Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File: hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier: EMVwr7dYfZr7jFO6BRISxga1Fb17nSZ0kXxW3j/xFeE=
Subject key identifier: 04:68:03:1D:27:31:4C:23:43:7A:A8:0C:CF:92:6C:B5:77:C7:48:8A
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer: /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial: 037A
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number: 0379
Signing time: Mon 16 Jun 2025 03:32:10 +0000
Manifest this update: Mon 16 Jun 2025 03:32:09 +0000
Manifest next update: Wed 18 Jun 2025 03:32:09 +0000
Files and hashes: 1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: VJWoj20k6Wy3whY6p26NM0BVy2h0SIKO+pVZxqXhhys=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Jun 2025 00:06:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 890 (0x37a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Validity
Not Before: Jun 16 03:32:09 2025 GMT
Not After : Jun 18 03:32:09 2025 GMT
Subject: CN=684f903a-544b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:98:dc:5a:1f:ff:3a:26:46:b7:07:0f:a1:a2:
fd:5a:1f:7d:2b:46:12:74:fb:0a:c3:4e:80:bc:e8:
86:87:21:21:9e:c7:0c:3c:b2:06:40:f3:a1:12:53:
2f:e2:fa:fe:67:f5:7b:90:8d:63:ce:ca:bd:67:c2:
78:61:3c:1c:6a:1f:e1:c8:db:56:b5:9e:ff:e8:f6:
ad:f9:3f:3b:60:33:f2:6e:37:18:b5:75:4a:b0:82:
5a:47:a6:8b:1a:76:96:c2:9c:ca:5e:87:ad:f3:b9:
29:77:09:26:4a:0c:93:40:cc:fa:91:d5:ec:9f:e8:
84:46:23:61:40:8d:16:ee:75:5c:53:51:73:ae:7c:
6e:15:dc:ed:5e:36:54:e2:ad:59:09:1f:a5:bd:7a:
2d:96:9e:b3:c6:d2:6a:c5:85:26:c6:ef:8f:a6:f6:
8f:10:93:c9:76:83:b1:5b:e0:0d:9f:af:23:6e:65:
8c:aa:4d:a2:be:cc:69:58:fc:05:d7:d4:4f:ec:91:
69:83:3b:f6:d1:99:ef:50:40:2e:a8:39:ed:d5:80:
65:75:e7:2d:20:24:47:80:1e:65:27:c5:4c:1a:1b:
2c:98:0e:3d:e4:7a:6b:51:c4:af:32:6f:f0:23:c0:
bd:e1:5a:6c:93:56:4a:ab:77:f9:56:34:7a:c2:cd:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:68:03:1D:27:31:4C:23:43:7A:A8:0C:CF:92:6C:B5:77:C7:48:8A
X509v3 Authority Key Identifier:
keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:77:fb:61:4f:be:70:4e:78:d3:fb:63:f3:8a:a4:33:40:ea:
67:0a:9e:6a:90:f7:fc:9f:3a:a0:23:d7:ed:43:8b:c7:f9:3a:
6d:bd:c1:c4:2d:5e:27:33:2c:92:64:9e:e8:f4:33:b9:59:cc:
84:74:56:15:8e:af:7d:fa:ad:eb:bd:f2:49:d2:e8:79:b4:b2:
1a:43:32:bd:93:d3:e6:2d:b7:d3:8c:76:30:3e:e8:64:49:a1:
de:37:8f:ed:07:6d:d0:31:9f:76:0f:7d:11:25:88:a3:18:f7:
16:04:1b:22:93:d6:70:04:f6:e2:e2:58:fc:99:60:80:59:7c:
e9:bc:fe:0d:b1:60:36:20:68:22:2b:c8:46:ef:42:5f:08:b8:
48:b3:ff:6f:15:6a:c5:73:8b:c8:72:c2:33:28:93:96:93:01:
ce:4a:49:bb:7c:2b:c9:1d:a7:3b:32:48:ca:73:97:da:db:e3:
0f:1f:cd:3b:20:ee:71:aa:3b:40:39:ab:4b:7e:bb:b4:4b:78:
e2:aa:d9:4e:26:ad:89:8b:09:f4:28:d5:ac:2f:92:7c:f3:fd:
1b:8d:6e:56:f1:8a:52:f0:27:1e:f0:74:60:b3:d1:93:5c:75:
f7:3b:a0:c4:d9:4e:f2:fd:29:56:4c:60:c4:63:3e:7a:4c:00:
ff:5c:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:55:22 2025 by rpki-client