Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File: ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier: wSUAPQzKdaU9Guk6Xs6edH+aNiH99UNpjJOYaqOx5vA=
Subject key identifier: 04:50:4B:DF:9D:82:18:22:1E:1A:D6:9D:50:1C:6E:72:B3:F3:59:F5
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer: /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial: 06CB
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number: 06CB
Signing time: Wed 18 Jun 2025 02:45:51 +0000
Manifest this update: Wed 18 Jun 2025 02:45:49 +0000
Manifest next update: Fri 20 Jun 2025 02:45:49 +0000
Files and hashes: 1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: jHnEfwdCNu+s3zZHpdv4lcwx+OGY42woIcPC0aWTZZo=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 19 Jun 2025 00:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1739 (0x6cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Validity
Not Before: Jun 18 02:45:49 2025 GMT
Not After : Jun 20 02:45:49 2025 GMT
Subject: CN=6852285e-2611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a8:8d:f0:fe:78:c7:e7:a6:94:3b:f3:3b:a7:
e0:48:48:a4:36:de:2a:bc:99:1d:35:2a:d4:9b:cf:
e0:a6:83:be:ca:8f:e3:a2:9d:53:a7:92:6f:20:29:
47:c0:46:d2:c0:cc:ba:22:65:6b:33:21:7e:0f:c2:
63:fb:8c:4e:e5:33:4d:62:01:ab:2b:d5:0b:8c:5e:
a7:52:ea:c7:17:f6:c3:2b:91:9e:7a:cc:b7:ff:78:
2c:b8:ee:ed:62:5a:ea:f0:87:d3:20:97:09:03:94:
6b:f8:24:6a:84:b0:44:d2:b5:61:08:48:1b:7c:a6:
6d:1e:45:0b:68:b8:81:47:19:92:6a:42:61:fe:65:
4c:f7:86:a7:26:a3:45:0c:b0:c6:fc:d9:68:b7:b4:
a3:69:9a:fd:ef:87:83:10:34:22:12:a8:19:cb:68:
06:4c:ab:bf:16:d9:05:10:b2:55:9f:e2:1c:8a:94:
5e:c1:48:aa:c1:2e:07:16:e5:c8:71:e3:bf:c0:f6:
ee:e8:0a:c2:a3:65:a5:23:bf:f5:29:1c:b8:2f:c3:
84:ca:b4:5f:cc:76:f3:46:d3:cb:ab:1f:1d:0c:97:
08:13:41:ac:df:a0:04:0e:4e:a1:c0:58:63:51:10:
6b:88:84:42:a9:f7:85:70:77:4d:17:11:82:0f:94:
5d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:50:4B:DF:9D:82:18:22:1E:1A:D6:9D:50:1C:6E:72:B3:F3:59:F5
X509v3 Authority Key Identifier:
keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:37:ae:c5:01:51:0f:73:cc:13:09:49:10:ac:e3:ff:17:83:
df:d0:74:c9:49:2b:56:13:d7:c3:0c:f2:fd:79:e3:56:62:be:
c7:67:11:de:e6:cc:62:fb:2e:bb:25:3a:bc:86:b8:f3:df:52:
d1:47:8a:f8:29:33:d1:9e:da:68:47:a9:9b:be:d7:4f:ae:2d:
f3:43:d6:fc:f8:bc:29:76:7a:8c:5c:a8:0f:3a:1c:bc:30:3c:
27:4b:d3:25:24:69:34:1f:01:50:6c:3a:92:fa:c7:c4:af:9e:
4b:4a:dc:80:84:9f:c4:f4:61:dd:30:4e:bc:56:f2:da:09:aa:
c5:28:fd:2a:df:c6:46:68:60:a5:d2:4f:fe:38:c0:24:60:ae:
36:b1:40:63:b3:51:f6:77:dd:35:d8:44:83:41:9e:c2:00:4e:
27:b9:4d:be:51:8d:9e:e1:69:2b:07:bb:6a:f7:31:4b:9c:f3:
00:50:6f:34:a9:69:5d:41:bd:dd:d1:ab:f4:b9:97:10:e8:e6:
bf:37:80:4b:46:e9:84:c5:05:64:14:3a:34:bd:b2:c3:00:60:
ac:46:05:bf:1f:7a:93:70:ab:70:90:97:79:48:32:d1:20:76:
32:6c:72:0e:06:ad:45:7b:c9:10:a2:84:6c:e6:69:13:40:f4:
ca:66:66:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBsswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTk5MURBRjExMC8GA1UEBRMoNkEyRDM2RTg3N0Q3MjUyNkM0NEY2RTAwNEZBRjM0
Rjk5MDRGMjMxMTAeFw0yNTA2MTgwMjQ1NDlaFw0yNTA2MjAwMjQ1NDlaMBgxFjAU
BgNVBAMTDTY4NTIyODVlLTI2MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzqI3w/njH56aUO/M7p+BISKQ23iq8mR01KtSbz+Cmg77Kj+OinVOnkm8g
KUfARtLAzLoiZWszIX4PwmP7jE7lM01iAasr1QuMXqdS6scX9sMrkZ56zLf/eCy4
7u1iWurwh9MglwkDlGv4JGqEsETStWEISBt8pm0eRQtouIFHGZJqQmH+ZUz3hqcm
o0UMsMb82Wi3tKNpmv3vh4MQNCISqBnLaAZMq78W2QUQslWf4hyKlF7BSKrBLgcW
5chx47/A9u7oCsKjZaUjv/UpHLgvw4TKtF/MdvNG08urHx0MlwgTQazfoAQOTqHA
WGNREGuIhEKp94Vwd00XEYIPlF29AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBFBL
352CGCIeGtadUBxucrPzWfUwHwYDVR0jBBgwFoAUai026HfXJSbET24AT680+ZBP
IxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5OTFELzgxOUE3RjI0MTlGMzExRUJCMkEyODMwOEY4QUVBMjI4L2FpMDI2
SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FpMDI2SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTk5MUQvODE5QTdGMjQxOUYzMTFFQkIyQTI4MzA4RjhB
RUEyMjgvYWkwMjZIZlhKU2JFVDI0QVQ2ODAtWkJQSXhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrN67FAVEPc8wTCUkQrOP/F4Pf0HTJ
SStWE9fDDPL9eeNWYr7HZxHe5sxi+y67JTq8hrjz31LRR4r4KTPRntpoR6mbvtdP
ri3zQ9b8+LwpdnqMXKgPOhy8MDwnS9MlJGk0HwFQbDqS+sfEr55LStyAhJ/E9GHd
ME68VvLaCarFKP0q38ZGaGCl0k/+OMAkYK42sUBjs1H2d9012ESDQZ7CAE4nuU2+
UY2e4WkrB7tq9zFLnPMAUG80qWldQb3d0av0uZcQ6Oa/N4BLRumExQVkFDo0vbLD
AGCsRgW/H3qTcKtwkJd5SDLRIHYybHIOBq1Fe8kQooRs5mkTQPTKZmYB
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:38:21 2025 by rpki-client