Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
File: M9k2dXxyMpyzVJDsNDXRPytwToI.mft (raw, json)
Hash identifier: 2qnHsBoCogLG1MVhorXZOOPXfw4NuOgyuG9LSQf9djw=
Subject key identifier: 42:D1:B2:FE:0C:E9:7C:BB:0E:40:B6:A9:03:C8:4B:EA:5B:B5:41:EA
Authority key identifier: 33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
Certificate issuer: /CN=F3690C51AF/serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Certificate serial: DB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
Manifest number: DA
Signing time: Tue 17 Jun 2025 05:02:59 +0000
Manifest this update: Tue 17 Jun 2025 05:02:58 +0000
Manifest next update: Thu 19 Jun 2025 05:02:58 +0000
Files and hashes: 1: M9k2dXxyMpyzVJDsNDXRPytwToI.crl (hash: xKVAmJjNvjmyikvDcalfGCnVmVWguIG+QjkLqaXiSck=)
2: 2E2B725AEEF411EFBCFA6F43762E951A.roa (hash: pbm0HU0V1QcdM+FCx6QyJP3O4fULzd1SgmZHd7KGnyo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3690C51AF, serialNumber=33D936757C72329CB35490EC3435D13F2B704E82
Validity
Not Before: Jun 17 05:02:58 2025 GMT
Not After : Jun 19 05:02:58 2025 GMT
Subject: CN=6850f703-848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:26:3b:d5:6d:ad:9d:2d:c4:a6:65:5d:c4:
c4:52:50:34:08:93:1a:1c:96:03:71:ea:30:39:bd:
53:f6:57:5c:84:6c:89:66:c9:62:fb:03:05:43:03:
44:8f:cb:27:b0:2b:2e:fc:83:90:f8:f2:d7:4c:e1:
e2:e9:fb:c9:bb:46:64:13:dc:36:27:85:75:77:f9:
52:69:79:8f:f4:fa:4c:96:e5:50:e0:70:02:6e:e3:
88:6c:e9:0e:95:c6:51:9b:57:21:60:37:2d:d7:7b:
e0:a2:bd:b6:50:78:e9:77:fb:dc:54:6a:6c:e6:66:
30:48:6a:43:86:06:d3:e4:d2:ba:d8:28:20:a5:22:
ae:8c:e3:0d:5a:d6:56:60:8a:d6:dc:fc:26:1e:b1:
86:dc:8f:9b:1a:32:55:bc:32:fa:b9:de:eb:d1:1b:
f4:9a:f9:d4:38:4d:96:6a:24:c4:10:e1:71:56:e1:
28:56:4d:7b:9b:4f:50:73:af:be:bd:58:fa:4b:26:
63:66:7b:53:bf:cd:93:13:be:c5:47:b4:7c:56:c9:
81:4f:5e:64:8c:31:b8:26:79:bb:af:b6:f6:32:51:
a2:50:cb:16:1f:68:2d:fe:c7:d4:ad:18:cc:27:80:
9a:e1:85:d9:a0:82:36:30:bd:5b:19:0e:f1:52:13:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:B2:FE:0C:E9:7C:BB:0E:40:B6:A9:03:C8:4B:EA:5B:B5:41:EA
X509v3 Authority Key Identifier:
keyid:33:D9:36:75:7C:72:32:9C:B3:54:90:EC:34:35:D1:3F:2B:70:4E:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9k2dXxyMpyzVJDsNDXRPytwToI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/AE080A8CA67F11EF97375182762E951A/M9k2dXxyMpyzVJDsNDXRPytwToI.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ef:86:b4:55:be:d6:cf:eb:8f:94:6a:2c:dc:16:63:cd:b2:
90:35:74:b3:1d:d2:f0:74:06:9f:12:32:68:00:33:7b:e0:a5:
b5:0a:46:25:cb:84:0a:b7:6d:69:e4:43:b6:62:7b:2f:e9:32:
e0:90:d6:71:a8:af:6c:2b:85:73:32:9c:aa:7f:7a:fb:09:f6:
78:7d:84:6e:aa:b4:fc:47:f2:d4:4b:4f:5b:8f:35:8b:f1:f0:
5f:aa:6c:72:a4:17:de:44:ad:9c:d8:5e:e6:42:ad:15:63:8d:
23:98:84:88:8e:c3:db:4c:9c:ea:c6:44:50:ea:73:89:d4:7b:
df:4d:b2:b2:2d:f4:39:b9:24:b1:3d:4f:2b:d2:87:33:d6:76:
ac:0a:32:b8:39:7b:57:07:bd:22:49:62:0b:4b:1b:e9:56:fd:
68:a3:2f:f3:6d:b9:23:43:f6:76:9e:6a:de:07:20:1a:3e:20:
4c:b7:1b:8a:c7:cb:24:5a:f2:ee:ea:19:70:62:aa:93:32:72:
a3:4e:c7:4c:00:9f:0f:87:3c:7a:fa:fc:2e:a4:a2:0a:a6:14:
fe:38:34:08:43:65:3a:ce:a6:a8:45:86:8b:2e:e7:d2:24:90:
29:27:49:19:5a:11:6e:f5:b9:7a:bb:3c:5b:02:a5:9c:ee:0d:
09:27:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:34:00 2025 by rpki-client