Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File: xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier: mRsqnO+rPalu9g81pXx0FumTt/xB/KaQvz95uFa5hX4=
Subject key identifier: 3A:D5:1A:07:55:09:94:82:3E:DE:CA:56:C1:ED:71:5F:6F:22:C0:AE
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer: /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial: 08C5
Authority info access: rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number: 08BA
Signing time: Sun 27 Apr 2025 01:26:13 +0000
Manifest this update: Sun 27 Apr 2025 01:26:12 +0000
Manifest next update: Tue 29 Apr 2025 01:26:12 +0000
Files and hashes: 1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: 6hQeeHtxW0NA3k9xrYDWh85Zd1dC0VLG+2or1pAvbtg=)
2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2245 (0x8c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Validity
Not Before: Apr 27 01:26:12 2025 GMT
Not After : Apr 29 01:26:12 2025 GMT
Subject: CN=680d87b5-b5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:f3:c6:31:61:37:13:e3:06:5e:d9:45:8f:
1f:e4:2e:a4:28:0c:a4:7e:b3:f3:ec:fb:88:92:60:
14:1f:cd:02:3b:b2:47:9f:19:9e:31:9a:96:12:38:
33:7f:be:d5:e5:22:96:f5:1b:e1:7f:cc:85:38:1d:
c7:82:0f:0d:38:da:e8:d4:c7:84:19:6a:f9:8a:df:
2f:a8:97:28:f2:4a:3f:0b:ba:18:96:e9:08:d1:a6:
66:60:3a:73:3e:fa:86:65:5f:4c:4d:86:f4:fe:be:
ef:25:9c:ce:31:34:50:52:b8:39:79:8f:be:71:96:
87:2b:88:a0:27:b0:03:25:7c:3e:36:88:fe:77:31:
b2:95:e5:55:b0:34:46:fd:05:40:12:79:9a:46:fe:
0d:61:4e:b4:ba:02:a4:a9:fa:dc:bb:8d:fe:a8:02:
17:1a:d8:b5:eb:ca:02:94:d7:50:4c:ae:2a:73:28:
41:61:44:8d:50:bd:8d:88:35:79:d8:0b:d9:0b:87:
39:32:4b:ba:1f:93:05:01:9e:8c:79:dd:8c:ae:b0:
d5:3e:51:be:c2:70:79:c1:4b:fc:d8:66:d7:a9:2d:
95:56:37:3e:c8:f2:d7:39:17:0d:5a:28:bf:d7:bc:
8c:12:90:2b:33:69:28:05:ff:5e:e0:22:70:43:f7:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D5:1A:07:55:09:94:82:3E:DE:CA:56:C1:ED:71:5F:6F:22:C0:AE
X509v3 Authority Key Identifier:
keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
09:87:fe:26:9a:bf:38:22:89:28:38:82:4d:a0:0c:dd:f4:2a:
59:74:94:39:f0:47:23:c1:9b:e0:73:fd:de:14:21:bb:86:3a:
51:d9:24:e8:00:1e:a2:23:07:f0:89:80:8e:e5:8a:3f:6a:3b:
0a:e0:af:72:01:2f:dd:7c:7b:7c:19:01:6f:77:d2:be:4a:51:
29:ef:1b:48:5b:1b:3a:7c:10:a0:c3:81:6a:cc:f8:54:3a:c0:
3b:7f:c0:e7:93:33:9e:60:60:dc:f6:1f:99:35:25:ab:27:bf:
0a:68:ff:1a:d8:e9:6b:2a:da:1d:da:b8:80:94:6e:36:8b:c2:
f3:12:c7:78:84:27:67:7b:4d:9c:23:38:61:cc:da:6c:08:8b:
bf:2a:66:73:27:de:c9:d1:ee:35:92:c4:e1:3f:53:e2:2d:ef:
3a:8a:19:74:15:1a:85:6c:63:00:b4:f0:28:1e:a5:74:3c:dd:
2c:ef:13:b5:20:a3:cd:fa:42:ba:10:e5:d1:d2:aa:6d:ad:ea:
46:37:38:64:b7:d1:0f:78:13:e8:98:88:18:44:c0:b0:83:1b:
3b:a1:53:77:d4:88:fc:93:ac:10:27:6c:7d:4e:ec:4c:6e:e4:
92:57:fc:1e:9f:25:9b:a5:95:20:71:7d:24:9d:2f:5c:98:55:
73:43:7a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:38:32 2025 by rpki-client