Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File: IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier: 5iqiVzFJbaqPbHE/noTtOehHfArq++4M+7ip4aprV14=
Subject key identifier: F7:04:04:EC:6B:A0:4C:DF:FD:CA:AE:2F:73:64:72:55:9B:0C:AB:BD
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer: /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial: 047D
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number: 047B
Signing time: Fri 09 May 2025 02:55:04 +0000
Manifest this update: Fri 09 May 2025 02:55:03 +0000
Manifest next update: Sun 11 May 2025 02:55:03 +0000
Files and hashes: 1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: aIM/uhiJAqoCmSvF/yOdBYhTtlcUjA1Ls6w/lWltTKA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 11 May 2025 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149 (0x47d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36825D0AF, serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Validity
Not Before: May 9 02:55:03 2025 GMT
Not After : May 11 02:55:03 2025 GMT
Subject: CN=681d6e88-cf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:5b:b3:e5:05:b1:2e:f6:91:63:a9:2c:8a:
4e:74:44:52:ac:27:1d:e6:75:41:08:a5:b0:60:25:
11:be:34:ee:f4:a7:55:61:60:99:13:c5:97:43:37:
91:56:c3:60:0d:cf:c6:92:a4:ed:40:5a:b9:88:fd:
18:1f:11:e5:9b:00:dc:e5:81:c7:3c:d3:56:cc:1b:
f3:e3:0b:80:4f:16:d6:77:74:f9:31:14:36:13:1a:
f5:80:69:a5:27:c9:7c:16:82:90:d9:3b:38:72:31:
0f:98:78:32:61:38:3c:b8:2a:58:14:eb:e9:53:62:
f5:25:72:5e:d3:e8:d3:e4:e9:1c:d8:e3:7b:8e:1c:
b1:98:e6:06:7f:05:df:82:a4:aa:b7:34:33:e7:8f:
2d:ee:96:b1:e8:73:33:b6:14:6a:3f:9a:ca:c2:36:
6a:12:02:bd:ab:33:56:79:a8:49:f7:72:bd:28:8a:
ea:bf:3f:dc:5c:14:ca:c8:30:30:d8:f2:2e:2b:84:
38:95:cc:ae:7e:bb:67:20:84:29:06:ff:db:bc:60:
54:f3:74:cc:c2:a1:ce:2d:0a:e6:2a:92:ad:9e:d9:
cb:8d:bf:0b:7e:13:89:54:5e:e1:fc:62:c1:ba:b6:
34:e9:54:b3:be:9f:01:42:6e:09:32:ee:fc:fa:28:
63:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:04:04:EC:6B:A0:4C:DF:FD:CA:AE:2F:73:64:72:55:9B:0C:AB:BD
X509v3 Authority Key Identifier:
keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
84:77:2f:2c:17:2c:0b:6c:14:f5:1e:b6:53:d5:30:9a:61:7f:
45:ab:38:8b:c2:a2:1e:27:53:51:28:ba:59:bd:24:be:04:cc:
5c:15:e1:73:a2:eb:66:32:59:33:cb:5d:d9:8a:2f:6a:69:31:
10:97:46:d1:e0:01:59:00:63:35:cc:4b:75:53:2c:b8:1c:65:
fc:d9:24:25:a4:b5:50:d6:85:a2:1a:ec:c9:54:37:2f:42:a2:
b4:4e:c1:a4:7a:33:0a:87:ba:28:fd:49:9e:2d:6c:22:a3:03:
b8:e0:8a:4c:d7:41:52:9a:24:d3:02:25:f6:f0:48:98:77:57:
99:3b:d0:08:8a:31:7a:93:40:f3:86:2a:c4:72:a3:ff:32:5a:
d5:05:77:46:68:58:b0:84:aa:9f:ff:09:cf:e3:8e:84:3d:10:
c6:06:27:f4:3c:fe:53:ad:e2:2a:46:93:73:1b:a5:11:0b:b7:
5d:75:19:fe:f0:8c:91:ba:ac:95:95:ad:8c:42:f8:be:19:a6:
04:0a:a8:72:a1:e6:1a:dc:31:d8:24:d2:ba:a9:ac:0d:3d:83:
aa:e2:3f:20:b3:ff:10:9e:b4:be:50:06:46:66:6c:42:b3:9f:
8e:2a:8b:3a:99:50:d0:1c:72:c5:ed:8e:ad:28:06:99:16:a7:
1c:06:8d:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBH0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODI1RDBBRjExMC8GA1UEBRMoMjIxNDU1OTA1QkIxOUFDNEUzOEVERERBQkQ2Q0FB
ODM1MjlCMzQ0RjAeFw0yNTA1MDkwMjU1MDNaFw0yNTA1MTEwMjU1MDNaMBgxFjAU
BgNVBAMTDTY4MWQ2ZTg4LWNmMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4qVuz5QWxLvaRY6ksik50RFKsJx3mdUEIpbBgJRG+NO70p1VhYJkTxZdD
N5FWw2ANz8aSpO1AWrmI/RgfEeWbANzlgcc801bMG/PjC4BPFtZ3dPkxFDYTGvWA
aaUnyXwWgpDZOzhyMQ+YeDJhODy4KlgU6+lTYvUlcl7T6NPk6RzY43uOHLGY5gZ/
Bd+CpKq3NDPnjy3ulrHoczO2FGo/msrCNmoSAr2rM1Z5qEn3cr0oiuq/P9xcFMrI
MDDY8i4rhDiVzK5+u2cghCkG/9u8YFTzdMzCoc4tCuYqkq2e2cuNvwt+E4lUXuH8
YsG6tjTpVLO+nwFCbgky7vz6KGODAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9wQE
7GugTN/9yq4vc2RyVZsMq70wHwYDVR0jBBgwFoAUIhRVkFuxmsTjjt3avWyqg1Kb
NE8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyNUQwL0U5M0QyN0FBQzdDNDExRUM5MDZGOTREQkYxMjIyNDY4L0loUlZr
RnV4bXNUamp0M2F2V3lxZzFLYk5FOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0loUlZrRnV4bXNUamp0M2F2V3lxZzFLYk5FOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODI1RDAvRTkzRDI3QUFDN0M0MTFFQzkwNkY5NERCRjEy
MjI0NjgvSWhSVmtGdXhtc1RqanQzYXZXeXFnMUtiTkU4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCEdy8sFywLbBT1HrZT1TCaYX9FqziL
wqIeJ1NRKLpZvSS+BMxcFeFzoutmMlkzy13Zii9qaTEQl0bR4AFZAGM1zEt1Uyy4
HGX82SQlpLVQ1oWiGuzJVDcvQqK0TsGkejMKh7oo/UmeLWwiowO44IpM10FSmiTT
AiX28EiYd1eZO9AIijF6k0DzhirEcqP/MlrVBXdGaFiwhKqf/wnP446EPRDGBif0
PP5TreIqRpNzG6URC7dddRn+8IyRuqyVla2MQvi+GaYECqhyoeYa3DHYJNK6qawN
PYOq4j8gs/8QnrS+UAZGZmxCs5+OKos6mVDQHHLF7Y6tKAaZFqccBo01
-----END CERTIFICATE-----
Generated at Fri May 9 08:48:00 2025 by rpki-client