Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
File: zXRmXLHPyFlppqWrpHLD6irSVc4.mft (raw, json)
Hash identifier: 6szs6MoKwClhIf7+SV9apdISL0aWqI0GwBoN/YQJ4do=
Subject key identifier: 6D:BC:90:46:08:80:50:68:BA:68:83:3B:E6:FA:EA:FE:D7:87:0D:67
Authority key identifier: CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
Certificate issuer: /CN=F369BFA8AF/serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Certificate serial: 99
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
Manifest number: 98
Signing time: Mon 28 Apr 2025 05:10:07 +0000
Manifest this update: Mon 28 Apr 2025 05:10:06 +0000
Manifest next update: Wed 30 Apr 2025 05:10:06 +0000
Files and hashes: 1: zXRmXLHPyFlppqWrpHLD6irSVc4.crl (hash: N4fL412CaSJDNdVjlsWUqr24aY+vvy/Pt88Dcoe2+DA=)
2: 9D0722C8B24511EF879E88B5762E951A.roa (hash: re1+1WPfPmFof+DoUwQFqcaVy7veeKE2VogjJwa7xs8=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 05:10:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369BFA8AF, serialNumber=CD74665CB1CFC85969A6A5ABA472C3EA2AD255CE
Validity
Not Before: Apr 28 05:10:06 2025 GMT
Not After : Apr 30 05:10:06 2025 GMT
Subject: CN=680f0daf-6592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:eb:3a:74:27:a6:5a:45:e5:00:03:64:97:
3e:03:d0:cd:81:cd:15:1e:4c:a7:22:9c:b8:73:25:
63:bb:19:97:0a:f9:17:0c:b5:ce:da:12:7e:1b:94:
cb:77:f8:71:90:79:92:b1:07:9f:f4:ac:07:35:86:
02:6e:c4:4a:fa:58:02:60:fe:bc:cb:c7:4d:48:80:
c1:e5:49:98:4f:a3:61:f6:0e:6e:9b:94:6f:37:3a:
74:6b:2b:3c:b7:47:21:37:86:bd:be:51:e5:b0:ed:
b6:9e:02:a9:4b:26:75:2d:ae:5d:15:b4:0d:fd:c5:
05:3f:24:f6:7c:79:05:b7:49:dd:f0:7a:e4:31:fe:
50:13:d4:51:29:81:4b:74:9a:08:e6:6b:9c:30:ef:
23:e5:78:a2:80:fe:60:32:51:f6:0d:e8:c5:37:5c:
82:11:94:9b:38:6a:bf:3d:d6:69:c1:16:69:36:e3:
4a:22:a5:f6:ea:91:30:c1:42:48:35:98:ee:b1:94:
d2:78:dd:21:0d:13:8f:7b:bd:a6:3f:47:0b:b3:07:
a0:5c:8a:74:b9:4c:8a:df:09:85:85:35:96:ab:fb:
b9:83:3e:1d:3c:43:87:bb:d5:eb:a9:97:6a:1a:f1:
96:d3:1e:f7:a6:80:51:d6:1d:38:8b:e6:b7:48:6a:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:90:46:08:80:50:68:BA:68:83:3B:E6:FA:EA:FE:D7:87:0D:67
X509v3 Authority Key Identifier:
keyid:CD:74:66:5C:B1:CF:C8:59:69:A6:A5:AB:A4:72:C3:EA:2A:D2:55:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXRmXLHPyFlppqWrpHLD6irSVc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BFA8/FBBFE27EB22111EF8BDA705C762E951A/zXRmXLHPyFlppqWrpHLD6irSVc4.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:e3:95:e1:d2:5e:b6:af:bd:25:5b:64:fe:97:4d:cf:4a:29:
61:be:e4:55:70:1b:3f:04:53:65:e2:d0:a9:5d:5f:d0:b5:fa:
f7:7b:80:1c:8f:94:50:02:3c:fe:9b:e4:d6:6b:98:79:a5:6f:
7d:3c:1e:dd:f8:d6:d8:f9:35:2e:66:f9:20:d3:52:e7:36:2d:
f8:0a:bd:3e:38:2e:27:ff:a4:a8:39:51:77:e6:9e:37:d4:2c:
fc:f7:62:ea:3b:d6:ca:e6:25:76:32:22:90:2c:9e:e6:06:cd:
03:48:b2:81:c0:c5:c7:4d:9e:01:9f:4d:9f:8e:67:0e:d9:de:
6d:7b:25:cf:be:66:28:3b:7b:0a:52:d4:ed:65:e5:25:11:20:
79:03:50:03:3a:ed:93:5b:a6:95:fc:bb:fc:68:95:6d:fc:e5:
6e:66:01:2f:0a:af:94:db:83:67:fd:64:05:45:da:29:72:84:
9e:71:34:1f:ff:23:59:7c:5f:ed:71:40:8a:81:8f:3a:52:22:
42:03:a1:c3:82:a6:15:db:70:7b:34:13:8d:08:37:b0:02:22:
55:92:14:a8:88:8a:90:8a:28:6f:24:2d:7e:44:07:77:1f:b5:
83:11:8c:2e:22:e7:bb:1a:b9:5d:f0:e7:16:0b:35:2c:22:a0:
2e:27:93:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:02:43 2025 by rpki-client