Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File: nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier: qDSl+rpqdAPX9ykgT5mzwV951C1sy2RW2cmhQfSLfmI=
Subject key identifier: DC:FC:35:84:0F:83:75:36:B2:F4:5D:1C:87:EC:A5:CE:E2:28:E4:59
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer: /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial: 0559
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number: 0556
Signing time: Wed 30 Apr 2025 02:31:54 +0000
Manifest this update: Wed 30 Apr 2025 02:31:53 +0000
Manifest next update: Fri 02 May 2025 02:31:53 +0000
Files and hashes: 1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: 8euIcFJ5paorrih4YhFAXDNWvQOsTbO8vLTYEsEcc3Y=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 02 May 2025 02:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Validity
Not Before: Apr 30 02:31:53 2025 GMT
Not After : May 2 02:31:53 2025 GMT
Subject: CN=68118b9a-0472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:0c:29:a5:14:93:d0:14:a9:20:da:62:e9:
59:8f:c0:ff:de:01:9c:da:89:34:70:f6:0c:da:5b:
72:34:98:90:1f:4b:2e:67:11:f7:c5:97:fe:73:6d:
24:2d:fb:eb:15:7d:54:07:d3:d5:4b:1f:cb:22:38:
b1:eb:f3:5d:bb:06:2e:32:0c:3a:8c:34:cd:94:f8:
f5:f2:1d:1c:fd:93:89:ea:27:bb:a5:30:d5:29:ff:
22:17:fe:93:7a:4d:fd:4a:38:db:1e:92:f5:62:a8:
a2:8d:ae:7a:d7:fc:08:e8:5a:bb:ba:c0:f7:3c:25:
b0:f2:3f:74:0a:6a:69:a7:70:c1:d3:8d:8a:94:d6:
18:66:90:2c:cf:53:9d:b8:69:b7:19:94:32:02:72:
e4:33:24:00:ce:02:d2:1c:02:79:5f:bd:38:25:e1:
82:53:1d:f5:e0:38:46:32:89:94:b3:5a:6f:34:60:
ee:e8:81:21:aa:54:ea:e5:e6:39:16:19:06:54:b5:
f0:d5:81:77:66:c6:d6:1d:24:bd:d8:14:f3:b5:6a:
ff:d6:0b:0c:a4:51:10:6d:88:80:f6:21:23:e6:d1:
06:e8:29:ef:c7:2d:44:5c:8c:98:8a:ab:c6:12:25:
3f:c4:93:bf:7e:09:39:1c:fc:5b:64:cd:01:94:0a:
4d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FC:35:84:0F:83:75:36:B2:F4:5D:1C:87:EC:A5:CE:E2:28:E4:59
X509v3 Authority Key Identifier:
keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:25:62:3e:81:9c:c6:2b:44:a6:ad:5e:cd:d3:a1:03:62:
e6:f6:64:a6:d4:85:31:d9:4c:a1:cc:97:18:a2:fb:4c:d0:5c:
7b:36:0f:79:a1:5a:e7:b1:b0:42:e3:01:65:70:8a:7c:90:51:
d2:bf:fe:c1:00:79:d1:f8:c0:55:48:0a:80:a1:c6:7d:78:b3:
26:04:d3:9e:f5:50:7b:3e:57:2a:bf:a2:19:93:2c:7e:d0:21:
f1:f0:23:91:8b:e1:8f:cd:65:8a:2e:98:cd:5f:20:8c:5a:31:
55:e2:f3:49:07:d1:67:ee:37:9c:b3:fd:eb:24:74:ae:8c:2e:
a8:68:91:9b:7d:b5:dd:ab:ae:cb:45:f9:a0:b0:43:7a:80:9d:
3a:0b:32:74:9a:56:97:43:d0:ce:99:cc:e6:6c:88:dd:b5:d6:
e7:08:41:e0:da:65:a0:29:a3:8d:ce:dc:66:15:b7:c8:01:28:
87:3c:d5:15:19:18:43:27:5c:70:8f:83:b3:38:25:f9:ab:09:
fd:f0:2d:45:5a:b4:6e:74:9a:58:56:2b:4d:3c:a7:f9:e7:95:
d4:5f:76:0f:bd:ec:51:ec:54:75:42:99:0d:c9:4f:44:b8:05:
ef:25:48:fe:0a:50:ea:9f:cb:1d:3c:21:21:66:0e:a1:4b:1e:
79:fd:a1:80
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTc0RUVBRjExMC8GA1UEBRMoOUM3QTI3OERBRDg5RUQ2M0U5M0UyNTIxOUI0Q0RB
MDBCMTAwNjE5MzAeFw0yNTA0MzAwMjMxNTNaFw0yNTA1MDIwMjMxNTNaMBgxFjAU
BgNVBAMTDTY4MTE4YjlhLTA0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9agwppRST0BSpINpi6VmPwP/eAZzaiTRw9gzaW3I0mJAfSy5nEffFl/5z
bSQt++sVfVQH09VLH8siOLHr8127Bi4yDDqMNM2U+PXyHRz9k4nqJ7ulMNUp/yIX
/pN6Tf1KONsekvViqKKNrnrX/AjoWru6wPc8JbDyP3QKammncMHTjYqU1hhmkCzP
U524abcZlDICcuQzJADOAtIcAnlfvTgl4YJTHfXgOEYyiZSzWm80YO7ogSGqVOrl
5jkWGQZUtfDVgXdmxtYdJL3YFPO1av/WCwykURBtiID2ISPm0QboKe/HLURcjJiK
q8YSJT/Ek79+CTkc/FtkzQGUCk1RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3Pw1
hA+DdTay9F0ch+ylzuIo5FkwHwYDVR0jBBgwFoAUnHonja2J7WPpPiUhm0zaALEA
YZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3NEVFL0ZEOTA2OTEwMTU4MTExRUNCMDgxMDc3MUQ4QTAxNENFL25Ib25q
YTJKN1dQcFBpVWhtMHphQUxFQVlaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25Ib25qYTJKN1dQcFBpVWhtMHphQUxFQVlaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTc0RUUvRkQ5MDY5MTAxNTgxMTFFQ0IwODEwNzcxRDhB
MDE0Q0UvbkhvbmphMko3V1BwUGlVaG0wemFBTEVBWVpNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1fyViPoGcxitEpq1ezdOhA2Lm9mSm
1IUx2UyhzJcYovtM0Fx7Ng95oVrnsbBC4wFlcIp8kFHSv/7BAHnR+MBVSAqAocZ9
eLMmBNOe9VB7Plcqv6IZkyx+0CHx8CORi+GPzWWKLpjNXyCMWjFV4vNJB9Fn7jec
s/3rJHSujC6oaJGbfbXdq67LRfmgsEN6gJ06CzJ0mlaXQ9DOmczmbIjdtdbnCEHg
2mWgKaONztxmFbfIASiHPNUVGRhDJ1xwj4OzOCX5qwn98C1FWrRudJpYVitNPKf5
55XUX3YPvexR7FR1QpkNyU9EuAXvJUj+ClDqn8sdPCEhZg6hSx55/aGA
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:26:08 2025 by rpki-client