Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File: ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier: U+LaGADr+XRf6a2Mx/+90PkPdS7FHJw2qGi85SdZcYQ=
Subject key identifier: 4B:2E:B4:19:17:B1:97:CB:72:0F:44:1B:A8:E3:A6:88:39:0B:CE:A6
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer: /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial: 0580
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number: 0580
Signing time: Sun 27 Apr 2025 02:25:43 +0000
Manifest this update: Sun 27 Apr 2025 02:25:42 +0000
Manifest next update: Tue 29 Apr 2025 02:25:42 +0000
Files and hashes: 1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: 2pboOipgKwZQi87HGnWUEWcpY8M8pBi9AWlWTqh/uvc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 02:25:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1408 (0x580)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Validity
Not Before: Apr 27 02:25:42 2025 GMT
Not After : Apr 29 02:25:42 2025 GMT
Subject: CN=680d95a7-d311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:1f:2c:89:83:06:16:2d:c6:e9:bc:35:c1:
59:be:ac:e6:7f:9d:5e:4b:4c:d7:2b:b9:48:0b:4c:
ee:f5:58:95:6a:ba:a9:38:2e:79:a3:b5:4e:5a:51:
22:3a:86:6d:bd:39:3c:a7:b7:56:bf:b5:fc:e5:9e:
2e:15:fb:7c:ae:ba:46:fe:ed:21:c4:2a:c3:da:2c:
d8:22:09:c4:da:1c:bc:f0:03:4e:ef:28:e8:b6:45:
e1:ff:cb:9c:d3:9f:0b:b7:75:c0:11:a3:a7:90:9f:
ed:26:db:e1:0c:ef:4f:a6:e6:16:96:63:88:f7:f5:
64:77:9d:04:ff:9e:d4:c1:62:89:d7:12:27:0a:e2:
7d:bb:75:12:ec:d0:30:f5:03:60:d4:2c:36:7f:84:
36:d1:33:bc:14:a2:84:d0:47:84:16:ca:3e:ce:b3:
01:f1:46:78:e7:d9:b5:21:75:1d:4b:8e:17:bb:0f:
83:d8:e6:68:12:90:dc:60:71:dc:23:94:17:12:6e:
dd:3c:70:db:6f:0e:ae:5d:9f:c2:96:f0:c6:96:2f:
b9:73:e9:b8:32:d3:e0:e0:76:5a:e1:3d:25:9e:09:
45:75:04:4c:d7:ca:41:16:95:33:97:25:a5:b0:4a:
04:55:cd:dd:8d:d0:20:9d:a0:dd:2d:4e:8c:cd:33:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2E:B4:19:17:B1:97:CB:72:0F:44:1B:A8:E3:A6:88:39:0B:CE:A6
X509v3 Authority Key Identifier:
keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:12:bb:04:4c:67:22:63:a6:f1:95:06:3d:d0:a2:90:79:
ce:d6:69:0f:0d:ff:69:ab:7c:fc:17:63:b2:99:d6:3d:83:e7:
3f:47:3e:9b:47:c0:62:56:7e:50:c5:ad:01:ed:52:5c:2d:aa:
8e:a7:21:d1:c8:19:54:6b:dd:35:db:d0:b6:96:fc:4c:20:14:
ab:29:2f:98:fe:b7:5c:67:e3:57:d5:c5:cd:1c:4c:cc:e9:ca:
ac:18:6e:7c:6d:c6:df:3f:d4:b3:ce:a4:43:f1:1b:3f:6c:c3:
56:2b:f5:4d:a9:32:8a:dd:d1:46:cf:dc:de:f4:9e:7b:12:73:
63:23:ab:82:87:5e:10:92:26:f1:5a:99:f9:d2:fe:4f:e6:10:
cb:20:0b:4b:7a:a0:0a:81:3d:88:73:fb:0a:71:23:7d:cb:b7:
fd:10:e7:cd:63:11:dd:29:73:cf:dc:30:b4:19:a1:c5:b1:a2:
d5:25:2a:7a:9a:58:5b:d0:94:fb:c9:d8:ea:ab:3a:d4:56:7d:
91:32:32:43:de:72:e4:f7:62:d1:83:59:84:09:84:65:ec:f4:
4e:d2:7d:b5:29:a8:39:a7:69:f6:ed:fd:55:22:eb:39:f2:8d:
b6:aa:d3:f5:d0:70:e4:7c:14:85:04:b0:76:f8:56:81:6b:2d:
43:a9:0e:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBYAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJGODRBRjExMC8GA1UEBRMoNjZDOUIzNDVGRDUyRTAzMDlDQTJCNzZFN0NFRDBC
NTA2QzhEMDE5QjAeFw0yNTA0MjcwMjI1NDJaFw0yNTA0MjkwMjI1NDJaMBgxFjAU
BgNVBAMTDTY4MGQ5NWE3LWQzMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9Mh8siYMGFi3G6bw1wVm+rOZ/nV5LTNcruUgLTO71WJVquqk4LnmjtU5a
USI6hm29OTynt1a/tfzlni4V+3yuukb+7SHEKsPaLNgiCcTaHLzwA07vKOi2ReH/
y5zTnwu3dcARo6eQn+0m2+EM70+m5haWY4j39WR3nQT/ntTBYonXEicK4n27dRLs
0DD1A2DULDZ/hDbRM7wUooTQR4QWyj7OswHxRnjn2bUhdR1Ljhe7D4PY5mgSkNxg
cdwjlBcSbt08cNtvDq5dn8KW8MaWL7lz6bgy0+DgdlrhPSWeCUV1BEzXykEWlTOX
JaWwSgRVzd2N0CCdoN0tTozNM/JBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUSy60
GRexl8tyD0QbqOOmiDkLzqYwHwYDVR0jBBgwFoAUZsmzRf1S4DCcordufO0LUGyN
AZswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyRjg0Lzg3MDAxNzA4RUVBRjExRUI5QTdFM0UyQUQ4QTAxNENFL1pzbXpS
ZjFTNERDY29yZHVmTzBMVUd5TkFacy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pzbXpSZjFTNERDY29yZHVmTzBMVUd5TkFacy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTJGODQvODcwMDE3MDhFRUFGMTFFQjlBN0UzRTJBRDhB
MDE0Q0UvWnNtelJmMVM0RENjb3JkdWZPMExVR3lOQVpzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSrxK7BExnImOm8ZUGPdCikHnO1mkP
Df9pq3z8F2OymdY9g+c/Rz6bR8BiVn5Qxa0B7VJcLaqOpyHRyBlUa90129C2lvxM
IBSrKS+Y/rdcZ+NX1cXNHEzM6cqsGG58bcbfP9SzzqRD8Rs/bMNWK/VNqTKK3dFG
z9ze9J57EnNjI6uCh14QkibxWpn50v5P5hDLIAtLeqAKgT2Ic/sKcSN9y7f9EOfN
YxHdKXPP3DC0GaHFsaLVJSp6mlhb0JT7ydjqqzrUVn2RMjJD3nLk92LRg1mECYRl
7PRO0n21Kag5p2n27f1VIus58o22qtP10HDkfBSFBLB2+FaBay1DqQ59
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:50:36 2025 by rpki-client