Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
File: DV2bCS_jnIf5O8uUysP2yR0WyOs.mft (raw, json)
Hash identifier: p8z/IL80pP12B7pJD13EHXmRMeUnXE69CqawkqajOrA=
Subject key identifier: 67:2F:86:FD:8A:55:7B:27:8C:6A:42:CC:4D:C0:DB:F8:71:47:42:AF
Authority key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Certificate issuer: /CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Certificate serial: 08C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
Manifest number: 08BF
Signing time: Sat 26 Apr 2025 01:27:22 +0000
Manifest this update: Sat 26 Apr 2025 01:27:21 +0000
Manifest next update: Mon 28 Apr 2025 01:27:21 +0000
Files and hashes: 1: DV2bCS_jnIf5O8uUysP2yR0WyOs.crl (hash: w0X/XZyOnjt/kgfWgMLjzUxYXVeLXqL8//tVqmB3INA=)
2: 1CD89842944B11EA8D91181BF8AEA228.roa (hash: G8QTB1cDSlhFc1aM1m+wP1xl5Ubb7Vbu7br4H677GAs=)
3: 1385324820B311EA8A79CB75F8AEA228.roa (hash: E+0kaNnyaz2XaAgp2UmW3UiOevGh8K77GCjxHRNxjgk=)
4: 8CD6FED820B311EAAC843476F8AEA228.roa (hash: Gf1aru2E3Yggqz5sr3+VkWloIXes+1L3V6Xe+EwFJW4=)
5: 6C0163EC20B311EAB8D01576F8AEA228.roa (hash: qKJSwkjO0UEEtt3fvEcg777sLhnc5F/s5CDz6fXaO0M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 28 Apr 2025 01:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Validity
Not Before: Apr 26 01:27:21 2025 GMT
Not After : Apr 28 01:27:21 2025 GMT
Subject: CN=680c367a-ad1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9e:1c:2e:cc:6d:d1:b9:d8:5a:ba:5d:17:db:
af:19:c1:5e:f4:2b:23:6b:64:bd:d3:2c:fc:1d:b4:
f4:d2:5e:95:c4:69:12:ba:51:1b:99:74:a5:db:45:
1c:25:08:5a:da:1d:e1:a2:cf:9a:7d:ed:cd:d3:89:
23:55:f2:20:af:6c:ef:58:08:bc:51:a6:46:13:04:
a5:df:cf:52:06:ce:ed:05:1f:32:df:3c:2a:11:0c:
22:e0:6c:ab:fb:f5:93:52:3b:9d:55:d5:e5:16:50:
36:bc:d1:14:5f:f5:ab:71:4f:13:8e:57:51:98:e4:
5d:f2:e0:ed:6a:07:be:bd:b5:ad:fa:ee:e2:0a:de:
b8:cb:f3:60:d7:5e:79:d4:b3:21:53:86:44:f5:02:
8a:df:3a:c2:ee:59:d4:bb:eb:fc:52:d5:8e:84:a4:
57:e8:11:7a:89:3e:b5:e4:2f:8a:bf:8e:5a:29:88:
ca:0f:ca:40:f4:43:48:a2:d5:a1:12:4f:cf:a5:94:
e9:ef:0b:e3:55:27:9d:b2:fb:ee:06:f5:bd:c7:c0:
3c:a2:f4:6e:96:1f:5d:d9:5c:15:5d:54:70:46:ed:
e8:b8:f0:b8:5e:84:5f:4f:d9:16:61:50:7f:bc:ab:
e0:df:3e:95:1b:15:12:a2:91:9b:98:26:e6:3d:67:
c8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2F:86:FD:8A:55:7B:27:8C:6A:42:CC:4D:C0:DB:F8:71:47:42:AF
X509v3 Authority Key Identifier:
keyid:0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
