Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File: dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier: vXjrbkR15RtGl9U586xgBSDYmVf64Nn+2mPn9zD0+20=
Subject key identifier: C8:52:C5:91:AC:6D:D1:54:8A:2C:0E:D0:38:94:CA:67:DA:37:2B:E7
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer: /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial: 0133
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number: 0132
Signing time: Fri 02 May 2025 04:41:13 +0000
Manifest this update: Fri 02 May 2025 04:41:13 +0000
Manifest next update: Sun 04 May 2025 04:41:13 +0000
Files and hashes: 1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: iUZAcFbXg5/za6KQbUuGOe4MMWcZKlUhhmNnkCZ8UWA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 04 May 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 307 (0x133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
Validity
Not Before: May 2 04:41:13 2025 GMT
Not After : May 4 04:41:13 2025 GMT
Subject: CN=68144ce9-af1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:c4:91:81:87:b6:1f:50:e7:41:92:a6:d9:
03:06:c9:62:c0:15:d6:52:e1:75:7f:1f:cf:e1:5b:
d7:55:82:2b:4c:2e:33:7d:96:22:e4:04:ee:fc:15:
06:45:f2:2e:a1:76:ad:df:fd:04:22:ed:33:a3:fd:
5b:85:c0:b3:cf:4c:ed:16:99:1a:08:c4:4f:7c:f6:
68:29:76:d4:ea:19:97:66:a8:ef:5f:6b:8f:06:9c:
ae:61:ae:81:2d:6d:01:41:f5:f7:69:10:c9:ff:df:
f3:66:c4:51:66:56:24:e0:26:9e:5a:70:35:1b:22:
5f:22:b8:00:4b:ed:ac:1f:dd:5d:de:50:08:ae:23:
9f:ac:b1:b2:2a:b3:3f:67:1b:23:7d:d3:1c:be:4e:
cd:d6:4f:da:30:da:eb:46:d5:05:d0:d2:50:5b:43:
55:59:db:b7:36:c5:46:c1:56:28:4b:f9:86:c2:58:
dc:6d:b7:ea:d1:cf:fd:39:94:82:84:87:65:d4:99:
ea:3f:f9:3d:1a:7a:cf:a9:8e:d1:93:c2:8d:7e:89:
64:60:8f:d9:67:74:02:8c:75:4c:47:a4:28:e2:1b:
f5:54:1f:38:32:f0:b8:6f:b2:28:d3:4b:5e:35:a0:
9b:2b:e2:de:1f:b6:a5:bb:83:c5:28:90:8e:1b:10:
d6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:52:C5:91:AC:6D:D1:54:8A:2C:0E:D0:38:94:CA:67:DA:37:2B:E7
X509v3 Authority Key Identifier:
keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2b:0e:ff:0a:82:d9:04:c9:21:b7:e2:c4:cd:33:f6:99:96:
5a:52:72:73:dd:68:09:19:dd:c0:83:1a:c0:69:69:d6:1d:b0:
85:67:d2:f4:2a:c3:fa:a8:40:f6:00:e0:16:70:26:a5:0f:01:
ca:3a:a9:c0:83:20:7e:6d:f7:a4:74:8c:fc:64:c3:50:9f:07:
f0:98:bd:52:83:4c:85:43:80:ae:54:de:8b:3c:ab:6b:55:ba:
b0:ac:75:96:c4:60:1d:a6:14:99:ad:76:ec:ee:d1:4c:8f:3d:
62:6b:0c:f2:b0:9e:29:fb:68:63:9c:71:1f:55:ce:a3:aa:ba:
1b:20:39:47:4e:d0:6a:e4:95:e4:0e:1b:a2:bc:e8:3c:36:66:
3a:3d:82:58:cb:87:b6:1e:0d:8d:3c:52:f1:5d:48:92:64:4c:
71:a3:52:6d:02:64:68:63:63:5d:c9:f0:fd:48:97:43:16:88:
0a:ce:08:93:e4:90:a5:f3:1b:33:27:7d:00:f3:b2:ae:3b:3e:
b4:45:5d:a6:ea:2c:a3:13:a8:41:1e:db:0c:d7:4b:4a:2e:33:
84:0a:db:9d:9e:7a:13:b4:1a:e0:0a:46:ca:73:b6:69:25:29:
34:b6:23:a3:3c:89:7c:ff:cf:86:fb:4a:2c:80:ca:74:ac:f8:
d8:e6:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:19:25 2025 by rpki-client