Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier: 1B7/OALYF0sPuQJxBjcApXnezEIaXofetQwRnjhvYHc=
Subject key identifier: D5:E0:49:42:44:E0:DE:2B:D2:15:E7:0C:BD:40:F6:09:7C:07:2A:A3
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer: /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial: 011B
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number: 011B
Signing time: Thu 01 May 2025 04:44:13 +0000
Manifest this update: Thu 01 May 2025 04:44:12 +0000
Manifest next update: Sat 03 May 2025 04:44:12 +0000
Files and hashes: 1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: ozB1vfjdw7BJLtQgKZfteoli8jHj3r6sv8pchWQ/w1s=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 03 May 2025 00:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 283 (0x11b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Validity
Not Before: May 1 04:44:12 2025 GMT
Not After : May 3 04:44:12 2025 GMT
Subject: CN=6812fc1c-c388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:4e:ff:f4:04:c9:f3:0d:72:5d:0d:8a:ed:
74:f9:4c:de:1b:b3:3f:51:8f:a8:1c:75:d7:3f:9d:
7e:65:a3:39:5b:a0:54:07:45:bf:17:be:ac:58:89:
c6:bf:a4:af:38:58:e6:54:ba:94:23:24:ee:85:d4:
32:5a:1f:65:e8:85:e5:db:e5:e1:c6:8f:76:84:9b:
8e:cf:a4:e9:f6:5b:73:ea:90:75:a2:13:27:65:40:
91:d2:cc:4c:4c:a5:22:75:79:b4:f6:9e:56:77:02:
72:21:c7:d5:70:cd:77:61:2c:91:52:ae:0e:f5:23:
c3:b0:e6:43:43:d2:9f:b1:91:65:d7:0f:5f:f5:da:
65:5e:b3:c9:7c:f9:58:d8:94:3d:0c:6e:e7:98:61:
20:82:bf:51:03:1f:aa:65:19:4e:da:dc:25:74:18:
eb:e8:a0:df:11:c2:09:59:37:46:6c:8c:4c:e0:25:
0b:fa:a3:28:99:0b:20:c8:c1:e4:45:21:f3:f0:97:
d1:66:74:ee:74:ad:41:e6:46:fe:96:37:27:78:55:
80:c0:2f:b1:8b:ac:fb:73:d9:06:08:d0:fd:28:d3:
5c:9f:57:60:bb:1c:87:26:f4:fb:34:99:75:03:22:
de:09:a5:20:bd:dd:94:fc:81:bf:63:18:22:04:fb:
3d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:49:42:44:E0:DE:2B:D2:15:E7:0C:BD:40:F6:09:7C:07:2A:A3
X509v3 Authority Key Identifier:
keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ea:f4:31:74:69:6a:59:19:14:6f:ce:71:70:64:9d:d7:81:
b6:05:75:0e:0e:98:e2:ec:d5:c1:b4:a9:6f:0f:d1:20:a1:ec:
9c:df:79:53:ff:eb:f4:86:9b:45:e9:34:5e:da:56:23:1d:f6:
3e:2f:a6:02:83:da:0c:c1:0e:3f:83:33:9a:11:99:a9:53:2e:
e4:69:88:65:a4:95:82:b3:c8:2f:17:af:83:7c:f7:da:fc:b5:
b8:d8:a3:6a:4a:a6:e8:db:af:4e:c6:21:5a:e3:e2:1f:ca:3b:
cc:c9:7e:06:55:78:15:95:d2:ef:60:f9:d3:08:3c:1c:e6:4a:
02:6c:30:d8:2d:60:ee:61:84:a7:bd:96:46:e4:5a:e8:1b:2c:
03:31:16:d3:74:17:ee:91:b7:12:0d:58:94:cd:2a:89:da:aa:
d3:ac:c4:15:62:62:fc:d2:48:d9:ac:ed:10:2d:55:43:82:35:
96:36:a6:e0:eb:37:b3:3c:a0:22:59:28:85:b0:64:c5:d2:8c:
27:fa:a6:fd:e5:43:80:a9:4b:f0:2b:fd:ee:e7:90:dc:92:e3:
df:93:6c:e7:e3:a8:1e:5d:b7:1d:94:27:9b:89:5a:61:ac:b6:
97:fa:0c:d7:e1:60:e8:4c:e8:3b:f0:53:75:a3:b1:e5:e8:64:
29:8f:e8:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICARswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUFBODFBRjExMC8GA1UEBRMoM0M4RTA1MTJFMjc2QkFERTVBREMwQzgxQzY1OTM0
RTAzNDNDNjAxRjAeFw0yNTA1MDEwNDQ0MTJaFw0yNTA1MDMwNDQ0MTJaMBgxFjAU
BgNVBAMTDTY4MTJmYzFjLWMzODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjJk7/9ATJ8w1yXQ2K7XT5TN4bsz9Rj6gcddc/nX5lozlboFQHRb8XvqxY
ica/pK84WOZUupQjJO6F1DJaH2XoheXb5eHGj3aEm47PpOn2W3PqkHWiEydlQJHS
zExMpSJ1ebT2nlZ3AnIhx9VwzXdhLJFSrg71I8Ow5kND0p+xkWXXD1/12mVes8l8
+VjYlD0MbueYYSCCv1EDH6plGU7a3CV0GOvooN8RwglZN0ZsjEzgJQv6oyiZCyDI
weRFIfPwl9FmdO50rUHmRv6WNyd4VYDAL7GLrPtz2QYI0P0o01yfV2C7HIcm9Ps0
mXUDIt4JpSC93ZT8gb9jGCIE+z2NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1eBJ
QkTg3ivSFecMvUD2CXwHKqMwHwYDVR0jBBgwFoAUPI4FEuJ2ut5a3AyBxlk04DQ8
YB8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFBQTgxLzk0RDc0QjRFNEYyMzExRUY5Q0UyNzA2Nzc2MkU5NTFBL1BJNEZF
dUoydXQ1YTNBeUJ4bGswNERROFlCOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BJNEZFdUoydXQ1YTNBeUJ4bGswNERROFlCOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUFBODEvOTRENzRCNEU0RjIzMTFFRjlDRTI3MDY3NzYy
RTk1MUEvUEk0RkV1SjJ1dDVhM0F5QnhsazA0RFE4WUI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAt6vQxdGlqWRkUb85xcGSd14G2BXUO
Dpji7NXBtKlvD9Egoeyc33lT/+v0hptF6TRe2lYjHfY+L6YCg9oMwQ4/gzOaEZmp
Uy7kaYhlpJWCs8gvF6+DfPfa/LW42KNqSqbo269OxiFa4+IfyjvMyX4GVXgVldLv
YPnTCDwc5koCbDDYLWDuYYSnvZZG5FroGywDMRbTdBfukbcSDViUzSqJ2qrTrMQV
YmL80kjZrO0QLVVDgjWWNqbg6zezPKAiWSiFsGTF0own+qb95UOAqUvwK/3u55Dc
kuPfk2zn46geXbcdlCebiVphrLaX+gzX4WDoTOg78FN1o7Hl6GQpj+gk
-----END CERTIFICATE-----
Generated at Thu May 1 09:55:48 2025 by rpki-client