=
Subject key identifier: 43:2B:D7:9B:01:21:BD:FC:92:72:08:40:F1:32:70:B7:C0:69:36:93
Authority key identifier: B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
Certificate issuer: /CN=F3675681AF/serialNumber=B21C666D9BCD98C01959107179483726840320D9
Certificate serial: 01ED
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
Manifest number: 01EA
Signing time: Tue 29 Apr 2025 04:16:42 +0000
Manifest this update: Tue 29 Apr 2025 04:16:41 +0000
Manifest next update: Thu 01 May 2025 04:16:41 +0000
Files and hashes: 1: shxmbZvNmMAZWRBxeUg3JoQDINk.crl (hash: m0mHXoc9N3yCtQEV5AS3j9byV+xIUHmIKxGkbgFg19I=)
2: 3C5DC152150F11F0AFA3C00D6EB8BCC6.roa (hash: fH15aNCg4OTSLMaHS4OXxFDniAhEu0g0inrw6icGVBw=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 01 May 2025 04:16:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 493 (0x1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3675681AF, serialNumber=B21C666D9BCD98C01959107179483726840320D9
Validity
Not Before: Apr 29 04:16:41 2025 GMT
Not After : May 1 04:16:41 2025 GMT
Subject: CN=681052aa-ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:29:61:9a:c9:3a:98:c1:e8:bb:7d:45:ad:2d:
7c:83:82:bc:b1:f3:ca:df:4d:e0:4d:bc:27:88:b1:
88:0c:da:26:ed:f2:6f:dc:d3:d5:2b:6a:15:04:d9:
45:4c:3a:bb:c1:33:6d:36:c8:92:77:95:35:1c:05:
f1:db:6d:3b:83:7c:71:4c:0a:56:2d:8a:f6:d5:d7:
bc:cc:e5:e4:b4:1a:78:b1:9f:6c:f3:13:bf:bf:bd:
d3:5f:1f:60:13:26:7e:eb:65:a9:24:d6:0a:ca:b1:
2e:45:4e:08:e4:11:ba:8a:e2:bb:d3:79:16:ed:3a:
8c:3d:72:f9:40:33:42:56:ef:4a:08:44:7f:83:9e:
40:e6:0b:ac:f9:b0:f4:e4:1f:e0:85:f2:68:94:76:
ca:b4:a6:be:a6:d2:d9:14:e7:db:49:4d:40:cd:7c:
05:35:5b:44:78:e5:5e:62:25:80:e7:5a:bb:02:e8:
30:4a:16:8e:05:63:ad:f3:9d:52:b8:29:6f:99:3c:
1d:67:5b:16:1a:c3:f1:20:60:43:d6:17:c8:6e:e2:
54:6d:7d:a5:48:1c:ef:b3:46:1f:ac:50:81:27:81:
e4:ca:dc:27:85:4c:b4:23:c6:44:46:29:d5:b8:cc:
26:e2:df:d2:d0:f8:8a:3d:e5:ea:f3:16:80:83:de:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:D7:9B:01:21:BD:FC:92:72:08:40:F1:32:70:B7:C0:69:36:93
X509v3 Authority Key Identifier:
keyid:B2:1C:66:6D:9B:CD:98:C0:19:59:10:71:79:48:37:26:84:03:20:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/shxmbZvNmMAZWRBxeUg3JoQDINk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675681/3A811A06B37111EE992D23C5775412E6/shxmbZvNmMAZWRBxeUg3JoQDINk.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3c:4e:e3:85:b9:96:5c:ce:1f:20:ee:c8:05:8a:af:ee:dd:
15:df:49:02:9f:37:90:0a:7b:7e:a6:fd:df:43:32:ae:43:9b:
33:cc:9b:fa:82:f4:c4:21:8e:97:8d:be:1b:ad:0e:b3:81:e1:
e0:03:4a:cd:22:45:ee:2e:92:ef:d1:c4:81:56:f2:4d:26:66:
e6:01:c7:30:40:39:46:59:08:7a:d4:b8:ed:18:ea:a4:b5:96:
54:a3:26:b9:00:a2:e7:3f:37:f2:d3:a3:ef:7d:53:3b:42:fd:
cd:a8:d2:20:0f:a9:63:17:8f:5a:6c:52:be:9d:c0:4e:48:40:
74:2b:64:25:94:e9:3e:c6:e8:9c:c9:a0:97:e1:c5:c9:4e:49:
84:c8:1b:48:08:47:2f:a2:cd:d3:5e:9a:2d:ff:b0:b6:89:6c:
9f:c8:b3:1f:6e:47:54:5a:3e:63:7d:16:cf:05:47:76:d8:71:
c5:ad:d0:39:39:9c:b6:e6:8d:93:06:b3:a4:8d:f5:85:d4:9b:
d3:ad:95:40:ab:6c:8f:78:92:3d:b9:a4:c6:7a:0b:ad:43:52:
35:b6:46:88:47:20:eb:4c:44:fa:b6:ce:69:a4:99:9e:76:dc:
20:2d:7f:88:04:72:d3:6e:57:f3:be:50:e3:3f:55:e6:fa:83:
6a:2c:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:40:18 2025 by rpki-client