Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
File: AjFjgfORycHBtlB5K7N-_nj13ZM.mft (raw, json)
Hash identifier: hB53YzHtRiHfvgiJ4zOK8EvJQD93ZF4VrLJa8+1pGfk=
Subject key identifier: E2:57:24:EC:61:12:5F:05:0E:D5:32:41:F4:FF:25:C5:B9:A8:06:BA
Authority key identifier: 02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
Certificate issuer: /CN=F36C684FAF/serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Certificate serial: 0875
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
Manifest number: 0875
Signing time: Mon 23 Jun 2025 01:18:03 +0000
Manifest this update: Mon 23 Jun 2025 01:18:02 +0000
Manifest next update: Wed 25 Jun 2025 01:18:02 +0000
Files and hashes: 1: AjFjgfORycHBtlB5K7N-_nj13ZM.crl (hash: dnjuV17AoL7P8zyWDp+GQ7IZBClKm2aP5ra9KX5cdKI=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Jun 2025 00:06:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2165 (0x875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C684FAF, serialNumber=02316381F391C9C1C1B650792BB37EFE78F5DD93
Validity
Not Before: Jun 23 01:18:02 2025 GMT
Not After : Jun 25 01:18:02 2025 GMT
Subject: CN=6858ab4a-c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:14:df:9f:19:ed:47:9b:3c:0a:b6:83:b6:
40:5e:c2:cb:e3:7e:e2:17:10:7e:a3:99:f1:0a:dc:
ca:84:ad:0c:2c:b5:3c:5c:d1:65:de:9b:fb:88:71:
96:65:ae:4e:94:12:85:96:b5:8f:0e:75:0b:c8:d6:
38:d9:bc:59:f5:5f:f5:57:49:d2:c6:64:46:ef:4e:
db:d1:b6:f6:f6:68:6c:cb:05:86:cb:1e:24:7f:8d:
57:05:5d:38:65:a5:7a:19:0d:97:53:ef:9a:37:8f:
d6:fd:7c:0b:c2:a1:3f:1b:57:7f:a1:d3:ea:9b:fc:
4d:1a:b2:c3:ab:18:23:3b:54:00:bc:f6:5c:87:a8:
32:85:4f:96:44:d5:df:14:d9:36:f0:91:7d:b9:f7:
26:fc:79:9d:ad:df:fe:87:07:4e:62:37:ca:41:2b:
ce:5d:b9:74:af:da:0e:7b:24:2e:f9:0c:9d:fa:f9:
0b:0d:55:87:a9:56:12:24:c6:6b:18:71:de:9c:a2:
6b:1e:72:5a:84:0c:61:19:8a:80:97:9e:b4:d3:0f:
30:a9:97:8d:1b:f6:44:ff:58:3a:f6:e4:f8:e9:bc:
8a:25:c0:91:c8:b4:af:a0:19:a9:85:10:25:ec:85:
39:af:32:6d:f7:5f:95:23:33:ac:6c:f8:01:8c:bb:
73:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:24:EC:61:12:5F:05:0E:D5:32:41:F4:FF:25:C5:B9:A8:06:BA
X509v3 Authority Key Identifier:
keyid:02:31:63:81:F3:91:C9:C1:C1:B6:50:79:2B:B3:7E:FE:78:F5:DD:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AjFjgfORycHBtlB5K7N-_nj13ZM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/B28E290CD48311E989417F1CF8AEA228/AjFjgfORycHBtlB5K7N-_nj13ZM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
76:ad:a2:4b:cc:40:76:0b:cf:d8:bc:6e:64:c5:ee:90:57:54:
a9:9e:0e:ba:ca:77:fb:c8:98:00:50:92:2d:37:43:e9:d1:54:
ab:f4:24:9c:db:a7:25:d0:f6:b1:2f:38:f0:c6:9c:fb:29:db:
02:98:9f:ef:10:61:2a:ab:7d:bc:87:81:f5:08:25:b7:d2:23:
3a:2d:cb:0c:09:b8:3a:b4:c7:84:c1:05:a9:cf:18:cd:78:3d:
e6:af:a3:c4:18:95:c9:0c:5e:46:16:24:3d:d9:89:13:58:53:
14:b5:05:c8:90:07:e5:66:52:01:4f:c7:5f:e1:9d:29:36:e4:
62:8c:8f:86:ea:1a:12:e3:ca:04:ec:61:13:1f:22:98:e9:dc:
3f:10:2f:14:fa:9c:c5:43:e0:4f:7f:66:9e:27:fa:55:d2:f6:
df:51:4b:dd:48:cf:c5:11:db:15:7b:22:94:cc:78:50:71:f8:
8c:9f:fc:ed:05:2c:b3:3b:7a:41:b7:05:b5:a0:ce:f4:a0:87:
fb:b9:e8:97:c2:a7:2f:8b:76:4d:14:3c:a3:9b:31:f3:f1:59:
e6:8c:2d:30:49:cd:88:40:5a:eb:ca:29:c6:63:38:ac:11:c4:
75:16:e8:5f:67:ca:c2:8d:68:34:8a:bf:2f:20:dd:a8:10:75:
fb:d8:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 03:15:38 2025 by rpki-client