46:37:7d:44:e4:a3:8d:c8:53:51:59:f0:f4:74:b2:ed:21:b5:
d0:e8:38:5e:a2:59:64:04:83:63:0e:3a:57:b1:2a:16:b2:4b:
f5:68:3a:d0:1d:d1:11:0b:f2:72:a1:20:de:d3:fb:b5:aa:a4:
3e:33:c4:3f:0a:0e:d5:04:0c:14:23:ca:d4:ac:a4:37:3b:94:
97:9a:15:41:b4:6c:2c:6b:39:d2:fa:0c:e1:57:03:e4:47:49:
a7:23:45:07:a6:91:76:73:b6:46:9b:87:57:ce:19:ed:3e:31:
9a:a9:cb:f6:41:fe:a2:41:75:0a:88:68:23:74:d2:3b:66:ed:
e6:1d:42:cf:0c:42:2e:56:6c:31:7b:41:2a:3a:47:6b:60:89:
0e:36:fb:93:62:ee:4b:99:d3:bf:da:46:47:85:f1:93:49:9b:
cf:0d:5f:1a:ea:7c:58:03:ba:67:63:11:f0:a9:c7:92:cc:40:
bc:16:b0:b3:cb:ab:06:e7:8c:df:00:73:a0:b0:9b:44:11:bb:
78:ea:c8:0f:64:73:6b:7e:37:24:75:e3:12:67:bc:ac:15:8d:
3c:21:d9:d4:28:b6:46:a3:0d:22:e9:7c:3c:78:00:34:85:1a:
3c:67:18:94:52:6d:06:dd:98:d1:08:ae:a3:99:86:8c:7a:9c:
a9:bb:91:30
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCMkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzg5MEFBRjExMC8GA1UEBRMoMEQ1RDlCMDkyRkUzOUM4N0Y5M0JDQjk0Q0FDM0Y2
QzkxRDE2QzhFQjAeFw0yNTA0MjYwMTI3MjFaFw0yNTA0MjgwMTI3MjFaMBgxFjAU
BgNVBAMTDTY4MGMzNjdhLWFkMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/nhwuzG3Rudhaul0X268ZwV70KyNrZL3TLPwdtPTSXpXEaRK6URuZdKXb
RRwlCFraHeGiz5p97c3TiSNV8iCvbO9YCLxRpkYTBKXfz1IGzu0FHzLfPCoRDCLg
bKv79ZNSO51V1eUWUDa80RRf9atxTxOOV1GY5F3y4O1qB769ta367uIK3rjL82DX
XnnUsyFThkT1AorfOsLuWdS76/xS1Y6EpFfoEXqJPrXkL4q/jlopiMoPykD0Q0ii
1aEST8+llOnvC+NVJ52y++4G9b3HwDyi9G6WH13ZXBVdVHBG7ei48LhehF9P2RZh
UH+8q+DfPpUbFRKikZuYJuY9Z8jVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZy+G
/YpVeyeMakLMTcDb+HFHQq8wHwYDVR0jBBgwFoAUDV2bCS/jnIf5O8uUysP2yR0W
yOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4OTBBL0Q1OTUwQkZFODE0NjExRTk4QTI2RUMyM0Y4QUVBMjI4L0RWMmJD
U19qbklmNU84dVV5c1AyeVIwV3lPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RWMmJDU19qbklmNU84dVV5c1AyeVIwV3lPcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzg5MEEvRDU5NTBCRkU4MTQ2MTFFOThBMjZFQzIzRjhB
RUEyMjgvRFYyYkNTX2puSWY1Tzh1VXlzUDJ5UjBXeU9zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGN31E5KONyFNRWfD0dLLtIbXQ6Dhe
ollkBINjDjpXsSoWskv1aDrQHdERC/JyoSDe0/u1qqQ+M8Q/Cg7VBAwUI8rUrKQ3
O5SXmhVBtGwsaznS+gzhVwPkR0mnI0UHppF2c7ZGm4dXzhntPjGaqcv2Qf6iQXUK
iGgjdNI7Zu3mHULPDEIuVmwxe0EqOkdrYIkONvuTYu5LmdO/2kZHhfGTSZvPDV8a
6nxYA7pnYxHwqceSzEC8FrCzy6sG54zfAHOgsJtEEbt46sgPZHNrfjckdeMSZ7ys
FY08IdnUKLZGow0i6Xw8eAA0hRo8ZxiUUm0G3ZjRCK6jmYaMepypu5Ew
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:03:03 2025 by rpki-client