Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File: gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier: xM8/knqRcyveIT6ip7s1/ejtVBxXewZOiuTCFyJRK2s=
Subject key identifier: A1:F9:E4:9C:EC:D8:CF:88:AE:1F:E8:52:16:86:0E:03:89:9A:EF:1F
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer: /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial: A1
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number: A0
Signing time: Mon 28 Apr 2025 05:09:27 +0000
Manifest this update: Mon 28 Apr 2025 05:09:26 +0000
Manifest next update: Wed 30 Apr 2025 05:09:26 +0000
Files and hashes: 1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: cB1Ohk2PxrEb8dx0/Axl9zwWLbgTq9HYciMcRcds+Yk=)
2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 30 Apr 2025 00:06:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161 (0xa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Validity
Not Before: Apr 28 05:09:26 2025 GMT
Not After : Apr 30 05:09:26 2025 GMT
Subject: CN=680f0d87-2ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:01:88:77:f8:0b:b8:56:ed:96:27:35:c4:
b9:3f:b7:8d:12:3a:06:a3:f6:4e:5e:8c:d1:b1:e4:
47:34:62:3e:62:de:14:b7:4a:5f:d6:5d:fb:02:8d:
98:63:a9:d0:c8:82:b0:e3:9b:c1:9b:46:f2:ce:c3:
ef:ca:03:e6:29:e2:69:67:11:73:9b:a6:4a:3a:0e:
12:08:74:d3:09:87:9d:29:82:32:fe:d6:81:a2:54:
18:d4:a0:5c:a1:e5:b8:ad:81:e5:af:77:81:3e:1e:
26:22:28:4f:2c:a1:24:ea:9c:a2:80:bc:6f:b0:ed:
6b:52:dd:53:5e:9e:24:34:51:70:38:91:d6:43:5a:
db:c1:a6:ea:3e:91:93:72:61:85:e8:12:f6:45:ae:
fd:41:97:ec:ce:1d:4a:a9:e7:91:de:b0:3d:c1:09:
28:68:e3:1d:da:47:5d:f3:87:90:94:81:4a:f3:ae:
dc:ba:77:b1:ab:c8:21:c6:fc:78:69:bb:8f:fa:de:
c1:63:1d:1a:56:fd:a7:ed:af:d8:90:4b:db:57:37:
12:6f:38:f9:07:9f:05:ba:51:22:f7:ab:65:ca:c1:
84:95:77:12:aa:a7:8d:6e:46:83:3e:2f:4f:8c:7c:
5c:7c:42:f7:39:3f:eb:13:14:d4:e2:da:90:90:d5:
6b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:E4:9C:EC:D8:CF:88:AE:1F:E8:52:16:86:0E:03:89:9A:EF:1F
X509v3 Authority Key Identifier:
keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
11:50:e2:ec:23:d4:b8:da:28:ab:74:64:7f:10:82:2a:57:b6:
9e:8e:9b:27:0f:ea:69:46:0a:ae:3e:3e:4c:28:e8:e2:92:69:
0f:05:8d:03:9c:8e:e5:49:5b:56:2a:4e:4f:67:c5:7d:dd:9b:
36:d5:d2:6d:2a:ba:f7:f4:ae:48:02:ca:8d:27:a5:88:de:95:
e0:26:ca:8b:70:f7:35:4f:33:5e:7c:0f:87:d0:d5:c0:61:af:
f2:ce:00:71:5f:1f:7c:4f:21:cb:bb:31:c8:d2:e8:89:87:93:
96:f1:42:47:ab:9d:20:3d:c8:4c:18:3e:d0:6f:b0:85:dc:4b:
70:dd:01:60:81:40:a2:8b:63:92:f9:51:c5:02:0f:85:f6:4e:
3e:c9:3c:d3:cd:35:de:0a:19:8b:ab:18:56:56:db:f5:8a:e0:
69:17:9d:1e:d2:5e:d8:84:45:04:3f:22:a3:7f:29:2a:b9:82:
b4:94:d8:93:da:79:f3:65:f1:c7:64:a3:74:00:5f:79:05:5a:
b5:f0:e9:1c:7f:e5:c3:8b:ee:0c:ef:7a:03:5e:b5:16:ba:c7:
03:50:15:0b:2a:dc:d3:29:c2:fa:b4:7c:3e:94:ba:b0:aa:8e:
a3:0a:0b:fe:93:f2:6c:0e:3b:14:cc:7e:22:11:58:b2:20:10:
31:45:9b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:17:58 2025 by rpki-client