Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File: xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier: i7WERmR/9KT7+NX/aLj2Vq4i2AZzHxh6SYHto4KaRgc=
Subject key identifier: EC:62:C7:A9:3F:60:2E:3B:5C:A3:AF:CD:54:74:30:C6:6D:A7:0F:45
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial: 02A2
Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number: 02A2
Signing time: Sun 27 Apr 2025 03:51:40 +0000
Manifest this update: Sun 27 Apr 2025 03:51:40 +0000
Manifest next update: Tue 29 Apr 2025 03:51:40 +0000
Files and hashes: 1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: hQu9LuAWnB4b+rX6qDBFnvWnl4zaUOLUNyB9oyR/hFQ=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 674 (0x2a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Validity
Not Before: Apr 27 03:51:40 2025 GMT
Not After : Apr 29 03:51:40 2025 GMT
Subject: CN=680da9cc-18f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:23:e8:cb:0f:46:3d:47:7a:b6:78:71:55:
8b:5f:5d:fe:87:fa:51:4b:e8:42:51:22:7e:eb:99:
d0:f4:14:39:57:5c:d9:ef:97:e5:b0:ee:59:57:18:
2f:73:25:e4:2b:11:ec:3f:39:7a:15:7d:f8:aa:f6:
da:fa:a8:87:2b:24:73:2b:10:b6:a9:22:f8:d3:dd:
92:64:79:75:21:e4:21:1e:55:be:e0:5c:bd:34:ef:
7a:7b:8e:c9:a3:67:96:a4:4e:cc:b8:30:a9:69:21:
86:17:21:70:fa:e4:07:dd:90:3b:0e:c4:17:bf:71:
11:2f:1c:2d:7b:05:39:4d:18:7c:17:41:52:f7:a0:
c0:e1:05:ff:65:2e:59:95:01:c0:f4:1e:b4:4d:c0:
b0:14:0e:3c:1f:b2:fb:4c:a9:85:57:1a:11:70:8a:
b8:0f:c9:6b:76:f9:ea:b9:7e:25:af:57:21:7e:67:
b0:9d:c2:9a:5a:a5:e5:ed:e2:e4:7b:be:36:dd:ff:
f1:af:da:79:76:96:c7:19:47:c3:2f:24:80:1d:7d:
94:1b:4d:21:cc:c8:57:0c:29:23:44:7d:2b:c3:44:
ba:67:3d:6c:e3:22:af:66:21:31:23:f1:75:6b:19:
f4:f1:d6:4f:6f:25:5e:f5:89:a0:5d:6e:b3:4c:11:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:62:C7:A9:3F:60:2E:3B:5C:A3:AF:CD:54:74:30:C6:6D:A7:0F:45
X509v3 Authority Key Identifier:
keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a2:65:83:fb:8e:c3:d8:b1:fb:8b:08:f3:7d:af:73:fc:a2:dd:
74:fb:d1:f0:00:9f:aa:bf:0b:0c:14:6a:db:31:6c:b8:7c:db:
ff:90:ed:43:02:73:4b:0c:00:15:22:97:d1:8e:e7:05:df:0d:
a9:a2:21:0a:67:bc:e6:90:d8:14:12:c5:53:a5:f9:3b:48:9a:
67:f7:67:5d:ef:01:95:49:b1:ba:b9:3b:be:28:c2:77:9f:04:
4f:4c:0a:bb:cc:89:63:fd:21:7f:ec:c4:de:85:b8:40:7d:3e:
18:ae:4e:82:9a:ef:47:3f:0f:07:c3:c8:91:32:b1:8c:fa:a0:
4a:05:56:7c:20:d0:13:e6:c6:28:bd:42:f3:53:d4:53:6c:d6:
a2:14:67:cd:12:f6:e6:b6:f7:e8:73:8f:83:d6:c9:cf:b6:b7:
27:60:dc:fe:21:12:94:3b:df:18:2e:4b:f9:53:2d:91:fc:8b:
e1:45:e6:72:2f:7c:f9:7a:10:51:ce:e6:9d:e3:8a:a9:16:3c:
30:72:a7:cf:d8:f2:5f:43:1b:1a:cb:6e:eb:14:9f:5e:95:d7:
44:f3:9e:c5:ae:4b:20:0d:a1:f0:c7:85:5d:8b:a0:91:b5:02:
73:6b:37:b9:85:a3:6a:00:25:91:06:5c:f7:d5:71:76:91:f5:
4b:51:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:32:47 2025 by rpki-client