Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File: -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier: YNtG+hn/rxS5F63HZfct82pVhuOvRyjIOMCwyuq/6Vc=
Subject key identifier: A5:D1:60:FD:F5:88:ED:6D:DE:A1:54:9F:18:C5:8E:36:9E:B3:57:A7
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer: /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial: 0733
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number: 0733
Signing time: Sun 27 Apr 2025 01:55:32 +0000
Manifest this update: Sun 27 Apr 2025 01:55:31 +0000
Manifest next update: Tue 29 Apr 2025 01:55:31 +0000
Files and hashes: 1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: NN6ElH46pTKRYwVvAf5F6E0lhakxiX1nD+kMsY0nULc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1843 (0x733)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Validity
Not Before: Apr 27 01:55:31 2025 GMT
Not After : Apr 29 01:55:31 2025 GMT
Subject: CN=680d8e94-fdcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:4d:ab:3d:e7:74:98:74:3b:de:a3:64:b7:
f5:b9:1c:90:90:0e:bd:68:01:2b:cd:4f:bb:3e:7d:
56:7f:a2:65:f5:86:73:40:05:25:84:0b:22:72:df:
2b:89:0d:c3:cf:fe:a4:7a:8e:0b:39:73:ba:de:77:
60:45:1e:4d:f7:c7:9e:30:f8:b9:56:20:05:c8:b0:
05:7a:70:34:97:14:f0:e8:f8:cf:0c:f1:2b:06:88:
80:7e:bd:4c:63:2a:c4:b6:40:6f:fc:82:a0:eb:57:
a0:fc:40:1b:5d:c5:4f:b8:ed:5f:11:f1:0d:a6:8e:
fb:78:24:7d:49:5a:66:0e:55:e9:b8:70:b0:a1:08:
d1:a0:8a:c5:be:7f:be:6e:91:a4:fb:b6:a5:a8:5d:
88:bc:84:0b:aa:59:cc:17:76:03:52:14:d6:38:36:
46:bb:54:fc:72:1d:2f:72:3c:13:c5:ff:b7:2f:82:
85:c4:c7:29:b6:36:ee:e8:9e:bb:a3:26:62:cd:02:
d9:32:50:61:e5:6e:61:bb:69:2c:5d:00:ae:9c:c5:
3c:dc:d3:36:cc:c4:3f:84:53:41:98:73:89:52:20:
f1:75:a4:04:6d:5a:19:4d:93:b8:ca:59:76:e6:80:
c8:18:b5:22:c3:34:cd:1b:53:30:5d:ee:42:1d:bc:
99:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D1:60:FD:F5:88:ED:6D:DE:A1:54:9F:18:C5:8E:36:9E:B3:57:A7
X509v3 Authority Key Identifier:
keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5f:95:c7:a3:21:e3:62:51:eb:8f:ab:82:3e:1b:7f:4d:99:a2:
d3:d0:2d:74:95:72:0b:5f:f0:fa:70:d3:43:8e:af:ce:85:44:
f7:ee:20:5f:eb:1c:f2:1f:0a:25:52:ef:9d:b3:a5:3a:7c:8f:
fb:41:ae:29:4a:a0:49:0d:59:94:ab:e3:e9:3d:c8:37:3a:38:
35:6d:d2:7e:f6:46:3f:36:56:ec:cf:a1:01:c9:bb:75:29:c9:
6c:70:bd:6f:8f:db:bf:84:e8:fe:2b:0b:4e:54:e1:a2:4e:98:
c7:58:47:33:dc:fd:e7:c3:4c:8b:cb:6b:4b:5a:e5:01:21:c4:
0a:cc:b6:bd:3e:a6:97:ca:ec:ee:ec:3e:e8:00:d4:c3:dd:c2:
3b:82:be:93:0b:1a:ff:d9:2d:a1:f9:b9:18:8b:21:a3:5a:5c:
e1:e2:b4:7c:20:8d:c0:b5:46:6b:bc:c5:58:28:24:66:81:68:
16:98:74:d5:f4:f0:a4:48:0b:3e:4b:c7:f6:36:6f:13:9f:5a:
61:f5:5e:f4:59:75:5b:24:d3:63:e7:ea:c1:42:72:f5:e4:68:
b9:d7:6b:a7:40:3e:04:20:09:8d:1d:b5:ef:11:3a:1b:d6:f9:
c0:8b:d7:35:5d:d8:49:ac:54:84:2e:60:13:99:35:8d:bd:34:
8a:4d:5e:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjFGQjJBRjExMC8GA1UEBRMoRkE0MzVBQUU2MzRBMjQ5NDAxOEM1Q0RGODg1NzA5
QUY1QkNFMzZCQTAeFw0yNTA0MjcwMTU1MzFaFw0yNTA0MjkwMTU1MzFaMBgxFjAU
BgNVBAMTDTY4MGQ4ZTk0LWZkY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkp02rPed0mHQ73qNkt/W5HJCQDr1oASvNT7s+fVZ/omX1hnNABSWECyJy
3yuJDcPP/qR6jgs5c7red2BFHk33x54w+LlWIAXIsAV6cDSXFPDo+M8M8SsGiIB+
vUxjKsS2QG/8gqDrV6D8QBtdxU+47V8R8Q2mjvt4JH1JWmYOVem4cLChCNGgisW+
f75ukaT7tqWoXYi8hAuqWcwXdgNSFNY4Nka7VPxyHS9yPBPF/7cvgoXExym2Nu7o
nrujJmLNAtkyUGHlbmG7aSxdAK6cxTzc0zbMxD+EU0GYc4lSIPF1pARtWhlNk7jK
WXbmgMgYtSLDNM0bUzBd7kIdvJmLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpdFg
/fWI7W3eoVSfGMWONp6zV6cwHwYDVR0jBBgwFoAU+kNarmNKJJQBjFzfiFcJr1vO
NrowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIxRkIyL0VDQkM3RTgyOUY4MzExRUE4NDU5MTUzN0Y4QUVBMjI4Ly1rTmFy
bU5LSkpRQmpGemZpRmNKcjF2T05yby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1rTmFybU5LSkpRQmpGemZpRmNKcjF2T05yby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjFGQjIvRUNCQzdFODI5RjgzMTFFQTg0NTkxNTM3RjhB
RUEyMjgvLWtOYXJtTktKSlFCakZ6ZmlGY0pyMXZPTnJvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBflcejIeNiUeuPq4I+G39NmaLT0C10
lXILX/D6cNNDjq/OhUT37iBf6xzyHwolUu+ds6U6fI/7Qa4pSqBJDVmUq+PpPcg3
Ojg1bdJ+9kY/Nlbsz6EBybt1KclscL1vj9u/hOj+KwtOVOGiTpjHWEcz3P3nw0yL
y2tLWuUBIcQKzLa9PqaXyuzu7D7oANTD3cI7gr6TCxr/2S2h+bkYiyGjWlzh4rR8
II3AtUZrvMVYKCRmgWgWmHTV9PCkSAs+S8f2Nm8Tn1ph9V70WXVbJNNj5+rBQnL1
5Gi512unQD4EIAmNHbXvETob1vnAi9c1XdhJrFSELmATmTWNvTSKTV5f
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:07:03 2025 by rpki-client