Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File: i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier: Ds0nHnazxyNX0DmQEZMpctrIgmiXJLS/r2ewrzWu2G4=
Subject key identifier: 71:DC:AA:8A:9D:8D:5D:63:6E:1A:5D:09:AC:72:EE:EE:D5:1E:33:C6
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer: /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial: DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number: D8
Signing time: Sun 27 Apr 2025 04:57:02 +0000
Manifest this update: Sun 27 Apr 2025 04:57:01 +0000
Manifest next update: Tue 29 Apr 2025 04:57:01 +0000
Files and hashes: 1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: CVG1ReHCvx+fLUYAnqRUfvn+Ze1GU4Ux0yPF7h2SmU8=)
2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 29 Apr 2025 00:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 220 (0xdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Validity
Not Before: Apr 27 04:57:01 2025 GMT
Not After : Apr 29 04:57:01 2025 GMT
Subject: CN=680db91e-efd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:ba:4d:54:4f:0d:ef:6b:25:ae:59:56:ff:
53:c9:7c:d7:69:4d:51:86:79:27:8f:cd:8a:f3:bc:
8b:94:f1:03:7d:09:89:d1:0e:d8:31:c5:c8:43:47:
53:b1:14:85:c7:8f:95:c0:b9:03:f5:cc:bf:94:6f:
74:57:ee:f0:de:86:9f:a5:ef:60:33:80:d4:13:53:
2d:3b:13:75:20:11:5e:18:70:ee:0c:4d:14:c0:e6:
b3:0c:f1:04:25:11:fc:12:4a:1d:bb:74:0e:2a:e7:
1d:5f:c7:10:74:25:0a:67:eb:53:be:d1:6c:58:79:
15:9b:5e:b5:27:d2:18:0e:7c:b2:47:4a:9b:60:bc:
55:f1:da:80:76:d1:f1:a8:85:30:30:f0:71:f6:19:
c0:ee:9d:25:00:1e:d2:5a:03:66:3a:14:b1:66:b3:
16:a9:18:f5:f2:8f:42:4d:62:7a:74:f8:ab:94:34:
fb:90:ba:5c:67:cd:dd:d3:8f:b4:55:55:46:66:52:
ab:3b:0f:70:16:7b:ec:5c:1c:f6:1c:fb:47:7c:68:
c6:b6:0f:69:a6:15:e9:e8:78:9d:66:8a:5a:1c:dc:
00:36:46:fe:18:fd:12:14:38:73:20:3b:02:49:65:
02:b4:53:bf:b9:5b:77:88:0d:06:2b:bf:61:bf:5d:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DC:AA:8A:9D:8D:5D:63:6E:1A:5D:09:AC:72:EE:EE:D5:1E:33:C6
X509v3 Authority Key Identifier:
keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e7:01:12:46:f5:99:70:25:70:1e:27:d5:d8:65:15:b4:e4:
24:8f:9b:aa:11:e1:1a:8b:6f:e2:c8:01:97:a4:63:58:0e:88:
b7:09:7c:8f:56:98:2e:bd:ea:07:39:5a:10:84:39:3a:e0:11:
43:b4:f9:df:5a:d5:4c:2c:e5:a8:27:03:d0:3b:4c:8c:d8:ce:
72:a7:93:bf:7f:83:92:9c:7c:0d:c2:c6:23:c9:95:e8:88:b8:
63:9d:cd:7c:ca:c4:6f:4c:37:70:cc:f3:7e:20:4c:70:20:b5:
a0:c3:07:0c:fd:eb:f0:de:d3:c1:1f:13:d2:a4:4d:a7:7c:a2:
6c:ef:37:b4:69:e0:25:0d:1e:b5:44:6f:6a:7a:d2:95:c9:94:
7f:0b:f6:86:20:47:ae:e3:3d:b3:4a:e2:74:50:55:de:f1:ec:
29:83:24:17:44:7d:3b:83:fa:d2:36:15:49:f3:38:b3:1d:5c:
db:af:9d:07:49:e5:23:47:8e:a9:62:77:11:48:bb:42:16:17:
1f:98:31:f2:7a:c1:e3:6a:3c:01:80:a0:39:25:3e:00:46:c1:
36:42:b3:aa:dd:d5:86:5d:4b:17:b2:09:94:36:c3:0d:c4:a7:
1a:ed:86:de:c0:9a:50:a0:4c:01:ce:aa:f8:6e:c7:32:50:5d:
d5:88:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:12:16 2025 by rpki-client