Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File: otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier: ufh8wZyCSDNKGj2bGi7S/h02YpvQuWrkJRz1iDj7x3Q=
Subject key identifier: 78:E0:74:FA:35:2A:B4:09:98:A0:BB:9C:B7:DA:1A:4E:3A:93:49:96
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer: /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial: 085A
Authority info access: rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number: 0858
Signing time: Sun 27 Apr 2025 01:36:47 +0000
Manifest this update: Sun 27 Apr 2025 01:36:46 +0000
Manifest next update: Tue 29 Apr 2025 01:36:46 +0000
Files and hashes: 1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: 9yptLOHrCt+5ZMKk3eTh3PbfqrKpAhNV7h7VxqXPezc=)
2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2138 (0x85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Validity
Not Before: Apr 27 01:36:46 2025 GMT
Not After : Apr 29 01:36:46 2025 GMT
Subject: CN=680d8a2f-4512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:ea:77:12:66:d1:54:68:e8:5e:24:e5:df:
d0:d5:08:c9:2f:60:09:74:d4:fd:20:06:ed:01:70:
5b:21:de:76:7c:af:8a:4c:3e:d7:ca:a2:5a:53:0b:
6e:6e:55:ce:94:0a:07:b3:60:a3:6a:33:b9:7c:62:
c1:9c:f0:d4:1c:d4:a5:b9:72:2d:3a:c2:09:ba:ee:
c4:73:48:cf:13:88:d7:fe:83:09:1a:08:c5:3f:a3:
09:9b:9d:a3:dc:33:c0:bc:24:0f:fd:02:4e:0b:83:
61:3a:17:68:fc:d9:52:d5:30:e0:4a:01:9d:21:36:
7d:d8:bf:79:09:ab:af:cc:3a:cf:76:21:92:8b:9a:
1a:b3:60:74:b3:6c:29:33:53:45:81:1a:76:99:c6:
42:33:95:f8:94:0f:8b:04:2b:d8:5c:b8:2d:9f:27:
d7:4e:1a:e3:84:0e:36:3e:ec:9e:3a:66:c0:5d:7b:
d1:f6:55:87:70:3c:d0:07:93:28:69:4b:37:80:1a:
29:17:3b:3e:7a:e4:a9:62:52:04:57:1e:ec:60:20:
f1:0f:f1:ed:0e:f8:ab:13:1e:bf:2a:7c:51:fd:2a:
5a:c2:3c:9a:6f:56:b4:41:61:f7:1e:eb:7c:aa:90:
32:c1:d9:f9:17:f8:c2:ad:6c:fb:30:c3:26:aa:94:
db:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:74:FA:35:2A:B4:09:98:A0:BB:9C:B7:DA:1A:4E:3A:93:49:96
X509v3 Authority Key Identifier:
keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:01:c9:c8:3b:35:35:49:4b:e8:01:96:e5:4b:35:1a:f9:e6:
10:da:92:92:97:9e:61:dd:cc:d0:dc:c3:3b:d6:39:5b:d2:f1:
10:27:c2:8a:1a:55:06:be:74:00:9f:df:2f:c9:30:a7:c2:88:
72:99:d1:e1:b2:09:ff:9f:28:d0:77:22:b5:08:2f:22:47:f6:
69:29:b5:a6:70:88:e7:f3:e8:04:d4:0d:0a:3e:46:59:4f:78:
6a:31:65:7a:f2:75:fa:ac:0c:ae:1b:02:20:ab:8d:40:e1:97:
a6:70:a2:69:39:8c:a2:0f:ff:9a:a5:67:22:af:9b:a3:a8:41:
9b:b8:13:47:2d:d1:08:81:e9:7b:b8:33:a2:3e:4a:c1:11:4f:
0b:a9:a2:6f:9e:af:ad:7e:45:01:45:fe:b5:94:60:09:db:90:
a3:cb:19:1a:7b:dc:72:3b:75:44:9a:91:7d:0a:4e:41:0b:e1:
4d:1f:55:df:81:e9:3d:5e:4d:06:d1:8b:25:67:1a:4d:49:14:
72:4d:36:2f:96:c1:61:14:84:37:9f:a1:31:39:09:1c:c3:10:
3b:d2:d8:31:00:16:8d:b4:0f:7a:07:b5:83:73:2e:43:94:a0:
f1:d7:03:c7:be:c3:9a:d4:b8:cc:8b:4b:95:76:1b:b4:be:09:
c1:4e:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:43:40 2025 by rpki-client