Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File: gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier: b2+KXq89/bHxwobN5X8Q+Q6Cbd3WOVTiHOddBAI8AXI=
Subject key identifier: 22:D0:68:75:58:D4:1A:EC:CC:AF:12:CE:C3:1A:41:FE:E4:19:51:8B
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer: /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial: D3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number: D2
Signing time: Tue 17 Jun 2025 05:05:01 +0000
Manifest this update: Tue 17 Jun 2025 05:05:00 +0000
Manifest next update: Thu 19 Jun 2025 05:05:00 +0000
Files and hashes: 1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: AvptUqzZnrVlmsloCsx/yCyyZH0nH+SVl9lVKulrsWw=)
2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 211 (0xd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Validity
Not Before: Jun 17 05:05:00 2025 GMT
Not After : Jun 19 05:05:00 2025 GMT
Subject: CN=6850f77d-c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:34:37:cb:e7:1a:5f:d8:9b:73:dc:1f:3b:b0:
0a:ee:05:71:b5:57:08:e6:db:60:69:14:62:13:bd:
82:7d:2b:62:2c:2e:04:df:c2:6c:f7:c5:a6:7f:5e:
24:56:65:76:cf:f7:22:d1:77:5a:f3:fb:ca:d4:14:
52:46:7a:00:65:f5:e9:eb:3e:28:de:0e:d5:40:de:
c9:d7:6e:86:0c:0d:a5:37:5f:50:7d:16:f0:7e:20:
b4:8e:47:23:0b:06:d5:c3:51:aa:03:9f:46:a7:8c:
18:83:38:2e:2e:7d:87:c8:51:14:ec:39:48:fe:a1:
89:18:90:c8:7a:18:d6:fa:5c:99:35:d4:7f:b6:90:
b1:ae:c1:3f:9d:10:07:b3:44:1d:80:ca:49:ba:1b:
66:63:73:99:64:ea:53:f4:de:bc:dd:e9:5e:c1:59:
92:4c:ff:1c:30:b9:b0:eb:6b:04:5c:fe:f2:74:ac:
c9:05:78:ac:d9:f3:59:81:0b:bb:81:b0:95:e1:bc:
49:4a:d7:6a:e5:f6:10:16:75:b1:9f:e0:4a:3c:c7:
c1:df:f2:2d:d9:57:34:e3:b7:51:af:9f:21:2a:6e:
83:b1:a5:c7:46:5a:a1:2c:d0:4d:fb:4f:7c:7a:2a:
80:c4:86:b6:42:0f:b1:d1:49:96:3d:62:aa:e3:2e:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D0:68:75:58:D4:1A:EC:CC:AF:12:CE:C3:1A:41:FE:E4:19:51:8B
X509v3 Authority Key Identifier:
keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
97:f3:92:a9:3b:25:99:0f:0e:6b:ee:6f:46:1f:41:3f:23:79:
30:fa:06:26:b8:89:63:11:2f:73:3e:8c:da:b2:24:10:33:52:
3d:39:ad:3a:52:52:98:fa:9c:60:bd:1b:4d:0d:8e:64:db:1b:
d7:a4:72:a3:1c:b2:d1:84:4d:32:91:15:1c:00:7e:87:40:32:
d4:d7:1c:dc:03:16:b1:b4:bb:6d:ee:64:57:97:71:bf:a4:73:
88:7a:5a:39:b9:dc:f5:c8:e1:e1:f6:f0:fb:b1:72:92:ab:4f:
91:93:dd:62:d8:84:77:ca:fe:d9:74:4b:69:6f:0a:4e:c7:41:
7c:10:9a:06:dc:8e:70:1e:bf:63:70:2c:4e:0f:9e:e6:da:e8:
c4:9c:41:3a:bb:30:d2:a5:5a:5d:78:76:55:23:0b:69:3b:bb:
c8:70:da:96:5e:4e:95:96:4f:e6:00:35:95:15:08:fa:4e:16:
fe:b0:18:2d:3d:f3:5d:fa:22:21:0f:03:13:89:f9:ae:e5:54:
49:f0:10:86:18:6d:19:59:ca:ef:34:02:33:20:0b:71:54:f5:
63:72:5c:3c:3e:76:09:a7:80:d5:1f:0a:2d:8f:27:d5:38:dc:
ac:dc:7c:e6:6f:bf:ba:30:d2:1f:63:a3:d1:0a:54:58:cf:a7:
e8:16:0c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:08:01 2025 by rpki-client